IT Engineer

About the role

As our IT Engineer, you will be a key member of the team supporting how Quartermaster AI works. You’ll handle everything from help desk requests to senior-level escalations, assist in designing and standing up networks across our sites, and play a supporting role in maintaining the cross-domain environments that let us move data securely between classification levels. This is a hands-on senior role for someone equally comfortable troubleshooting an endpoint, configuring a firewall, and assisting with the setup of a new enclave. You’ll work across IT and security, supporting infrastructure end to end as a member of the IT team, and bring the discipline that classified and defense environments demand.

Responsibilities

IT Operations & Endpoint Support

• Provide comprehensive technical assistance for all levels of issues—from daily help desk tickets to complex, senior-level escalations—collaborating with the IT team to maintain support across hardware, software, operating systems, and connectivity for macOS, Windows, and Linux.
• Manage the endpoint fleet and identity — device provisioning, MDM, and access control through identity providers (e.g., Google Workspace, JumpCloud).
• Own onboarding and offboarding, ensuring timely and secure provisioning and deprovisioning of accounts, devices, and access.
• Administer and support SaaS and collaboration platforms, and maintain accurate IT asset inventory and documentation, including runbooks, SOPs, and diagrams.
• Implement and enforce IT security policies — device management, encryption standards, and acceptable use — in partnership with the security team.
• Improve internal IT processes, tooling, and automation, and mentor junior IT staff.

Networking & Cross-Domain Infrastructure

• Design, deploy, and maintain LAN/WAN, wireless, and VPN infrastructure across multiple sites, ensuring highly available network operations.
• Install, configure, and support network hardware — routers, layer 2/3 switches, next-generation firewalls, and access points — using protocols such as VLAN, VRF, OSPF/BGP, QoS, and DNS.
• Build and maintain classified and air-gapped networks (e.g., NIPR/SIPR/JWICS-style enclaves), including multi-enclave and zero-trust architectures.
• Set up and operate cross-domain solutions (CDS) to move data securely between low-side and high-side networks, preserving data integrity and required security controls.
• Configure and manage COMSEC and Type-1 / HAIPE in-line network encryptors and associated key material in accordance with policy.
• Harden network infrastructure to DISA STIGs and support Risk Management Framework (RMF) / ATO activities, audits, and documentation (topology, IP allocation, cabling, and configurations).
• Monitor, troubleshoot, and optimize network performance; manage firmware and scheduled upgrades; and provide on-call support for critical infrastructure.

Requirements

• 6–9 years in IT engineering, systems administration, and/or network engineering, including senior-level (L2/L3) support and hands-on network build-out.
• Strong networking expertise: routing and switching, VLANs, firewalls, VPNs, wireless, and protocols such as TCP/IP, DNS, DHCP, BGP, OSPF, and QoS.
• Hands-on experience installing and configuring enterprise network hardware (routers, layer 2/3 switches, next-gen firewalls, access points) and troubleshooting complex issues.
• Experience administering endpoints and identity across macOS, Windows, and Linux, including MDM and identity providers (e.g., Google Workspace, JumpCloud).
• Experience standing up and supporting secure or classified networks, including air-gapped or multi-enclave environments.
• Familiarity with cross-domain data transfer — moving data from the low side to the high side across NIPR/SIPR/JWICS-style domains — and the security controls it requires.
• Working knowledge of DISA STIGs, system hardening, and the DoD Risk Management Framework (RMF) / ATO process.
• Proficiency scripting and automating with Python, Bash, or PowerShell, with strong documentation habits.
• Excellent troubleshooting and communication skills, with the ability to support both technical and non-technical team members.
• Must be a U.S. citizen.
• Bachelor’s degree in Information Technology, Computer Science, a related field, or equivalent hands-on experience.

Preferred Qualifications

• Active U.S. Secret or Top Secret security clearance — strongly preferred, especially for cross-domain and high-side work.
• Direct experience with cross-domain solutions (CDS) and moving data between low-side and high-side networks.
• Experience with COMSEC and Type-1 / HAIPE in-line network encryptors (e.g., General Dynamics TACLANE).
• Networking certifications such as CCNP, CCIE, JNCIP, or PCNSA, and/or Security+ / IAT-IAM Level II–III.
• Hands-on experience with the Palo Alto Networks ecosystem (firewalls, GlobalProtect, Panorama) or comparable NGFW platforms.
• Experience with network automation and infrastructure-as-code (Ansible, Terraform, Nornir).
• Familiarity with defense compliance frameworks (NIST 800-171, NIST 800-53, CMMC).
• Experience supporting deployed, edge, or field environments and remote-site installs.
• Prior experience in a startup, defense, intelligence, or critical-infrastructure environment.

Benefits

• Competitive salary with comprehensive medical, dental, and vision benefits.
• Hybrid work across our DC, Boston, and San Francisco hubs with a mission-driven, fast-moving team.

Why Join Quartermaster AI?

• Build and secure the IT and network backbone for a company defending critical maritime and national-security infrastructure.
• Work hands-on with cutting-edge AI and robotics systems — and the classified environments that support them.
• Significant ownership across IT operations, networking, and cross-domain infrastructure as the company scales.
• Career growth in a rapidly scaling defense-tech company at the forefront of maritime AI.