Staff Software Engineer

SimSpace serves as an AI Proving Ground where organizations can confidently train, test, and outmaneuver adversaries in any environment. Trusted by allied governments, militaries, enterprises, and research institutions worldwide, SimSpace enables adaptive, AI-ready defenses that stay ahead of evolving threats. Founded in 2015 by experts from U.S. Cyber Command and MIT Lincoln Laboratory, the platform unifies training, testing, and validation in a realistic, live-fire simulation—helping teams evaluate security investments, optimize performance, and compress cyber readiness cycles from months to days.

Why join SimSpace? We are an organization that is focused on building our culture and mindfully enhancing our atmosphere every day which is why we have collaborated on an integral value system. Our governing philosophy of being Human Centered is deeply embedded within our value system. We apply this philosophy to every one of our internal team members, external clients, and their customers.

How Do We Work? We believe that people are at the center of everything we do. SimSpace fosters a culture of continuous learning, curiosity, and professional growth. That belief shows up in action: in-house training, internal and external learning platforms, cyber conferences, industry events, and dedicated time for skill development. Our people are empowered to shape their careers - and it shows. Year over year, SimSpace consistently outperforms industry benchmarks in internal mobility, promotions, and total rewards growth.

Who Thrives Here? We are a team of innovators, protectors, and problem-solvers. We believe diversity of thought and experience fuels better solutions, and we’re committed to building teams that reflect the communities we serve. Whether you’re remote or office-based, you’ll collaborate with talented colleagues across departments and time zones, united by the mission to create a safer digital world.

We invite you to apply today!

SimSpace is seeking a Staff Engineer to provide technical leadership for the Range Against the Machine team. RATM creates and maintains reusable virtual-machine templates and the standardized cyber ranges used across the SimSpace platform and by customers. The work spans range architecture, networking, operating systems, virtualization, cybersecurity, automation, and representative enterprise and industrial environments.

This is a hands-on Staff-level role. You will solve selected complex problems directly while increasing the team's ability to deliver independently through architecture, standards, automation, documentation, mentoring, and delegated technical ownership. Success means improving the system and the team's leverage—not becoming the permanent owner of every difficult problem.

What the Team Owns

Reusable range architectures, blueprints, configuration bundles, and approved custom range capabilities.

Virtual-machine images and their build, validation, versioning, patching, release, deprecation, and replacement lifecycle.

Ansible-based configuration automation and repeatable patterns for secure, supportable range construction.

Representative network, identity, infrastructure, application, and security environments that support defensive operations, offensive workflows, automated attacks, user emulation, tool integration, training, exercises, and approved customer use cases, including ICS/OT where required.

Quality, documentation, and supportability of team-owned repositories and artifacts, plus bounded integration solutions when range requirements expose platform gaps.

What You'll Do

Set technical direction for reusable cyber ranges and make explicit trade-offs among realism, security, reliability, scalability, usability, performance, maintainability, customer outcomes, and near-term delivery.

Improve Ansible and Packer architecture, standards, and automation so configurations and images are modular, idempotent, testable, versioned, secure, dependency-aware, safe in their handling of secrets and errors, repeatable, and resistant to drift.

Design and troubleshoot complex virtual networks, VMware-based infrastructure, Windows Server and Active Directory, Linux systems, identity services, security tooling, and relevant ICS/OT environments.

Diagnose failures across networks, operating systems, virtualization, images, blueprints, automation, platform services, and security products using packet-level and system-level evidence.

Identify gaps between range requirements and platform capabilities, develop bounded interim solutions, and partner with Product, Platform Engineering, Security, and other Staff and Principal Engineers on sustainable long-term outcomes and broader platform strategy.

Strengthen repository, review, automated build and validation, release, documentation, runbook, and support-handoff practices across team-owned work.

Lead cross-team technical decisions, create standards and automation that can benefit teams beyond RATM, communicate dependencies and risks early, mentor engineers, delegate meaningful ownership, and reduce single-person dependencies.

Required Qualifications

6-8 years of experience; a Bachelor’s degree in Computer Science is preferred, but an equivalent combination of education and experience will be considered.

Experience designing, building, automating, and supporting complex infrastructure or cybersecurity environments at a scope consistent with Staff-level engineering.

Advanced enterprise-networking and troubleshooting capability across routing, switching, segmentation, firewalls, NAT, DNS, DHCP, VPNs, proxies, and multi-hop traffic paths.

Hands-on experience with Windows Server and Active Directory—including domain, authentication, authorization, DNS, Group Policy, certificates, or trusts—and with Linux administration across multiple distributions.

Production experience with Ansible, Packer, VMware vCenter, and at least one additional hypervisor, virtualization platform, or cloud environment.

Experience integrating enterprise security technologies and practical knowledge of offensive and defensive workflows, security telemetry, and ICS/OT architecture and constraints.

Proficiency with Git and evidence of improving automated validation, testing, security, versioning, and release practices for infrastructure code, configuration, or virtual-machine images.

Demonstrated ability to lead ambiguous technical initiatives across teams, influence senior technical stakeholders, mentor and delegate to engineers, communicate with technical and nontechnical audiences, and balance implementation detail with product, customer, and business outcomes.

Equivalent combinations of education, professional experience, certifications, and demonstrated technical achievement will be considered.

Preferred Qualifications

Experience developing cyber ranges, digital twins, training environments, simulation platforms, or representative enterprise networks.

Experience with Kubernetes, containers, routing software, infrastructure as code, CI/CD, artifact management, or automated security scanning.

Experience working with both offensive- and defensive-security teams or supporting disconnected, restricted, regulated, or high-security environments.

Relevant networking, security, Linux, Windows, virtualization, cloud, or ICS/OT certifications.

Technology Environment

Ansible, Packer, VMware vCenter, Git, Windows Server, Active Directory, Linux, enterprise networking, security tooling, and ICS/OT technologies.

We’re proud to offer a competitive and comprehensive package designed to support your well-being, growth, and success:

Compensation. Base salary range: $185,000 - $260,000, reflecting our confidence in your expertise and impact, with the opportunity for annual bonuses tied to company performance and individual contributions.

Health & Wellness. Comprehensive medical, dental, and vision benefits, plus savings plans—coverage starts