Linux OS Engineer

We are seeking a Linux OS Engineer to join our Task Order to build, harden, and sustain mission-critical Linux platforms in a highly secure enterprise on the Defense Intelligence Agency’s Solutions for the Information Technology Enterprise III (SITE III). The Linux OS Engineer will own the lifecycle of RHEL- and Debian-based systems-from image engineering and STIG compliance to configuration management, patch orchestration, performance tuning, and incident response. You’ll collaborate across cybersecurity, network, storage, and application teams to deliver resilient, auditable infrastructure that meets program SLAs and security directives., The Linux OS Engineer is expected to be able to accomplish the following:

• Platform Engineering & Operations
• Engineer, deploy, and administer RHEL/CentOS/Rocky and Ubuntu servers (physical and virtual) across dev/test/prod.
• Implement standard OS baselines, golden images, and immutable patterns (e.g., image pipelines, templates, kickstart/preseed, cloud-init).
• Manage patching and kernel updates with maintenance windows and rollback plans; validate health post-change.
• Configuration Management & Automation
• Build and maintain automation using Ansible, Bash, and Python to enforce configuration drift control and speed delivery.
• Integrate configuration policies with CI/CD workflows and version control; write idempotent playbooks/roles.
• Security & Compliance
• Apply and maintain DoD STIG/hardening controls; remediate findings from vulnerability scans; maintain audit artifacts.
• Implement/validate FIPS, SELinux, disk encryption, log forwarding, and secure remote access; support ATO evidence.
• Reliability, Monitoring & Performance
• Design and operate logging/metrics/alerting (e.g., journald/rsyslog, auditd, Prometheus/Grafana/ELK) with actionable SLOs.
• Troubleshoot OS, storage, and network performance (I/O, CPU, memory, TCP/IP) using system profiling tools.
• High Availability & Continuity
• Support clustering and HA patterns (Pacemaker/Corosync, systemd units, load balancers); document and test DR/backup restore.
• Collaboration & Support
• Provide Tier 3 escalation; create runbooks/SOPs; participate in on-call rotations as needed.
• Partner closely with cybersecurity, network, storage, virtualization, and application owners to deliver end-to-end outcomes.

• Active TS/SCI + CI Poly clearance
• 5-7 years of professional experience administering Linux in enterprise or government environments (or equivalent combination of education/experience suitable for mid level).
• One of the following DoD 8570/CS-NET-451 certifications:
• Security+ (CE)
• RHCSA/RHCE
• CKA
• ITIL® Foundation
• Strong proficiency with RHEL-family and Debian/Ubuntu administration, system services, and package managers (dnf/yum/apt).
• Hands-on with Ansible and scripting (Bash, Python) for automation and compliance.
• Demonstrated experience applying STIG/hardening and working within secure change-controlled environments.
• Solid troubleshooting across compute, network, and storage layers; familiarity with virtualization (VMware/KVM) and ticketing/ITSM workflows.
• Ability to create and maintain SOPs, runbooks, and architecture diagrams supporting audits and operations., * Experience with RHEL Satellite/Foreman, Kickstart, IdM/FreeIPA/AD integration, and secrets management (e.g., HashiCorp Vault).
• Exposure to container runtimes (Podman/Docker), Kubernetes (RKE/AKS/Openshift), and hardened container images.
• Infrastructure-as-Code (Terraform), cloud (AWS/Azure/Gov zones), and registry/artifact management.
• Monitoring stacks (Prometheus/Grafana, ELK/OpenSearch) and SIEM integrations.
• SSCP
• CySA+
• GSEC
• CASP+
• CISSP
• Red Hat Ansible Automation certification
• Terraform Associate )
• Kubernetes certification, While performing the duties of this job, the employee is regularly required to use hands to grip, handle, or feel; reach with hands and arms; and talk or hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds.

The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.

WORK AUTHORIZATION/SECURITY CLEARANCE

• U.S. Citizenship
• Active TS/SCI + CI Poly clearance

We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays., * Noise level: Low

• Work schedule: “Normal work hours” constitute on average 8 hours a day, 40 hours per week (excluding breaks and meal periods) within standard operational hours occurring 0600-1800, Monday-Friday, excluding Federal holidays. May be requested to work evenings and weekends to meet program and contract needs.
• Amount of Travel: 20%