> Markdown version of [/jobs/ext/3983841-it-infrastructure-engineer-hybrid-eligible](https://www.wearedevelopers.com/jobs/ext/3983841-it-infrastructure-engineer-hybrid-eligible). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Infrastructure Engineer (Hybrid Eligible) - **Company:** Oak Ridge National Laboratory - **Location:** Oak Ridge, TN, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Artificial Intelligence, Amazon S3, Systems Engineering, Bash Shell, Ubuntu (Operating System), Information Systems, Computer Networks, Computer Engineering, System Configuration, Data Centers, Linux, Perl (Programming Language), VMware ESX Servers, Firmware, Monitoring of Systems, Identity and Access Management, Python (Programming Language), Network Layer, Machine Learning, System Center Configuration Manager, Network Architecture, Remote Access Technology, Ansible, Ruby, Zero Trust Network Access, RSA (Cryptosystem), VCloud, Scripting, Computer Networking Systems, Enterprise Software Applications, Large Language Models, Pingfederate, Information Technology, Vcenter, Puppet, Firewall Services Module, Docker - **Published:** October 28, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/88736220/1 ## About the Role * A BS degree in computer science, computer engineering, information technology, information systems, science, engineering, business, or a related discipline and a minimum of 8 years of IT Infrastructure and Linux experience is required for consideration. An overall combination of equivalent education and experience may be considered in lieu of degree. * Collaborate effectively in a team environment., * Demonstrated experience managing a large, virtualized environment and the hardware and networking that supports it. * Experience with VMware ESXi, vCenter, VCF Operations, VCF Automation, and NSX. * Strong understanding of SRIOV and PCI device sharing within ESXi; specifically virtualized GPU. * Strong MS PowerShell scripting skills for configuration, automation, and reporting. Bash scripting beneficial. * In-depth understanding of networking concepts and design, specifically layer 2 and layer 3. * Experience managing identity and access management systems, including MFA, SSO, and zero-trust frameworks (PingFederate, RSA SecureID, Entra ID) * Experience with Linux systems: RHEL8/9, and Ubuntu 22.04 and 24.04LTS. * Experience with CIS Hardening, or STIGs * Previous experience working in a government, scientific, or other highly technical environment. * Demonstrated capabilities working in a dynamic environment and translating customer needs into actionable project plans and see plans through execution while balancing needs for short-term, high-priority tasks. * Moderate fluency in at least one scripting language such as bash, python, ruby, perl or equivalent. * Implementation, maintenance, and assistance to users with containerization software such as Podman and Docker. * Demonstrated ability to balance business needs and security requirements. * Familiarity with AI topics and scientific AI models such as LLMs. * Experience in one or more system management tools. (SCCM, Puppet, Ansible, etc) ## Description * Assist in the design, integration, and administration of a multi-tenant, virtualized research environment; supporting a VMware Cloud Foundation infrastructure, and the related physical servers, storage, and network systems. * Assist in the ongoing lifecycle and administration of storage arrays and supporting infrastructure (fiber channel, NFS, SMB, S3). * Manage and maintain Active Directory services and identity management. * Manage and maintain the Omnissa Horizon remote access environment. * Coordinate with manufacturer support to update firmware/software on a wide range of hardware, including, but not limited to servers, fiber channel switches, and storage arrays. * Manage and maintain backups of data and system configurations. * Coordinate with property management on hardware inventory and tracking. * Coordinate with Facilities & Operations staff on hardware installation and maintenance in the data center. * Assist with periodic review/audit of firewall rules. * Ensure compliance with DOE cybersecurity standards, configuration baselines and operational policies. * Monitor system performance. * Troubleshoot system problems quickly and effectively. * Work with other systems engineers and vendors to resolve hardware and software packages issues. * Answer escalated KDI support calls in addition to primary project work. * Manage and direct networking architecture and firewall allowances * Develop and document policies and procedures for system configurations, directions, security hardening, etc. * Work with scientific research users to determine needs, and balance needs against cyber requirements to provide a solution that meets both requirements. * Provide off-hours support during system maintenance windows. * Deliver ORNL's mission by aligning behaviors, priorities, and interactions with our core values of Impact, Integrity, Teamwork, Safety, and Service. Promote equal opportunity by fostering a respectful workplace - in how we treat one another, work together, and measure success., * This position requires the ability to obtain and maintain a clearance from the Department of Energy. As such, this position is a Workplace Substance Abuse (WSAP) testing designated position. WSAP positions require passing a pre-placement drug test and participation in an ongoing random drug testing program. * For Hybrid eligible positions: In addition, we offer a flexible work environment that supports both the organization and the employee. A hybrid/onsite working arrangement may be available with this position.