> Markdown version of [/jobs/ext/1411750-linux-systems-engineer](https://www.wearedevelopers.com/jobs/ext/1411750-linux-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Linux Systems Engineer - **Company:** NIGHTWING LLC - **Location:** Sterling, VA, United States - **Experience:** Experienced - **Salary:** $99,000.0 - $206,000.0 - **Contract:** Permanent contract - **Skills:** IEEE 802.1Q, Link Aggregation (Ethernet), Amazon Web Services, Computing Platforms, Microsoft Azure, Bash Shell, Ubuntu (Operating System), Configuration Management, Computer Networks, Continuous Integration, Debian Linux, Linux, Memory Management, Trunking, Fault Tolerance, Monitoring of Systems, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Python (Programming Language), Network Security, Linux Kernel, Network Architecture, Network Diagnostics, Routing, Open Shortest Path First (OSPF), OpenVPN, Performance Tuning, Public Key Infrastructure, Red Hat Enterprise Linux, Remote Access Technology, TCP/IP, Tcpdump, Wireshark, Virtual Local Area Networks, SSL Certificate Management, Dynamic Routing, Google Cloud, Saltstack, Git, SC Clearance, Containerization, Infrastructure Automation Frameworks, Low Latency, Iptables, Patch Management, Firewall Services Module, Docker - **Published:** July 23, 2026 - **Apply:** https://dejobs.org/x/x/07A68182C2C14AEB8DF9B7A9B6436BF4/job/ ## About the Role Policy-Based Routing (PBR) Multiple routing tables Route maps and traffic steering Source-based and destination-based routing Multi-homed network environments Configure and troubleshoot: OSPF and static routing VLANs, LACP, and 802.1Q trunking Network namespaces VRFs NAT and firewall policies Analyze and troubleshoot network traffic using: tcpdump Wireshark iproute2 nftables iptables Linux Kernel Tuning & Performance Optimization Tune Linux kernel parameters for: High-throughput networking Low-latency applications VPN gateway performance Large-scale concurrent connections Optimize: TCP/IP stack performance Network buffer sizing IRQ balancing CPU affinity NUMA awareness Memory management Utilize performance analysis tools including: perf sar vmstat iostat eBPF observability tools systemd performance metrics VPN Engineering Design, deploy, and support secure VPN infrastructures using: OpenVPN 2.6+ WireGuard IPSec Implement and support: Site-to-site VPNs Remote-access VPNs Hub-and-spoke architectures High-availability VPN clusters Dynamic routing across VPN overlays, System provisioning Configuration deployment Compliance enforcement VPN deployments Security baseline management Integrate SaltStack with CI/CD pipelines and infrastructure monitoring platforms. Required Qualifications: Current Top-Secret Clearance with SCI Eligibility Technical Experience 5+ years of Linux Systems Engineering experience 3+ years of advanced Linux networking experience 3+ years of VPN engineering experience 3+ years of SaltStack administration and automation experience Operating Systems Strong hands-on experience with: Debian Linux Ubuntu Linux Networking Expertise Demonstrated expertise with: Policy-Based Routing (PBR) iproute2 Routing tables and policy rules Linux bridges Bonding and teaming VLANs VRFs Network namespaces Dynamic routing protocols High-availability networking architectures VPN Expertise Strong practical experience with: WireGuard OpenVPN 2.6+ IPSec PKI and certificate management TLS authentication Multi-site VPN topologies VPN performance tuning Automation & Scripting Experience with: SaltStack Python Bash Git CI/CD workflows Preferred Qualifications Experience supporting cloud platforms including: Google Cloud Platform (GCP) Amazon Web Services (AWS) Microsoft Azure Experience with container technologies: Docker Kubernetes Experience supporting confidential computing environments Knowledge of CNSA-compliant cryptographic implementations Familiarity with eBPF-based observability and network diagnostics Industry certifications such as: RHCE LFCE CCNP Equivalent advanced certifications Desired Skills Exceptional troubleshooting and root-cause analysis capabilities Strong documentation and technical writing skills Ability to operate independently in mission-critical environments Experience designing highly available and fault-tolerant systems Security-first mindset with strong infrastructure design principles Excellent collaboration and communication skills ## Description Nightwing is seeking a highly skilled Linux Systems Engineer to design, deploy, optimize, automate, and support large-scale Linux infrastructure supporting secure networking and remote-access services. This role is ideal for an engineer with deep expertise in Linux networking, policy-based routing, kernel performance tuning, infrastructure automation, and modern VPN technologies including WireGuard, OpenVPN, and IPSec. The successful candidate will collaborate closely with network engineering, systems administration, and platform engineering teams to deliver highly available, secure, and scalable infrastructure solutions in mission-critical environments. Primary Responsibilities Linux Infrastructure Engineering Design, deploy, administer, and maintain enterprise Linux environments. Develop standardized operating system configurations and hardened baseline builds. Perform operating system upgrades, patch management, lifecycle maintenance, and performance optimization., Troubleshooting encryption, routing, MTU, and performance issues Implementing modern cryptographic standards and VPN hardening best practices Configuration Management & Automation Develop and maintain Infrastructure-as-Code (IaC) solutions using SaltStack. Create and maintain ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)