Asks for

The ad says“Hands-on experience with Windows Server and Active Directory—including domain, authentication, authorization, DNS, Group Policy, certificates, or trusts—and with Linux administration across multiple distributions.”
The ad says“Production experience with Ansible, Packer, VMware vCenter, and at least one additional hypervisor, virtualization platform, or cloud environment.”
The ad says“Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.”
The ad says“Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.”
The ad says“Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.”
The ad says“Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.”
The ad says“Proficiency with Git and evidence of improving automated validation, testing, security, versioning, and release practices for infrastructure code, configuration, or virtual-machine images.”
The ad says“Experience integrating enterprise security technologies and practical knowledge of offensive and defensive workflows, security telemetry, and ICS/OT architecture and constraints.”
The ad says“Hands-on experience with Windows Server and Active Directory—including domain, authentication, authorization, DNS, Group Policy, certificates, or trusts—and with Linux administration across multiple distributions.”
The ad says“Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.”
The ad says“Production experience with Ansible, Packer, VMware vCenter, and at least one additional hypervisor, virtualization platform, or cloud environment.”
The ad says“Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.”
The ad says“Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.”
The ad says“Experience integrating enterprise security technologies and practical knowledge of offensive and defensive workflows, security telemetry, and ICS/OT architecture and constraints.”
The ad says“Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.”
The ad says“Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.”
The ad says“Production experience with Ansible, Packer, VMware vCenter, and at least one additional hypervisor, virtualization platform, or cloud environment.”
The ad says“Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.”
The ad says“Hands-on experience with Windows Server and Active Directory—including domain, authentication, authorization, DNS, Group Policy, certificates, or trusts—and with Linux administration across multiple distributions.”

SimSpace serves as an AI Proving Ground where organizations can confidently train, test, and outmaneuver adversaries in any environment. Trusted by allied governments, militaries, enterprises, and research institutions worldwide, SimSpace enables adaptive, AI-ready defenses that stay ahead of evolving threats. Founded in 2015 by experts from U.S. Cyber Command and MIT Lincoln Laboratory, the platform unifies training, testing, and validation in a realistic, live-fire simulation—helping teams evaluate security investments, optimize performance, and compress cyber readiness cycles from months to days.

Why join SimSpace? We are an organization that is focused on building our culture and mindfully enhancing our atmosphere every day which is why we have collaborated on an integral value system. Our governing philosophy of being Human Centered is deeply embedded within our value system. We apply this philosophy to every one of our internal team members, external clients, and their customers.

How Do We Work? We believe that people are at the center of everything we do. SimSpace fosters a culture of continuous learning, curiosity, and professional growth. That belief shows up in action: in-house training, internal and external learning platforms, cyber conferences, industry events, and dedicated time for skill development. Our people are empowered to shape their careers - and it shows. Year over year, SimSpace consistently outperforms industry benchmarks in internal mobility, promotions, and total rewards growth.

Who Thrives Here? We are a team of innovators, protectors, and problem-solvers. We believe diversity of thought and experience fuels better solutions, and we’re committed to building teams that reflect the communities we serve. Whether you’re remote or office-based, you’ll collaborate with talented colleagues across departments and time zones, united by the mission to create a safer digital world.

We invite you to apply today!

SimSpace is seeking a Staff Engineer to provide technical leadership for the Range Against the Machine team. RATM creates and maintains reusable virtual-machine templates and the standardized cyber ranges used across the SimSpace platform and by customers. The work spans range architecture, networking, operating systems, virtualization, cybersecurity, automation, and representative enterprise and industrial environments.

This is a hands-on Staff-level role. You will solve selected complex problems directly while increasing the team's ability to deliver independently through architecture, standards, automation, documentation, mentoring, and delegated technical ownership. Success means improving the system and the team's leverage—not becoming the permanent owner of every difficult problem.

What the Team Owns

Reusable range architectures, blueprints, configuration bundles, and approved custom range capabilities.
Virtual-machine images and their build, validation, versioning, patching, release, deprecation, and replacement lifecycle.
Ansible-based configuration automation and repeatable patterns for secure, supportable range construction.
Representative network, identity, infrastructure, application, and security environments that support defensive operations, offensive workflows, automated attacks, user emulation, tool integration, training, exercises, and approved customer use cases, including ICS/OT where required.
Quality, documentation, and supportability of team-owned repositories and artifacts, plus bounded integration solutions when range requirements expose platform gaps.

