Linux Systems Engineer

NIGHTWING LLC
Sterling, VA, United States
20 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Compensation
$99,000.0 - $206,000.0
Working hours
Regular working hours
Job source

Tech stack

IEEE 802.1Q Link Aggregation (Ethernet) Amazon Web Services Computing Platforms Microsoft Azure Bash Shell Ubuntu (Operating System) Configuration Management Computer Networks Continuous Integration Debian Linux Linux
+35 more
Memory Management Trunking Fault Tolerance Monitoring of Systems Internet Protocol Security (IP SEC) Virtual Private Networks (VPN) Python (Programming Language) Network Security Linux Kernel Network Architecture Network Diagnostics Routing Open Shortest Path First (OSPF) OpenVPN Performance Tuning Public Key Infrastructure Red Hat Enterprise Linux Remote Access Technology TCP/IP Tcpdump Wireshark Virtual Local Area Networks SSL Certificate Management Dynamic Routing Google Cloud Saltstack Git SC Clearance Containerization Infrastructure Automation Frameworks Low Latency Iptables Patch Management Firewall Services Module Docker

Job description

Nightwing is seeking a highly skilled Linux Systems Engineer to design, deploy, optimize, automate, and support large-scale Linux infrastructure supporting secure networking and remote-access services. This role is ideal for an engineer with deep expertise in Linux networking, policy-based routing, kernel performance tuning, infrastructure automation, and modern VPN technologies including WireGuard, OpenVPN, and IPSec.

The successful candidate will collaborate closely with network engineering, systems administration, and platform engineering teams to deliver highly available, secure, and scalable infrastructure solutions in mission-critical environments.

Primary Responsibilities

Linux Infrastructure Engineering

Design, deploy, administer, and maintain enterprise Linux environments.

Develop standardized operating system configurations and hardened baseline builds.

Perform operating system upgrades, patch management, lifecycle maintenance, and performance optimization., Troubleshooting encryption, routing, MTU, and performance issues

Implementing modern cryptographic standards and VPN hardening best practices

Configuration Management & Automation

Develop and maintain Infrastructure-as-Code (IaC) solutions using SaltStack.

Create and maintain

Requirements

Policy-Based Routing (PBR)

Multiple routing tables

Route maps and traffic steering

Source-based and destination-based routing

Multi-homed network environments

Configure and troubleshoot:

OSPF and static routing

VLANs, LACP, and 802.1Q trunking

Network namespaces

VRFs

NAT and firewall policies

Analyze and troubleshoot network traffic using:

tcpdump

Wireshark

iproute2

nftables

iptables

Linux Kernel Tuning & Performance Optimization

Tune Linux kernel parameters for:

High-throughput networking

Low-latency applications

VPN gateway performance

Large-scale concurrent connections

Optimize:

TCP/IP stack performance

Network buffer sizing

IRQ balancing

CPU affinity

NUMA awareness

Memory management

Utilize performance analysis tools including:

perf

sar

vmstat

iostat

eBPF observability tools

systemd performance metrics

VPN Engineering

Design, deploy, and support secure VPN infrastructures using:

OpenVPN 2.6+

WireGuard

IPSec

Implement and support:

Site-to-site VPNs

Remote-access VPNs

Hub-and-spoke architectures

High-availability VPN clusters

Dynamic routing across VPN overlays, System provisioning

Configuration deployment

Compliance enforcement

VPN deployments

Security baseline management

Integrate SaltStack with CI/CD pipelines and infrastructure monitoring platforms.

Required Qualifications:

Current Top-Secret Clearance with SCI Eligibility

Technical Experience

5+ years of Linux Systems Engineering experience

3+ years of advanced Linux networking experience

3+ years of VPN engineering experience

3+ years of SaltStack administration and automation experience

Operating Systems

Strong hands-on experience with:

Debian Linux

Ubuntu Linux

Networking Expertise

Demonstrated expertise with:

Policy-Based Routing (PBR)

iproute2

Routing tables and policy rules

Linux bridges

Bonding and teaming

VLANs

VRFs

Network namespaces

Dynamic routing protocols

High-availability networking architectures

VPN Expertise

Strong practical experience with:

WireGuard

OpenVPN 2.6+

IPSec

PKI and certificate management

TLS authentication

Multi-site VPN topologies

VPN performance tuning

Automation & Scripting

Experience with:

SaltStack

Python

Bash

Git

CI/CD workflows

Preferred Qualifications

Experience supporting cloud platforms including:

Google Cloud Platform (GCP)

Amazon Web Services (AWS)

Microsoft Azure

Experience with container technologies:

Docker

Kubernetes

Experience supporting confidential computing environments

Knowledge of CNSA-compliant cryptographic implementations

Familiarity with eBPF-based observability and network diagnostics

Industry certifications such as:

RHCE

LFCE

CCNP

Equivalent advanced certifications

Desired Skills

Exceptional troubleshooting and root-cause analysis capabilities

Strong documentation and technical writing skills

Ability to operate independently in mission-critical environments

Experience designing highly available and fault-tolerant systems

Security-first mindset with strong infrastructure design principles

Excellent collaboration and communication skills

Benefits & conditions

The salary associated with this position ($99,000-$206,000) is commensurate with the selected candidate’s qualifications, years of relevant experience, and demonstrated level of expertise. Compensation will be determined based on these factors to ensure alignment with skills, responsibilities, and market standards.

Nightwing offers medical, vision and dental insurance coverage in addition to a 401k plan, PTO, Holidays, and additional insurances.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on dejobs.org

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

6:21 min

Investigating push inefficiencies with upstream Git experts

Jonathan Creamer · Coffee With Developers

52 sec

Running persistent Linux environments directly on Windows

Ben Breard Ben Breard · WWC 2025

2:07 min

Inspecting default bridge architectures and custom Docker networks

Oliver Seitz Oliver Seitz · WWC 2025

1:34 min

Pivoting careers into specialized platform engineering roles

Xavier Portilla Edo · LIVE

56 sec

Favorite git commands and the importance of patch commits

Eileen Uchitelle Eileen Uchitelle +1 · Coffee With Developers

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

Videos

See all

Related articles

See all