SixGen, Inc.

Design, build, and secure infrastructure with automation and system hardening for a high-assurance environment. | 5+ years platform/infrastructure engineering experience with TS/SCI clearance and proficiency in hypervisors, network security, infrastructure-as-code, and Linux hardening. | Senior Platform Engineer Building, securing, and scaling virtualization, network, and endpoint infrastructure for a sensitive, high-assurance environment Position Overview Position: Senior Platform Engineer Job Type: Full-time Location: Sterling or Reston, VA (Hybrid) Clearance Requirements: Active TS/SCI required; CI polygraph preferred Experience: 5+ years What You'll Do We are seeking a Senior Platform Engineer to build, secure, administer, and scale the in-house infrastructure that supports a sensitive, high-assurance environment. You will design and operate the virtualization, networking, identity, and monitoring stack our teams depend on — standing infrastructure up from bare metal, automating it end to end, and keeping it secure, reliable, and auditable. The ideal candidate pairs deep hypervisor and Linux systems expertise with strong network and endpoint security, infrastructure-as-code fluency, and the discipline to run a controlled, well-documented environment. You will own the platform end to end — virtualization, segmentation, identity and secrets, software supply chain, and observability — and turn architecture into a resilient, production-ready capability. Key Responsibilities Virtualization & Hypervisor Engineering Design, build, and administer a highly available Type-1 hypervisor cluster as the backbone for internal services and workloads — including shared/software-defined storage, redundant networking, and GPU passthrough for local compute and AI inference. Build hardened, versioned golden images with an automated, scheduled rebuild cadence so workloads always launch from a current, patched baseline. Automate provisioning of isolated workload VMs with controlled, auditable access to shared storage. Tune and troubleshoot the virtualization layer for concurrent workloads and capacity; manage cluster health against a documented sizing model. Network Architecture & Security Architect and enforce a segmented, least-privilege network with layered firewall enforcement (defense in depth) and a default-deny posture. Implement strong isolation between user access, shared services, workloads, and management, so each tier reaches only what it must. Build and operate self-hosted remote access (modern VPN with strong MFA) and internal connectivity, keeping control planes private and not internet-exposed. Own internal DNS, PKI/mTLS, and time synchronization; enforce encrypted, controlled name resolution. Endpoint & System Hardening Build and maintain hardened endpoints and hosts to recognized baselines (CIS Benchmarks / DISA STIG): full-disk encryption, measured boot, host firewalls, and least privilege. Reduce platform attack surface across firmware and OS; disable unnecessary services and management interfaces. Maintain a consistent, reproducible hardened baseline across the fleet, validated before deployment. Author and enforce the hardening standards, runbooks, and image definitions that keep endpoints and hosts clean, patched, and reproducible. Automation, Infrastructure-as-Code & Platform Operations Provision the environment as code (infrastructure-as-code plus configuration management) with encrypted state and runtime secret injection — no secrets at rest in code. Build self-service provisioning that stands up and decommissions workloads cleanly, with each action recorded. Run a controlled software supply chain: internal package and code mirrors so systems build from vetted, internal sources. Maintain a staging path to validate changes before production, plus staged patch management and tested backup/restore. Monitoring, Audit & Assurnace Build the observability stack (metrics, health, alerting), isolated from workloads so it cannot be reached or tampered with from them. Stand up centralized logging and a SIEM with tamper-evident, long-retention audit storage, so every action is attributable and traceable. Deploy network and flow monitoring at key boundaries, with alerting on anomalies and integrity issues. Implement isolation and response controls, and generate the audit evidence that supports common security frameworks (SOC 2, ISO 27001, NIST CSF, NIST SP 800-115). Qualifications 5+ years in platform, infrastructure, systems, or DevOps engineering — building and administering production virtualization, networking, and Linux environments. Active TS/SCI clearance. Deep hands-on expertise with a Type-1 hypervisor (Proxmox VE, KVM/QEMU, VMware ESXi, or equivalent), including clustering, shared storage, templating, and GPU passthrough. Strong network engineering and security skills: segmentation, stateful firewalls, zero-trust / least-privilege design, VPNs, DNS, PKI/mTLS, and TCP/IP fundamentals. Demonstrated endpoint and OS hardening across Linux and Windows to CIS/STIG baselines: full-disk encryption, measured boot, host firewalls, and attack-surface reduction. Fluency in infrastructure-as-code and automation (e.g., Terraform, Ansible, Packer) plus Python and Bash, with a track record of shipping and maintaining working tooling and pipelines. Working knowledge of secrets management, containerization, Git and CI/CD, and an observability/SIEM stack. Proven ability to stand up infrastructure from bare metal to operational, document