What You'll Do

Set technical direction for reusable cyber ranges and make explicit trade-offs among realism, security, reliability, scalability, usability, performance, maintainability, customer outcomes, and near-term delivery.
Improve Ansible and Packer architecture, standards, and automation so configurations and images are modular, idempotent, testable, versioned, secure, dependency-aware, safe in their handling of secrets and errors, repeatable, and resistant to drift.
Design and troubleshoot complex virtual networks, VMware-based infrastructure, Windows Server and Active Directory, Linux systems, identity services, security tooling, and relevant ICS/OT environments.
Diagnose failures across networks, operating systems, virtualization, images, blueprints, automation, platform services, and security products using packet-level and system-level evidence.
Identify gaps between range requirements and platform capabilities, develop bounded interim solutions, and partner with Product, Platform Engineering, Security, and other Staff and Principal Engineers on sustainable long-term outcomes and broader platform strategy.
Strengthen repository, review, automated build and validation, release, documentation, runbook, and support-handoff practices across team-owned work.
Lead cross-team technical decisions, create standards and automation that can benefit teams beyond RATM, communicate dependencies and risks early, mentor engineers, delegate meaningful ownership, and reduce single-person dependencies.

Required Qualifications

6-8 years of experience; a Bachelor’s degree in Computer Science is preferred, but an equivalent combination of education and experience will be considered.
Experience designing, building, automating, and supporting complex infrastructure or cybersecurity environments at a scope consistent with Staff-level engineering.
Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.
Hands-on experience with Windows Server and Active Directory—including domain, authentication, authorization, DNS, Group Policy, certificates, or trusts—and with Linux administration across multiple distributions.
Production experience with Ansible, Packer, VMware vCenter, and at least one additional hypervisor, virtualization platform, or cloud environment.
Experience integrating enterprise security technologies and practical knowledge of offensive and defensive workflows, security telemetry, and ICS/OT architecture and constraints.
Proficiency with Git and evidence of improving automated validation, testing, security, versioning, and release practices for infrastructure code, configuration, or virtual-machine images.
Demonstrated ability to lead ambiguous technical initiatives across teams, influence senior technical stakeholders, mentor and delegate to engineers, communicate with technical and nontechnical audiences, and balance implementation detail with product, customer, and business outcomes.

Equivalent combinations of education, professional experience, certifications, and demonstrated technical achievement will be considered.

Preferred Qualifications

Experience developing cyber ranges, digital twins, training environments, simulation platforms, or representative enterprise networks.
Experience with Kubernetes, containers, routing software, infrastructure as code, CI/CD, artifact management, or automated security scanning.
Experience working with both offensive- and defensive-security teams or supporting disconnected, restricted, regulated, or high-security environments.
Relevant networking, security, Linux, Windows, virtualization, cloud, or ICS/OT certifications.

Technology Environment

Ansible, Packer, VMware vCenter, Git, Windows Server, Active Directory, Linux, enterprise networking, security tooling, and ICS/OT technologies.

We’re proud to offer a competitive and comprehensive package designed to support your well-being, growth, and success:

Compensation. Base salary range: $185,000 - $260,000, reflecting our confidence in your expertise and impact, with the opportunity for annual bonuses tied to company performance and individual contributions.
Health & Wellness. Comprehensive medical, dental, and vision benefits, plus savings plans—coverage starts on day one!
Mental Health Support. Access to company-paid counseling, coaching, and resources for you and your family through Spring Health.
Financial Well-Being. Plan for your future with a 401(k)-retirement savings plan featuring a company match.
Flexible Time Off. Take the time you need with flex vacation, company holidays, and dedicated health & wellness days. SimSpace provides flexible solutions to meet the diverse work-life needs of team members.
Parental Leave. Paid leave plans to support you and your loved ones during life’s most important moments.
Ownership Opportunities: Equity stock options at hire, with annual performance-based grants—become an invested stakeholder in our shared success.
Peloton Interactive Wellness Program: Full- and partial- subsidized membership plans and equipment discounts to help you reach your personalized fitness goals.
Continuous Learning: Access a LinkedIn Learning membership to prioritize your personal and professional development.
Social Connections: Monthly reimbursements for meaningful connections with teammates through our SocialSpace Community.
Extra Perks: Legal plan coverage, pet insurance, wellness reimbursements, and more to simplify life’s details.

SimSpace is an Equal Opportunity Employer:

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.

SimSpace is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. We are committed to providing an inclusive and welcoming environment for all members of our staff, clients, volunteers, subcontractors, vendors, and clients.

Research shows that women and people from underrepresented groups only apply to jobs if they meet all of the qualifications. However, no one ever meets 100% of the qualifications. SimSpace encourages you to break that statistic and to apply. We look forward to your application!

We also consider qualified applicants regardless of criminal histories, in accordance with applicable law. We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or accommodation due to a disability, please contact careers@simspace.com.

SimSpace does not accept unsolicited resumes from employment agencies.

Actual compensation for the position is based on a variety of factors, including, but not limited to affordability, skills, qualifications and experience, and may vary from the range.