> Markdown version of [/jobs/ext/3812326-senior-network-linux-security-engineer](https://www.wearedevelopers.com/jobs/ext/3812326-senior-network-linux-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Network & Linux Security Engineer - **Company:** Alpha Inc. - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $180,000.0 - $220,000.0 - **Contract:** Permanent contract - **Skills:** Access Control List, Proxy Servers, Bash Shell, Border Gateway Protocol, Spanning Tree Protocols, Software as a Service, CompTIA Security+, Software Debugging, Linux, Trunking, Python (Programming Language), Linux System Administration, Linux Security Modules, Routing, Open Shortest Path First (OSPF), Ansible, Virtual Local Area Networks, Network Access Control, Firewalls (Computer Science), Selinux, Information Technology, Palo Alto Networks, Fortinet, CIS Benchmarks, Cisco Switches - **Published:** October 18, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=8beb2d1aa2d87401 ## About the Role Extensive hands-on experience in Linux engineering and enterprise networking, typically gained over 15+ years, with current responsibility for production environments. Linux engineering * Deep experience with application hosting, service hardening, and system administration at scale. * Strong experience with host firewalls, network access control lists, and proxy configuration. * Experience writing, debugging, and maintaining SELinux policies in enforcing mode. Advanced networking * Strong routing and switching fundamentals, including OSPF, BGP, VLANs, trunking, and Spanning Tree Protocol. * Hands-on experience configuring and troubleshooting Cisco switches and firewalls, Fortinet FortiGate firewalls, and Palo Alto Networks firewalls. * The ability to work across vendors and learn unfamiliar technologies without depending on one product ecosystem. Consulting and judgment * The ability to enter an unfamiliar customer environment, establish the facts, identify consequential weaknesses, and make a defensible recommendation. * Confidence communicating difficult findings respectfully and directly, including to senior stakeholders. * A track record of recommending practical, budget-aware improvements and recognizing when a targeted change is more useful than replacing an entire system. * Clear written and verbal communication. You can explain a technical finding, its consequences, and the proposed investment to both an engineer and a CFO. * The ability to own work independently, follow through on commitments, and know when to bring in another specialist., * A bachelor's or master's degree in Computer Science or a closely related field. Equivalent practical experience will be considered. * One or more relevant certifications, such as CISSP, CCNP, CCIE, CompTIA Security+, or CEH. Proven experience supported by professional references may substitute for certifications. Useful additional experience * OT/ICS or other critical infrastructure environments. * Scripting and automation using Python, Bash, or Ansible. * Turning a customer problem into an internal tool, productized service, or commercial product. ## Description You will design, build, harden, and secure the networks and Linux infrastructure behind our customer engagements and internal platforms. You will lead enterprise network implementations, evaluate unfamiliar environments independently, and make practical recommendations that customers can act on. This is a hands-on senior engineering role with responsibility from architecture through implementation and validation. You should understand why a configuration works, how it can fail, and how to verify a change safely in a production environment. You will work directly with AO's founders, engineers, offensive security team, and customers. You will also help shape what we build next by turning recurring customer problems into better tools, services, and engineering capabilities. What you'll do * Build, host, and maintain applications and services in hardened Linux environments. * Implement and maintain host and network controls, including firewalls, access control lists, proxies, and SELinux policies. * Design and operate routed and switched networks, including OSPF, BGP, VLAN segmentation, and inter-site connectivity. * Configure, audit, and troubleshoot networks, firewalls, and routing across multiple vendors. Adapt to the customer's environment and make sound decisions about what to retain, improve, or replace. * Lead architecture and configuration reviews against applicable CIS benchmarks, NIST guidance, and vendor hardening recommendations. Present findings and recommendations directly to technical and executive stakeholders. * Prioritize remediation by risk reduction, cost, implementation effort, and operational impact. Make the tradeoffs explicit and identify improvements that work within the customer's budget and existing infrastructure. * Work with engineering and offensive security teams to validate controls under realistic attack scenarios, within agreed scope and operating constraints. * Produce clear architecture diagrams, configurations, findings, implementation plans, and runbooks that customer teams can use and maintain. * Identify recurring gaps across engagements and propose new tools, products, or service offerings, with a clear problem statement and a practical path to a prototype., You will join a small team where senior engineers stay close to the work and have a direct voice in technical decisions. You will see projects through from understanding the environment to building and validating improvements. There is room to grow through technical leadership, ownership of complex engagements, and development of new capabilities. That scope will grow with your judgment, execution, and the needs you identify. Location and working arrangements * Hybrid role based in the DC metro area, with in-person work in Arlington, VA. * Ad hoc travel based on customer and engagement needs. * Must be legally authorized to work in the United States. AO does not sponsor employment visas at this time.