Infrastructure & SCADA Engineer

At Valar Atomics, we're redefining what's possible in energy. Our mission is to make clean, high-temperature nuclear power scalable—unlocking abundant energy for industry, hydrogen, and next-generation manufacturing. We are a team of builders, engineers, and operators who believe nuclear energy should be fast to deploy, factory-made, and built for the real world. Our first pilot plant in Orangeville, Utah will demonstrate how advanced nuclear systems and fuel fabrication can power the future. Joining Valar Atomics means becoming part of a company where autonomy, ownership, and impact exist at every level.

You'll help run and harden Valar Atomics' OT infrastructure: the SCADA network and the Rockwell FactoryTalk ecosystem that support our reactor and test operations. This is a hands-on operations role rather than a controls programming role. Most systems are already designed, procured, and partially deployed, so you'll move straight into implementation, configuration, documentation, and operational ownership. You'll work directly with the IT & Security lead and partner closely with Instrumentation & Control. This is a fully on-site role in Hawthorne, CA, with occasional travel to our reactor site in Orangeville, UT.

• →Operate and stabilize FactoryTalk infrastructure (FactoryTalk Linx, View, Historian, and related services) and the networks it depends on.
• →Implement and test redundancy and failover in critical environments, including OT networks, core services, remote access, and monitoring.
• →Operate segmented OT networks using Arista and Cisco switching, VLANs, QoS and traffic shaping, and packet-level troubleshooting when things break.
• →Deploy and manage firewalls (Palo Alto and pfSense), including segmentation, rule changes, VPNs (SSL, IPsec, WireGuard), and logging and change control.
• →Implement 802.1x and identity-driven network access where appropriate without disrupting operations.
• →Operate Windows domain services supporting OT (Domain Controllers, AD, GPO), including hardening and recovery planning.
• →Build and operate PKI and certificate workflows using an offline or dedicated CA with OpenSSL and Windows CA, including SSL certificate issuance, renewal, and end-to-end TLS troubleshooting.
• →Implement and maintain smart card authentication in Windows AD environments, including enrollment, mapping, and auth troubleshooting.
• →Support OT visibility tooling (Claroty) and keep it operational and useful to I&C and Security.
• →Operate supporting infrastructure including Proxmox and Azure VMs and vNets where needed.
• →Support operator infrastructure as needed, including Adder Infinity KVM, VoIP networks, and Ruckus WiFi systems.
• →Maintain accurate documentation and operational runbooks, including network diagrams, operational procedures, and device and service add/remove processes.
• →Work with I&C and Engineering to resolve issues introduced by hardening and security controls, and coordinate with the Data & Storage Engineer for centralized logging.

• You operate with a bias toward uptime and safe change control, treating production OT systems with the discipline they require.
• You troubleshoot end-to-end with confidence, from packet captures to TLS chains, and stay methodical under pressure.
• You communicate clearly and early when something is unrealistic or a problem.
• You execute effectively when given the end goal, working independently while keeping your manager and partners informed.
• You document as you go, producing runbooks and diagrams that hold up during incidents.
• You collaborate well across IT, Instrumentation & Control, and engineering, and you partner constructively to resolve friction between security controls and operational needs.
• You build your technical skills through personal projects and stay energized by learning.

• Hands-on experience supporting production OT or SCADA environments with a bias toward uptime and safe change control.
• Strong FactoryTalk infrastructure and support experience (Linx, View, Historian, and surrounding Windows and network dependencies).
• Strong networking fundamentals (switching, segmentation, QoS, VPNs) and the ability to troubleshoot using packet captures.
• Experience operating enterprise firewalls and remote access in segmented environments.
• Windows AD and Domain Controller fundamentals with real operational discipline (hardening, backups, recovery).
• PKI and certificate lifecycle experience and comfort debugging TLS and certificate chains under pressure.
• Documentation skills that stand up during incidents.
• Eligible to access controlled technical information under applicable U.S. export control regulations (e.g., DOE 10 CFR Part 810); eligibility will be verified.
• Based in or willing to relocate to Hawthorne, CA.

• Smart card and certificate-based authentication experience in Windows environments.
• Palo Alto and/or pfSense firewall experience.
• Claroty experience in production OT networks.
• Experience with data diodes or one-way data transfer architectures.
• Proxmox experience, especially HA and recovery patterns.
• Scripting experience for automation and operational glue.
• Rockwell PLC familiarity as an infrastructure or support partner to I&C.

Valar Atomics is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, veteran status, or any other protected status under applicable law.

We are committed to providing a workplace free of discrimination and harassment and will provide reasonable accommodation as required by law.

Applicants must be legally authorized to work in the United States as a U.S. citizen or lawful permanent resident (green card holder).