Linux Engineer

Responsibilities:

1. Conceptualize, Design, Build, and Maintain current and future Agency supported tools and platforms.
2. Manage multiple assignments, changing priorities, and work independently with little oversight.
3. Work closely with senior engineers, other team members, and application owners to solve technical problems at the network, system, and application levels.
4. Conduct network security architecture reviews to determine the size and placement of intrusion monitoring equipment during the customer onboarding process.
5. Documentation and reporting along with presentation, teamwork, and Agency-wide collaboration are among the expected duties and mission of the task order.
6. Resolve Linux system errors and crashes, disk space problems, and full disk errors.
7. Implement and troubleshoot Linux network services such as NFS, NTP, FTP, SSH, DNS, and STIG them using DISA guidelines.
8. Configure LDAP server and LDAP client on Linux machines for authorization and authentication.
9. Build new Linux Virtual Machines and physical servers using templates and ISOs.
10. Create new Linux templates and STIG them using DISA guidelines.
11. Experience in backend solution, day-to-day system admin and monitoring, file system management, and disk management and creation of shell scripts for the automation of tasks and the extraction of logs.
12. Hardware and software installations, upgrades, maintenance, security analysis, and network performance and tuning of Linux servers in a virtual infrastructure.
13. Installation and maintenance of Red Hat Satellite servers to push changes to various servers simultaneously.
14. Develop solutions to complex technical issues.
15. Provide follow-up reports (technical findings, feedback, resolution steps taken) for Root Cause analysis, engineering technical assessment, and process improvement initiatives.
16. Complete Automated patching using RHEL Satellite - install, configure, manage patches, and upload updates.
17. Strong technical, analytical, and interpersonal skills. Self-motivation and ability to work independently.
18. Draft technical documentation, reports, and presentations as needed for customer or internal use.
19. Communicate with other technical leads, IT groups, and clients so they understand the project's technical implications, dependencies, and potential conflicts. Evaluate the impacts of change requests on own/shared technologies and effectively persuade and influence others on ideas.

Required Education/Experience:

A minimum of 3 years of experience in system administration, database administration, network engineering, software engineering, or software development, with a concentration in Cybersecurity.

Certifications:

CASP, Security+, GCWN, GISF, GSSP, GICSP, CCNP, CCNP Security, CCIE Security, CEH, ENSA, ECSP, MCSE, VCP, BCAP, VCIX, VCDX, RHCA, RHCE.

Basic Qualifications:

1. Experience Installing, configuring, securing, and troubleshooting CentOS, RHEL, or Ubuntu Linux Administration.
2. Extensive automation experience with PowerShell and Shell Scripting for automating Linux installs.
3. Extensive knowledge of DELL (Power Edge) and other Enterprise Servers.
4. Extensive knowledge of Ansible, Satellite, and VMWare ESXi/VCenter.
5. Network experience and understanding with the following: TCP/IP, NIS, NFS, DNS, DHCP, FTP/TFTP, SSH, SFTP, ARP.
6. Experience with storage tools such as NAS (NFS, SAMBA, RAID 0/1/5/6/10) and SAN (iSCSI, Fiber Channel).
7. Cloud and VMWare skills – Understanding of cloud terminology, architecture, and tools to include: installing, provisioning, and monitoring.
8. Strong capabilities to assist with automating manual installation and maintenance/patching tasks and utilization of such tools as provisioning environments with Ansible.
9. Superior attention to detail with excellent written and verbal communication skills.
10. Perform analysis of security posture by reviewing vulnerability and compliance scans and making recommendations for remediations and managing POAMs.
11. Self-motivation and ability to work independently.
12. Department of Homeland Security CISA employees are required to obtain an Entry on Duty (EOD) clearance to support this program.

Preferred Qualifications:

1. Experience working with Azure.
2. Solid grasp of networking fundamentals.
3. Experience working with Tenable.
4. Experience working in an Agile development environment.
5. Experience with ZTA (Zero Trust Architecture).