You and the process

With a person
Anna, in-house recruiter
9 years hiring engineers
30 minutes with a real recruiter
They read your CV with you, on a call, and say where the offers are being lost.
Didn’t find what you were looking for? Tell us what to build
CACI International

Information Systems Security Engineer (ISSE) Linux/RHEL

  • Office
  • 3-6 years

Salary

$86,600 - 181,800/ year

AI summary

For members

The whole posting in a few lines. Sign up to read it here and on every role you open.

Sign Up to Read

Description

The company needs a Linux-focused Information Systems Security Engineer (ISSE) to handle security, accreditation, and continuous monitoring for mission-critical systems in classified environments.

The role suits a cybersecurity engineer who is also skilled at administering Red Hat Enterprise Linux (RHEL). You will work directly on Linux systems to apply security controls, fix configuration problems, close vulnerabilities, and support Risk Management Framework (RMF) compliance.

You will work alongside systems engineers, software developers, and cybersecurity staff to design, build, and maintain secure systems for national security missions.

Job category: Security. Full-time, regular position. Minimum clearance to start: TS/SCI.

Responsibilities

  • Engineer, configure, troubleshoot, and harden RHEL systems by hand.
  • Apply and verify DISA STIG compliance by running SCAP scans, reviewing the results, and fixing security weaknesses.
  • Diagnose Linux security settings covering SELinux, SSH, file permissions, authentication, services, and networking.
  • Lead or support Assessment and Authorization (A&A) work to earn and keep an Authorization to Operate (ATO) under RMF.
  • Write and update security documents such as System Security Plans (SSPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTMs), and Plans of Action and Milestones (POA&Ms).
  • Run security assessments and ongoing monitoring against ICD 503, NIST 800-53, CNSSI, and applicable DoD requirements.
  • Work with systems, network, software, and DevOps engineers so security requirements are built into each stage of the System Development Life Cycle (SDLC).
  • Review system designs, infrastructure changes, and software settings to find security risks and propose fixes.
  • Write Bash or Python scripts that automate compliance checks, vulnerability scans, and routine admin tasks.

Requirements

  • Required: 5+ years of combined experience in cybersecurity engineering, information assurance, Linux administration, or a related technical field.
  • Required: At least 2 years of hands-on Linux administration, ideally on RHEL 8 or 9.
  • Required: Solid command-line skills covering filesystems, permissions, user management, package management with DNF or YUM, systemd services, log analysis, SSH, and basic network troubleshooting.
  • Required: Hands-on work implementing Linux DISA STIGs, running SCAP scans, and remediating vulnerabilities.
  • Required: Working knowledge of Linux security tools, including SELinux, firewalld, authentication, and access controls.
  • Required: Experience with Bash, Python, or both, for system administration or security automation.
  • Required: Strong grasp of RMF, ICD 503, NIST 800-53, and the ATO lifecycle.
  • Required: DoD 8570/8140 IAT Level II certification, such as Security+ CE, CySA+, SSCP, or another qualifying certification.
  • Required: Bachelor's degree in a technical field, or equivalent relevant experience.
  • Required: Active Top Secret clearance with SCI eligibility.
  • Desired: Red Hat Certified System Administrator (RHCSA) or Red Hat Certified Engineer (RHCE) certification.
  • Desired: Experience running RHEL in classified, disconnected, or air-gapped environments.
  • Desired: Familiarity with Puppet, Ansible, Red Hat Satellite, or Red Hat Identity Management (IdM/FreeIPA).
  • Desired: Experience with ACAS, Nessus, SCAP Compliance Checker, or similar vulnerability scanners.
  • Desired: Experience with Git, GitLab, DevSecOps, and automated compliance tooling.
  • Desired: Experience supporting Cross Domain Solutions (CDS) or other highly secure mission systems.
  • Desired: Advanced cybersecurity certifications such as CISSP or CASP+.

Conditions

Onsite 100% of the time in Sterling, VA.

Up to 25% travel within the continental US. Domestic and international trips may also be available.

Salary range: $86,600 - $181,800.

Final pay depends on factors such as location, Federal Government contract labor categories and wage rates, relevant experience, skills, education, and certifications.

Benefits

  • Flexible time off that lets you take the time you need.
  • Access to learning resources for career growth.
  • Comprehensive benefits covering healthcare, wellness, financial support, retirement, family support, continuing education, and time off.

Where you’d work

From the office

About the company

CACI International

Office in United States

Also hiring in Washington, Dc, United States, Denver, United States, Austin, United States and 8 more places

83 of their 465 open roles are remote

Your chances

We've checked whether it's still hiring and how crowded it is.

  • 21 checks run
  • 0 red flags

Still hiring?

14 checks

No red flags

How crowded?

7 checks

No red flags

Fits Me

How well does this role fit you?

Answer a few questions or drop your CV, and every role gets a fit score with the reasons, this one first.

  • Your field
  • Level
  • Stack
  • Work model
  • Salary floor
  • Must-haves
Details10 facts · Role, Location, Compensation, Employment
Tech stack
  • Python
  • Linux
  • GitLab
  • Ansible
Type
Full-time
Specialty
Security
Region
United States
Pay period
Annual
Show 5 more factsShow less

Role

Category
DevOps & Infrastructure
Specialty
Security
Experience
5+ years
Tech stack
  • Python
  • Linux
  • GitLab
  • Ansible

Location

Work model
Office
Region
United States
Office
  • United States

Compensation

Salary
$86,600 - 181,800 / year
Pay period
Annual

Employment

Type
Full-time

Something wrong with this vacancy?

Similar vacancies

Share this vacancy

What's wrong with it?

The employer never sees who reported.

Reason