Cloud Engineer

System One
Herndon, VA, United States
26 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Compensation
$200,000.0 - $250,000.0
Working hours
Regular working hours
Job source

Tech stack

User Authentication Bash Shell Ubuntu (Operating System) Cloud Engineering Continuous Integration DevOps Multi-Factor Authentication Monitoring of Systems Identity and Access Management Python (Programming Language) Lightweight Directory Access Protocols (LDAP) Linux Servers
+14 more
Public Key Infrastructure Role-Based Access Control Red Hat Enterprise Linux Ansible Oracle Linux Software Vulnerability Management Data Logging Scripting Enterprise Software Applications SC Clearance Selinux Information Technology CIS Benchmarks Splunk

Job description

  • Manage, configure, and maintain Linux servers (RHEL/Oracle Linux/Ubuntu or distribution in use), including patching, vulnerability remediation, system hardening, and lifecycle management.

  • Monitor system performance, health, and capacity to ensure optimal operations.

  • Support ICAM tools and services such as IAM directories, federation services, PKI components, privileged access systems, connectors, and agent-based integrations, ensuring secure configuration and uptime.

  • Assist in integrating identity services with enterprise applications and infrastructure.

  • Implement and maintain security baselines (DISA STIGs, CIS Benchmarks, internal policies), assist with audits, log management, identity access reviews, and compliance reporting.

  • Manage certificates, key stores, and cryptographic components supporting ICAM services.

  • Develop scripts (Bash, Python, Ansible) to automate administrative tasks and support CI/CD or DevOps workflows for ICAM platform updates and configuration changes.

  • Troubleshoot OS-level and application-level issues, participate in on-call rotations for high-severity ICAM service events, conduct root cause analysis, and implement permanent fixes.

  • Collaborate closely with ICAM architects, cybersecurity teams, network teams, and application teams to support project deliverables, migrations, and environment buildouts., System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

Requirements

  • US Citizen (No dual citizens)

  • Active Secret Clearance Required

  • Possession of Security+ or equivalent

  • Strong knowledge of Linux administration (system services, networking, storage, SELinux, etc.)

  • Experience with identity or security services (LDAP, SSO, federation, certificates, PAM, SSSD)

  • Familiarity with logging platforms (Splunk, ELK) and monitoring tools

  • Scripting experience (Bash, Python, Ansible)

  • Understanding of IAM concepts: authentication, authorization, identity lifecycle, RBAC, MFA

  • Knowledge of security hardening and compliance frameworks

About the company

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.juju.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

5:44 min

Tightening the security perimeter using SELinux

Dimitrij Klesev +1 · LIVE

2:17 min

Mapping the maturity roadmap for scaled devops adoption

Dominik Krichbaum Dominik Krichbaum · WWC Europe 2026

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · WWC 2022

9:38 min

Troubleshooting SELinux container permission denials live

Dimitrij Klesev +1 · LIVE

Videos

See all

Related articles

See all