it in runbooks, and operate it under security- and audit-sensitive conditions. Preferred Qualifications TS/SCI with CI polygraph; background supporting national security, intelligence community, or federal missions. Experience building or operating secure, isolated, or highly segmented infrastructure for sensitive or security-critical environments. Multi-cloud experience (AWS, GCP, Azure) with self-hosted networking. Experience building SIEM/audit pipelines with tamper-evident logging and detection engineering. Relevant certifications (e.g., RHCE, CKA, Security+/CISSP) and familiarity with SOC 2, ISO/IEC 27001, NIST CSF, or NIST SP 800-115. Experience standing up a new capability, unit, or program from zero — including standards authorship, staging environments, and identity-lifecycle (onboarding/offboarding) design. Desired Traits A builder's instinct that sees a manual process and immediately asks how to provision, automate, and reproduce it as code. Disciplined security mindset with unwavering attention to isolation, least privilege, and operational detail. Self-directed, high-ownership, and composed while owning critical infrastructure in fast-paced, high-consequence environments. Motivated to build, scale, administer, and audit — and to close the gap between design and a live, resilient capability. Example Technologies & Environments Virtualization & Compute — Enterprise Type-1 hypervisors, software-defined/shared storage, GPU passthrough Networking & Security — Software-defined networking, segmentation, stateful firewalls, self-hosted VPN with MFA, internal DNS and PKI Endpoint & Hardening — Hardened Linux/Windows images, full-disk encryption, measured boot, CIS/STIG baselines, MFA IaC & Automation — Infrastructure-as-code, configuration management, CI/CD, containerization, Python and Bash Identity & Secrets — SSO/OIDC, RBAC, centralized secrets management, hardware-backed MFA Monitoring & Audit — Metrics and alerting, centralized logging and SIEM, tamper-evident audit storage, network flow monitoring Compensation & Benefits The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. The final salary offer will be determined after a thorough review of the candidate's background and alignment with the role. Additionally, SIXGEN offers top-tier benefits for full-time employees, including: Employer-paid health insurance premiums (medical, dental, vision) for you and your family Employer-paid short/long term disability insurance and basic life/AD&D insurance 401K with a 4% employer contribution Professional development reimbursement options available (training, certification, education, etc)​ Flexible and remote work policies for most positions Flexible PTO and holiday schedule Our Committment SIXGEN is an Equal Opportunity Employer. We ensure that all applicants are considered for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class. We are committed to fostering an inclusive culture that values diversity in our people, reflecting the communities we serve and our customer base. We strive to attract and retain a diverse talent pool and create an environment where everyone is empowered to be their authentic selves at work.

Lead strategic planning and operational maturity of an enterprise Security Fusion Center integrating multiple cybersecurity functions. | Bachelor's degree and 6+ years managing SOC/SFC with strong knowledge of NIST and MITRE frameworks. | Job Title: Security Fusion Center (SFC) Manager Position Summary The Security Fusion Center (SFC) Manager is responsible for leading the strategy, governance, and operational maturity of an enterprise Security Fusion Center. This role serves as the primary architect and coordinator for an intelligence-driven cybersecurity program that integrates threat intelligence, threat hunting, incident response, security engineering, insider threat, continuous monitoring, and attack surface management into a unified operational capability. The ideal candidate possesses extensive experience developing and managing enterprise cybersecurity programs, establishing governance frameworks, and driving cross-functional collaboration among cybersecurity operations, engineering, and executive leadership. This individual will lead the development of Security Fusion Center strategy, operational processes, performance metrics, and implementation roadmaps while continuously improving the organization's ability to identify, detect, respond to, and mitigate cyber threats. Key Responsibilities Security Fusion Center Program Leadership Lead the strategic planning, governance, and operational management of the enterprise Security Fusion Center (SFC). Develop and maintain the SFC mission, vision, operational scope, and long-term strategic roadmap. Continuously assess and mature the Security Fusion Center's people, processes, technology, and operational capabilities. Develop and maintain implementation plans aligned with evolving organizational priorities and the cyber threat landscape. Establish governance structures supporting enterprise-wide cybersecurity collaboration and decision-making. Program Governance & Documentation Develop, maintain, and update SFC governance documentation, including: Program Charter Concept of Operations (CONOPS) Standard Operating Procedures (SOPs) Operational Playbooks Process Documentation Ensure governance documentation remains current and aligned with organizational objectives and industry best practices. Develop implementation strategies supporting adoption