System Administrator with Security Clearance

The Classified Linux Engineer is a member of the Classified Enterprise Services (CES) Team within ISD and they are critical to supporting both SIPR and ELCN. They are responsible for managing all aspects of our Linux infrastructure on both SIPR and ELCN. This includes building new virtual machines, ensuring those virtual machines are STIG compliant, and remediating any vulnerabilities that are found on those systems. In addition, this individual is also responsible for managing our RedHat Satellite infrastructure in both environments. This includes importing updates from the unclassified network to both classified networks, ensuring those updates are presented to the appropriate systems, patching ISD systems and working with division resources to ensure their systems are patched. Without this role the ISD CES team would not be able to maintain the Linux infrastructure that is critical to both networks. The Linux Systems Engineer will demonstrate a strong understanding of Linux operating systems including both workstation and server varieties while supporting the Laboratory's enterprise classified computing infrastructure. The ideal candidate will have a solid background with Linux to include the underlying systems and services that support them. These systems and services would include but are not limited to file sharing, Satellite, Ansible Automation Platform, multi-factor authentication, disk encryption and patching. This candidate will also possess some background with DevSecOps concepts (artifact repository, container registries, scanning and platforms, etc.) and tools (Sonatype Nexus, JFrog Artifactory, Prisma Twistlock, RHEL OpenShift, etc.) As part of this role the individual will need to demonstrate proficiency, applying STIGs (full and benchmark), understand how to use DISA's SCC Tool and STIG Viewer and how to evaluate systems for STIG compliance. Must Have:

•Bachelors of Computer Science or relevant technical field of study

•7 years of experience supporting RHEL 7/8 workstation and server

•5 years of experience utilizing Satellite to support Linux systems

•5 years of experience with bash/shell, Python and perl scripting

•Understanding of Linux troubleshooting to include the boot process, Kickstart building, systemd, monitoring of system resources, kernel tuning, system performance troubleshooting, system calls and tracing

•Experience configuring storage for Linux systems (LVM, file systems, RAID, storage encryption, SAN, NAS and NFS)

•Package development and deployment (rpm, yum, dnf)

•Strong overall network skills (package captures, NIC latency tuning, route tables and tracing, subnetting, firewall/iptable, TCP/UDP/IP protocols)

•Ability to work independently toward delivery of goals as well as collaborate in team efforts

•Excellent customer service skills

•Excellent presentation, verbal and written communication skills

•Demonstrate the ability to learn new technologies and disciplines quickly

•Security+ certification or the ability to obtain within 6 months of employment Nice to Have:

•Experience utilizing Ansible Automation Platform to support Linux systems

•Experience supporting DevSecOps environments.

•Experience supporting software deployment on Linux

•Experience supporting cloud infrastructure. Preferably in classified environments but public domain experience is also beneficial

•Experience with the Cyber Operational Readiness Assessment (CORA) process and maintaining an inspection ready environment. Clearance:
This position requires an active clearance.