- Robot type
- Drone
- Location
- ByronCaliforniaUSA
- Job type
- Business Operations
- Posted
- Aug 12, 2026
- Salary
- $160,000–$260,000 a year
Full-time
Head of IT
Job description
As we enter our next phase of growth and scale the Chaparral aircraft from flight testing into full-rate production, Elroy Air needs one person to own IT and security from the ground up. This is a true builder role: you'll be a team of one for the foreseeable future, operating as both the strategist setting direction and the hands-on operator keeping systems running day to day. You'll design and defend our network against real threats, and you'll build and maintain the CMMC compliance framework that lets us operate in export-controlled, government-adjacent environments, essentially standing up the function solo before it grows.
You'll work directly with engineering, security, legal, and…
Job responsibilities
- Security & network defense: architect and actively defend physical and cloud network infrastructure against intrusion; own logging, detection, and incident response.
- CMMC / compliance framework — build and maintain CMMC (and related NIST 800-171/800-53) compliance from the ground up, and serve as the key stakeholder in audits and regulatory inspections
- Identity & access management — own IdP systems on least-privilege and just-in-time principles
- Endpoint management — MDM/EDR deployment, fleet lifecycle, device-trust and conditional-access workflows
- Day-to-day IT operations — corporate IT, SaaS management, employee onboarding/offboarding automation, web hosting/DNS support
- Own end-to-end management of corporate IT infrastructure: physical networks, endpoint management, and SaaS management, maintaining successful compliance with strict security frameworks such as NIST SP 800-53
- Develop and enforce IT policies and access control aligned with defense sector norms and requirements.
- Architect and maintain secure physical network infrastructure across office, lab, and production environments
Job requirements
- 8+ years in IT infrastructure, operations, or systems engineering, including solo or small-team ownership
- Strong cloud experience (GCP and AWS)
- Hands-on MDM and EDR implementation
- Identity system automation (Okta, Azure AD) in regulated environments
- Deep network security expertise — VPNs, firewalls, routing, segmentation, threat defense
- Direct experience building or maintaining CMMC and/or NIST 800-171 compliance frameworks
- Eligible to work in the US and to hold ITAR/EAR access
- Comfortable being on-site regularly to support a small, fast-moving team