of Security Fusion Center capabilities across the enterprise. Security Operations Integration Coordinate and support enterprise cybersecurity functions including: Threat Intelligence Advanced Threat Hunting Incident Response Continuous Monitoring Alerting and Detection Security Solutions Engineering Insider Threat Program Attack Surface Management Assessment and Authorization Foster collaboration among technical teams to improve operational effectiveness and cyber resilience. Identify opportunities to improve information sharing, operational workflows, and threat correlation across cybersecurity disciplines. Strategic Planning & Continuous Improvement Assess organizational cybersecurity capabilities and identify gaps in people, processes, technology, and operational maturity. Develop strategic recommendations for new cybersecurity tools, technologies, staffing, and operational enhancements. Evaluate emerging threats and evolving cybersecurity trends to support proactive defense strategies. Develop future-state operating models supporting enterprise cyber defense objectives. Develop executive dashboards and reporting mechanisms that communicate program performance and operational maturity. Analyze trends to recommend improvements in cyber operations and organizational readiness. Required Qualifications Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or a related field. 6+ years of experience in cybersecurity operations, cyber defense, or enterprise security program management. Demonstrated experience developing or managing a Security Operations Center (SOC), Security Fusion Center (SFC), Cyber Fusion Center, or equivalent enterprise cybersecurity program. Experience leading cross-functional cybersecurity initiatives involving multiple operational teams. Strong understanding of: Threat Intelligence Advanced Threat Hunting Incident Response Continuous Monitoring Security Engineering Insider Threat Programs Attack Surface Management Experience developing governance documentation, operational procedures, playbooks, and Concepts of Operations (CONOPS). Experience developing cybersecurity strategies, roadmaps, implementation plans, and executive-level reporting. Strong knowledge of cybersecurity frameworks including the NIST Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), and MITRE ATT&CK. Excellent communication, leadership, and stakeholder engagement skills. Preferred Qualifications CISSP (Certified Information Systems Security Professional) GIAC Certified Incident Handler (GCIH) GIAC Cyber Threat Intelligence (GCTI) Certified Information Security Manager (CISM) Project Management Professional (PMP) Experience supporting federal government cybersecurity programs. Experience implementing enterprise SIEM, SOAR, XDR, EDR, threat intelligence platforms, or security analytics solutions. Familiarity with Zero Trust Architecture and enterprise cyber modernization initiatives. Knowledge, Skills, and Abilities Ability to lead large-scale cybersecurity transformation initiatives. Strong understanding of intelligence-driven cybersecurity operations and Security Fusion Center concepts. Ability to translate technical cybersecurity capabilities into strategic business value. Expertise in cybersecurity program governance, operational planning, and organizational change management. Ability to facilitate collaboration across engineering, operations, intelligence, risk management, and executive leadership teams. Strong analytical and problem-solving skills with the ability to assess organizational cyber maturity and recommend strategic improvements. Excellent written and verbal communication skills, including development of executive briefings, strategic plans, and governance documentation. Compensation & Benefits Competitive salary Employer-paid health insurance premiums (medical, dental, vision) Employer-paid short/long term disability insurance and basic life/AD&D insurance 401K with a 4% employer contribution Professional development reimbursement options available (training, certification, education, etc)​ Flexible and remote work policies for most positions Paid Time Off (PTO) at a rate of three (3) weeks plus one (1) day per year of service up to four (4) weeks annually 11 paid holidays per calendar year​ At SIXGEN, we are committed to fair and equitable compensation practices. The anticipated salary range for this role is $100,000 - $155,000 per year, depending on experience and qualifications. This range reflects our compensation philosophy, which takes into account various factors including the candidate's relevant experience, education, skills, LCATs rates and position level, and market competitiveness. In addition to base salary, employees may be eligible for other forms of compensation to include our growth incentive program, incentives and benefits. The final salary offer will be determined after a thorough review of the candidate's background and alignment with the role. Please note that this range is subject to change and should be considered as a guideline rather than a definitive figure. We are committed to fostering an inclusive culture that values diversity in our people, reflecting the communities we serve and our customer base. We strive to attract and retain a diverse talent pool and create an environment where everyone is empowered to be their authentic selves at work. SIXGEN is an Equal Opportunity Employer. We ensure that all applicants are considered for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class.