Senior Security Systems Engineer

Description

The Systems Integration Group is hiring a full-time senior engineer who splits time between building and fixing software and owning the systems those applications run on.

You will manage RHEL 8 installs and setup, run security scans and hardening work including SELinux policy, write and keep up utility scripts and automated build pipelines, and support the Identity Management (IdM/FreeIPA) and PKI infrastructure the environment depends on.

You will use Python and shell scripting to automate system builds, Ansible configuration and routine operations, and draw on networking, virtualization (ESXi and KVM) and hardware knowledge to track down faults. You will talk directly with the customer, collecting defect reports and enhancement requests and turning them into a prioritized backlog for upcoming releases.

This is a regular employee position.

Responsibilities

• Improve existing applications so they meet customer and operational needs
• Build and maintain Ansible, Python and shell automation for fast, repeatable system builds and configuration
• Write and update user and admin documentation required by the contract
• Travel onsite now and then to integrate operational systems, apply updates and support deployments
• Measure, examine and tune older software and the system stack beneath it
• Set up, harden and look after RHEL 8 systems, including their SELinux policies
• Support and expand IdM/FreeIPA and PKI infrastructure
• Help run ESXi and KVM virtualization environments and their networking

Requirements

• Required: A bachelor's degree or higher in computer science, computer engineering or a related technical field, or equivalent relevant experience
• Required: U.S. citizen holding at least a Secret clearance, with the ability to obtain TS/SCI
• Required: 7+ years of systems engineering or related experience
• Required: Solid knowledge of Unix/Linux, with substantial RHEL 8 experience
• Required: Strong Python scripting and programming skills
• Required: Proficient in Bash and shell scripting
• Required: Strong hands-on experience with IdM or FreeIPA
• Required: Strong grasp of PKI concepts and how they are put into practice
• Required: Proficient in networking concepts
• Required: Basic to intermediate understanding of SELinux
• Required: Proficient with Ansible for configuration management and automation
• Required: Experience with virtualization platforms, including ESXi and KVM
• Required: Solid grasp of software design concepts, patterns, tools and best practices
• Required: Basic understanding of virtualization and hypervisor configuration
• Desired: Experience with a common CI/CD system such as GitLab Pipelines, GitHub Actions, Jenkins, CircleCI or similar
• Desired: Familiarity with device boot processes (BIOS, UEFI, PXE)
• Desired: Ability to code in other languages such as Golang, TypeScript, C or C++
• Desired: Experience with cybersecurity scanning, hardening and secure configuration in enclave or classified environments

Conditions

Full-time role requiring a Secret clearance minimum to start

Up to 10% travel within the continental US

Final salary depends on factors such as location, federal contract labor categories and wage rates, prior experience, skills, education and certifications

The proposed salary range is $108,400 - 227,500 USD

Benefits

• Flexible time off that lets you take the time you need
• Access to learning resources for professional development
• Comprehensive benefits covering healthcare, wellness, financial, retirement, family support, continuing education and time off
• Competitive compensation and learning and development opportunities