Lead Infrastructure and Cybersecurity Architect at Caliola Engineering, LLC in Colorado Springs, CO, USA

Company: Caliola Engineering, LLC
Location: Colorado Springs, CO, USA
Posted: Sep 20, 2026
Type: Full-Time
Salary: $150,000.00 - $195,000.00 per year
Experience: 10+ years

Overview

Caliola Engineering is seeking a Lead Infrastructure and Cybersecurity Architect to help shape the technology foundation that supports our growing organization and mission-critical work. This role is ideal for a seasoned technical leader who enjoys setting direction, solving complex infrastructure a…

Job description

Caliola Engineering is seeking a Lead Infrastructure and Cybersecurity Architect to help shape the technology foundation that supports our growing organization and mission-critical work.
This role is ideal for a seasoned technical leader who enjoys setting direction, solving complex infrastructure and security challenges, and building secure, resilient environments designed to scale.
You'll have the opportunity to influence technology strategy, infrastructure operations, cybersecurity, compliance readiness, and modernization across Caliola while serving as a trusted technical leader for some of our most important technology decisions.
You'll work across enterprise networks, cloud and hybrid environments, secure systems, cybersecurity, CMMC readiness, and emerging technologies such as secure AI. This is a hands-on role for someone who is equally comfortable defining architecture and rolling up their sleeves to help turn that vision into reality.
You'll partner closely with engineering, cybersecurity, compliance, facilities, and program teams to strengthen Caliola's infrastructure, reduce risk, support new programs, and keep our technology secure, reliable, compliant, and ready for what comes next.

Responsibilities

Technology Strategy & Architecture
Own the organization's technology strategy and architecture across on-premises, cloud, hybrid, network, endpoint, and secure computing environments.
Establish and maintain technical roadmaps, architecture standards, and modernization plans for infrastructure, cloud, networking, disaster recovery, secure AI, and related technologies.
Evaluate emerging technologies and translate business, program, engineering, and security needs into scalable technical architectures and implementation plans.
IT Ops & Service Delivery
Own the reliability, availability, and performance of core infrastructure, enterprise networks, cloud environments, identity systems, endpoints, collaboration platforms, and other business-critical technology.
Oversee the implementation, configuration, maintenance, and improvement of infrastructure and network technologies, including LAN/WAN, SD-WAN, VPN, wireless, virtualization, cloud integration, and Infrastructure as Code.
Establish and maintain disaster recovery, backup, high-availability, and business-continuity capabilities to support resilient technology operations.
Cybersecurity & Risk Management
Own cybersecurity architecture and technical risk management across the organization, including access control, endpoint protection, network security, vulnerability management, logging, monitoring, and security hardening.
Identify, assess, mitigate, and monitor technology and cybersecurity risks through secure configuration standards, vulnerability remediation, architecture reviews, and technical controls.
Lead technical response and recovery efforts during cybersecurity incidents, including investigation, containment, remediation, documentation, and follow-up hardening.
Regulatory & Compliance Readiness / CMMC
Own the technical implementation and sustainment of cybersecurity and compliance controls supporting CMMC Level 2, NIST SP 800-171/800-53, DFARS, DISA STIGs, and applicable DoD requirements.
Prepare and maintain technical compliance documentation and evidence, including SSPs, POA&Ms, configuration documentation, network diagrams, technical standards, incident-response procedures, and security-control evidence.
Support internal assessments, remediation efforts, customer reviews, and external certification or audit activities, including C3PAO assessments and requirements associated with secure or controlled environments.
Technology Asset Management
Own the lifecycle management of the organization's technology assets, including hardware, software, cloud resources, systems, licenses, and supporting infrastructure.
Maintain accurate standards, inventories, configurations, documentation, and lifecycle information to support operational, security, compliance, and budgeting needs.
Evaluate technology platforms, vendors, licensing, and replacement or upgrade needs to ensure assets remain secure, supported, cost-effective, and aligned with organizational requirements.

