• Design, develop, and deploy virtualized and containerized training environments that replicate enterprise and operational technology networks. • Build interactive, hands-on scenarios that cover topics such as network defense, exploitation, incident response, malware analysis, and cloud security. • Collaborate with SMEs and instructional designers to align labs with course objectives, NICE/NIST and DCWF frameworks, and current threat intelligence. • Integrate and automate tools (e.g., SIEM, IDS/IPS, EDR, log pipelines, attack frameworks, etc.) to simulate realistic defender workflows. • Evaluate new tools and platforms (e.g., Elastic Stack, Graylog, Security Onion, Caldera, Atomic Red Team, Guacamole, PCTE) for use in training. • Maintain and monitor lab infrastructure for performance, security, and scalability across cloud and on-prem environments. • Develop automation scripts (Python, PowerShell, Bash, Node.js) to streamline environment builds, resets, and telemetry capture. • Perform QA testing to validate scenario functionality, scoring, and learner experience. • Support instructors and learners during training events, ensuring lab reliability and technical support responsiveness.