IT Engineer

About the company

Quartermaster is a maritime sensing startup that builds SmartMast, a mast-mounted package of weather-hardened sensors and an analytics platform for continuous distributed maritime monitoring.

About this role

ABOUT US At Quartermaster AI, we believe the ocean should be a safe and sustainably managed resource for all. By leveraging cutting-edge AI and robotics, we unlock capabilities that were only recently impossible. Our distributed open-ocean systems enable every vessel to sense, compute, and communicate, enhancing maritime domain awareness for those who need it most. Our distributed systems only work if the networks and IT backbone behind them are rock-solid — including the classified environments where moving data safely from the low side to the high side is mission-critical. We need a hands-on IT Engineer who can keep the team productive day to day and build the secure network infrastructure our work depends on. The Role As our IT Engineer, you will be a key member of the team supporting how Quartermaster AI works. As a key member of our IT team, you will assist in maintaining IT support and the networking infrastructure that keeps our team and systems connected and secure. You’ll handle everything from help desk requests to senior-level escalations, assist in designing and standing up networks across our sites, and play a supporting role in maintaining the cross-domain environments that let us move data securely between classification levels. This is a hands-on senior role for someone equally comfortable troubleshooting an endpoint, configuring a firewall, and assisting with the setup of a new enclave. You’ll work across IT and security, supporting infrastructure end to end as a member of the IT team, and bring the discipline that classified and defense environments demand. Experience assisting with networks to move data from the low side to the high side and an active clearance will let you make an impact from day one. Key Responsibilities — IT Operations & Endpoint Support - Provide comprehensive technical assistance for all levels of issues—from daily help desk tickets to complex, senior-level escalations—collaborating with the IT team to maintain support across hardware, software, operating systems, and connectivity for macOS, Windows, and Linux. - Manage the endpoint fleet and identity — device provisioning, MDM, and access control through identity providers (e.g., Google Workspace, JumpCloud). - Own onboarding and offboarding, ensuring timely and secure provisioning and deprovisioning of accounts, devices, and access. - Administer and support SaaS and collaboration platforms, and maintain accurate IT asset inventory and documentation, including runbooks, SOPs, and diagrams. - Implement and enforce IT security policies — device management, encryption standards, and acceptable use — in partnership with the security team. - Improve internal IT processes, tooling, and automation, and mentor junior IT staff. Key Responsibilities — Networking & Cross-Domain Infrastructure - Design, deploy, and maintain LAN/WAN, wireless, and VPN infrastructure across multiple sites, ensuring highly available network operations. - Install, configure, and support network hardware — routers, layer 2/3 switches, next-generation firewalls, and access points — using protocols such as VLAN, VRF, OSPF/BGP, QoS, and DNS. - Build and maintain classified and air-gapped networks (e.g., NIPR/SIPR/JWICS-style enclaves), including multi-enclave and zero-trust architectures. - Set up and operate cross-domain solutions (CDS) to move data securely between low-side and high-side networks, preserving data integrity and required security controls. - Configure and manage COMSEC and Type-1 / HAIPE in-line network encryptors and associated key material in accordance with policy. - Harden network infrastructure to DISA STIGs and support Risk Management Framework (RMF) / ATO activities, audits, and documentation (topology, IP allocation, cabling, and configurations). - Monitor, troubleshoot, and optimize network performance; manage firmware and scheduled upgrades; and provide on-call support for critical infrastructure. Required Qualifications - 6–9 years in IT engineering, systems administration, and/or network engineering, including senior-level (L2/L3) support and hands-on network build-out. - Strong networking expertise: routing and switching, VLANs, firewalls, VPNs, wireless, and protocols such as TCP/IP, DNS, DHCP, BGP, OSPF, and QoS. - Hands-on experience installing and configuring enterprise network hardware (routers, layer 2/3 switches, next-gen firewalls, access points) and troubleshooting complex issues. - Experience administering endpoints and identity across macOS, Windows, and Linux, including MDM and identity providers (e.g., Google Workspace, JumpCloud). - Experience standing up and supporting secure or classified networks, including air-gapped or multi-enclave environments. - Familiarity with cross-domain data transfer — moving data from the low side to the high side across NIPR/SIPR/JWICS-style domains — and the security controls it requires. - Working knowledge of DISA STIGs, system hardening, and the DoD Risk Management Framework (RMF) / ATO process. - Proficiency scripting and automating with Python, Bash, or PowerShell, with strong documentation habits. - Excellent troubleshooting and communication skills, with the ability to support both technical and non-technical team members. - Must be a U.S. citizen. - Bachelor’s degree in Information Technology, Computer Science, a related field, or equivalent hands-on experience. Preferred Qualifications - Active U.S. Secret or Top Secret security clearance — strongly preferred, especially for cross-domain and high-side work. - Direct experience with cross-domain solutions (CDS) and moving data between low-side and high-side networks. - Experience with COMSEC and Type-1 / HAIPE in-line network encryptors (e.g., General Dynamics TACLANE). - Networking certifications such as CCNP, CCIE, JNCIP, or PCNSA, and/or Security+ / IAT-IAM Level II–III. - Hands-on experience with the Palo Alto Networks ecosystem