Senior Infrastructure Automation Architect

Looking for an opportunity to make an impact?At Leidos we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers ’success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.If this sounds like the kind of environment where you can thrive, keep reading! Leidos Intelligence Group uses a wide range of capabilities in Digital Modernization, Mission Software Systems, and enabling technologies like Artificial Intelligence and Machine Learning to support our customers’ mission to defend against evolving threats around the world. Our team’s focus is ensuring our intelligence customers have the right tools, technologies, and tactics to keep pace with an ever-evolving security landscape and succeed in their pursuit to protect people and critical assets. To explore and learn more, click here! Your greatest work is ahead! We are seeking a senior-level automation engineer to design and build fully automated Windows-based enterprise environments using Infrastructure as Code principles. This role operates within a highly controlled, air-gapped enterprise environment and requires proven experience engineering and automating systems in isolated networks with no direct internet connectivity. The position is responsible for eliminating manual server builds and delivering repeatable, configuration-driven domain deployments across multiple environments.You will collaborate closely with senior-level Windows and Nutanix systems engineers within an established enterprise platform to modernize and standardize infrastructure delivery inside a secure, disconnected architecture.This is not a traditional system administration position. We are seeking a builder—someone who replaces manual processes with code, designs repeatable infrastructure patterns, and thinks in terms of declarative configuration rather than server-by-server management, specifically within constrained and isolated environments.Are you ready to make an impact? Begin your journey of a flourishing and meaningful career, share your resume with us today! This is a high-impact engineering role with significant architectural influence over enterprise platform strategy in a secure, air-gapped environment.Responsibilities:Architect and implement fully automated Windows domain deployments in an air-gapped infrastructureBuild reusable PowerShell Desired State Configuration (DSC) frameworks for disconnected networksDesign configuration-driven provisioning of Active Directory Domain Controllers, PKI/ADCS, Exchange, file, print, and application serversEngineer automation solutions that do not rely on public repositories or internet-based package managementPartner with senior Windows and virtualization engineers to integrate automation into existing enterprise platformsImplement Git-based configuration management within isolated repositoriesDesign automation for multi-domain, multi-tenant, and segmented environmentsEliminate configuration drift using declarative toolingDevelop standardized infrastructure blueprints deployable on demandIntegrate secure credential vaulting into automation workflowsRequired Qualifications:Clearance: Must have a Top Secret/SCI w/Poly to be consideredMust have a Bachelor’s degree and at least 12 years of experience OR a Master’s degree and at least 10 years of prior relevant experience preferred OR 16 years of relevant career experience in lieu of degree. eDemonstrated experience designing and operating automation within air-gapped or fully disconnected environmentsExpert-level PowerShell development (modular, reusable, testable code)Deep experience with PowerShell Desired State Configuration (DSC)Strong Infrastructure as Code (IaC) experience in Windows environmentsAdvanced Active Directory architecture and automation experienceExperience automating enterprise Windows Server deploymentsExperience with virtualization platform APIs (e.g., Nutanix, VMware,)Experience implementing configuration drift detection and remediationStrong understanding of secure automation, artifact management, and least-privilege designPreferred Qualifications:Experience building internal artifact repositories for disconnected environmentsAutomation of multi-tenant or networksEnterprise-scale configuration management strategy developmentBuilding golden imagesExperience designing automation supply chains for restricted networksWhat Success Looks Like:A new domain can be deployed by supplying configuration data (name, users, roles)Infrastructure builds are repeatable and version-controlled inside isolated repositoriesServer configuration drift is automatically remediatedNew environments can be provisioned in hours instead of weeksAutomation operates fully within air-gapped constraints without external dependenciesYou will be required to pass both a customer required and administered medical and psychological screening, as a condition of employmentIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.Original Posting:June 3, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.Pay Range:Pay Range $131,300.00 - $237,350.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limit