Requirements

Active (or recent, within the last 5 years) Department of War security clearance at the Secret level or higher.
Bachelor's degree in Computer Science, Information Technology, Network Engineering, Engineering, or a related field, or equivalent professional experience.
10+ years of progressive experience in enterprise networking, network engineering, network architecture, infrastructure architecture, or a closely related technical role.
Experience supporting DoD, Federal Government, defense contractor, or similarly regulated environments.
Advanced knowledge of enterprise network and infrastructure architecture, including routing, switching, firewalls, VPNs, wireless, segmentation, secure connectivity, and disaster recovery.
Experience supporting Microsoft GCC High, Azure Government, or comparable secure cloud environments.
Working knowledge of CMMC Level 2, NIST SP 800-171, RMF, DFARS, DISA STIGs, and related DoD cybersecurity requirements.
Hands-on experience with security hardening, vulnerability management, access control, endpoint protection, logging, SIEM/security monitoring, and incident response.
Ability to translate business, program, compliance, and engineering needs into secure technical architectures and implementation plans.
Ability to mentor technical teammates, collaborate across functions, and influence outcomes without direct management authority.
Must possess exceptional written and verbal English communication skills, with the ability to convey complex technical concepts to both technical and non-technical audiences.
Ability to multitask across multiple programs, manage competing priorities, and maintain high focus in a fast-paced environment.
Ability to navigate an office or server room setting, including prolonged periods at a workstation.
Ability to bend, kneel, crouch, or reach to install, inspect, or maintain IT hardware, server racks, and cabling.
Close visual acuity required for analyzing data, engineering diagrams, and extensive reading.
Fine motor skills and dexterity to manipulate small technical devices and components.
Ability to occasionally lift, move, and set up infrastructure equipment weighing up to 35 lbs.
Please contact Human Resources with questions about ADA accommodations.
Active Top Secret or TS/SCI security clearance.
Direct experience with CMMC Level 2 sustainment, C3PAO or DIBCAC assessments, classified or controlled environments, and continuous compliance.
Deep knowledge of Microsoft GCC High, Azure Government, and related federal cloud and security frameworks.
Familiarity with enterprise network platforms such as Cisco, Palo Alto, Fortinet, Aruba, or Juniper.
Experience with Windows/Linux administration and infrastructure automation using tools such as Terraform, Ansible, PowerShell, Bash, or Python.
Experience with secure AI architecture, governance, access controls, monitoring, and data protection.
Relevant certifications such as CISSP, CISM, CCNP/CCIE, Microsoft Azure or Cybersecurity Architect, CCP, Security+, Network+, or SANS/GIAC.

Benefits

The posted salary range represents our good faith estimate for this role based on current organizational needs and the qualifications reasonably expected for the position. Final compensation will be determined based on factors such as experience, skills, education, clearance status, and business needs.

About Caliola Engineering, LLC

Caliola is an award-winning woman-owned small business that is improving and protecting our Nation's way of life through secure collaboration and resilient communications. Our engineers, subject matter experts, and veterans are developing and delivering trusted solutions for mission-critical communications. We seek teammates who share our core values: I3 for C3 - Insight, Innovation, and Integrity for Command, Control, and Communications These values guide how we work every day. At Caliola, you will find technically challenging, mission-focused work within a flexible and collaborative culture that is uncommon in the defense industry. We offer flexible PTO, subsidized health insurance, 401(k) matching, professional development, and a competitive compensation structure designed to support long-term growth. Our performance has driven rapid growth and national recognition, being named twice to the Deloitte Technology Fast 500™ and inclusion on the 2026 Inc. 5000 list of America's fastest-growing private companies. We have also been recognized as a Colorado Company to Watch, a ColoradoBiz Top Company in Aerospace & Defense, and the #2 Gazette's Best Workplace (medium size) in 2025. Headquartered in Colorado Springs, CO, we operate in a leading aerospace and defense hub with proximity to major military installations. Set against the Rocky Mountains, the region offers year-round outdoor recreation and a high quality of life for professionals and families considering relocation.

Apply for this job on the employer's site