> Markdown version of [/jobs/ext/1814464-cloud-engineer](https://www.wearedevelopers.com/jobs/ext/1814464-cloud-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Engineer - **Company:** System One - **Location:** Herndon, VA, United States - **Salary:** $200,000.0 - $250,000.0 - **Contract:** Permanent contract - **Skills:** User Authentication, Bash Shell, Ubuntu (Operating System), Cloud Engineering, Continuous Integration, DevOps, Multi-Factor Authentication, Monitoring of Systems, Identity and Access Management, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), Linux Servers, Public Key Infrastructure, Role-Based Access Control, Red Hat Enterprise Linux, Ansible, Oracle Linux, Software Vulnerability Management, Data Logging, Scripting, Enterprise Software Applications, SC Clearance, Selinux, Information Technology, CIS Benchmarks, Splunk - **Published:** July 16, 2026 - **Apply:** https://www.juju.com/job/00000000gh5chq ## About the Role + US Citizen (No dual citizens) + Active Secret Clearance Required + Possession of Security+ or equivalent + Strong knowledge of Linux administration (system services, networking, storage, SELinux, etc.) + Experience with identity or security services (LDAP, SSO, federation, certificates, PAM, SSSD) + Familiarity with logging platforms (Splunk, ELK) and monitoring tools + Scripting experience (Bash, Python, Ansible) + Understanding of IAM concepts: authentication, authorization, identity lifecycle, RBAC, MFA + Knowledge of security hardening and compliance frameworks ## Description + Manage, configure, and maintain Linux servers (RHEL/Oracle Linux/Ubuntu or distribution in use), including patching, vulnerability remediation, system hardening, and lifecycle management. + Monitor system performance, health, and capacity to ensure optimal operations. + Support ICAM tools and services such as IAM directories, federation services, PKI components, privileged access systems, connectors, and agent-based integrations, ensuring secure configuration and uptime. + Assist in integrating identity services with enterprise applications and infrastructure. + Implement and maintain security baselines (DISA STIGs, CIS Benchmarks, internal policies), assist with audits, log management, identity access reviews, and compliance reporting. + Manage certificates, key stores, and cryptographic components supporting ICAM services. + Develop scripts (Bash, Python, Ansible) to automate administrative tasks and support CI/CD or DevOps workflows for ICAM platform updates and configuration changes. + Troubleshoot OS-level and application-level issues, participate in on-call rotations for high-severity ICAM service events, conduct root cause analysis, and implement permanent fixes. + Collaborate closely with ICAM architects, cybersecurity teams, network teams, and application teams to support project deliverables, migrations, and environment buildouts., System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [For the Cars and the Curious: Android Drift](https://www.wearedevelopers.com/videos/499-for-the-cars-and-the-curious-android-drift) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)