We are seeking a hands-on Infrastructure Engineer with a Secret clearance to support and maintain the ServiceNow platform and its underlying infrastructure in a disconnected (dark site / air-gapped) environment. This role is responsible for designing, deploying, configuring, and maintaining secure, highly available infrastructure including servers, virtualization platforms, operating systems, and application deployments. The ideal candidate is proactive, security-focused, and experienced with VMware, Windows and Linux administration, automation, and restricted/offline environments. Basic database support may be required; deep DBA expertise is not necessary. Infrastructure & Virtualization - Deploy, configure, and manage VMware vCenter, ESXi hosts, virtual machines, templates, and resource pools. - Administer Windows Server and RHEL environments, including Active Directory and identity services. - Create and maintain OVAs, golden images, and VM templates for consistent deployments. - Automate provisioning and maintenance using PowerShell, Bash, or similar tools. - Apply security hardening and compliance standards (CIS, NIST, STIGs). - Support offline patching, updates, and secure change management in air-gapped environments. - Ensure scalability, availability, and operational continuity. Platform & Application Support - Provide infrastructure-level support for a disconnected ServiceNow deployment. - Assist with application deployments, configuration, and troubleshooting. - Manage storage, basic networking, and backup/restore processes (e.g., Cohesity or similar). - Provide light support for related systems such as MS SQL tools (WSUS, Volume Activation). Database (Secondary) - Perform basic MariaDB/MySQL administration including configuration, backups, monitoring, and minor tuning. - Assist with availability and recovery activities as needed. Collaboration & Documentation - Partner with Architecture, DevOps, Security, and application teams to deliver compliant solutions. - Produce and maintain infrastructure diagrams, build guides, deployment procedures, and compliance documentation. - Contribute to incident response and root-cause analysis in secure environments.

• Deploy and manage Kubernetes clusters (RKE2/Rancher) across multiple cloud providers • Build and maintain WireGuard VPN tunnels connecting Telnyx to isolated edge clusters • Own Ansible automation for cluster provisioning and configuration • Manage infrastructure-as-code with Terraform/OpenTofu (DigitalOcean, Zenlayer, bare metal) • Build out Prometheus metrics pipelines for billing and observability • Harden security: network policies, firewall rules, air-gapping compliance

• Design and implement cloud-based infrastructure solutions that are secure, scalable, and reliable. • Collaborate with teams to understand business requirements and ensure cloud solutions align with these needs. • Develop and document cloud architecture blueprints and ensure proper integration with on-premises environments when necessary. • Lead the design and deployment of cloud infrastructure components (networking, load balancers, firewalls, API gateways, etc.) in a public/private/hybrid cloud environment. • Plan and execute migrations of on-premises systems and applications to the cloud. • Ensure that cloud infrastructure is designed for high availability, disaster recovery, and performance optimization. • Design and implement security controls for cloud environments, including identity management, network security, encryption, and data protection. • Work with security teams to ensure cloud solutions meet compliance requirements. • Stay current on cloud security threats and best practices to safeguard infrastructure and data.

• Own and operate Mudflap’s AWS + Cloudflare infrastructure, ensuring reliability, security, and cost efficiency while supporting scalable, predictable deployments. • Manage and evolve our Infrastructure-as-Code and CI/CD systems (Terraform, ECS, CircleCI) to improve automation, environment consistency, and developer velocity. • Maintain and enhance observability through Prometheus, Grafana, and CloudWatch, delivering actionable dashboards, alerts, and SLO/SLA metrics. • Lead operational readiness and incident response, including capacity planning, system maintenance, structured RCA, and reliability improvements. • Drive security and compliance initiatives, including IAM hardening, secrets management, encryption, least-privilege access, and SOC 2 technical controls and documentation. • Build tools, automation, and documentation that reduce manual work, increase system consistency, and support a scalable DevOps function.