Senior Linux Security Engineer — RHEL/NixOS, Manila

Trinity Consulting; Manila; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Trinity Consulting in Manila, Philippines seeks an experienced Linux Engineer to design, deploy, and harden enterprise Linux environments (RHEL and NixOS) with immutable infrastructure and container security controls.

You will manage Suricata and Zeek sensors, advanced firewall rules, nftables/iptables, and cloud-native security tooling to ensure high availability, strong threat defense, and rigorous documentation across security and infrastructure teams.

Qualifications

• Bachelor’s degree or equivalent in CS/IT/Cybersecurity or related field.
• 8+ years of progressive Linux engineering and network security experience.
• Strong hands-on with RHEL and NixOS; kernel, security, performance optimization.

Responsibilities

• Architect, configure, deploy, and maintain RHEL/NixOS environments.
• Manage nftables/iptables and advanced firewall configurations.
• Deploy and administer container security platforms (Cilium) and cloud-native protections.
• Configure Suricata and Zeek sensors for enterprise monitoring.
• Design immutable OS deployments for tamper-proof infrastructure.
• Troubleshoot complex OS issues, security alerts, and performance bottlenecks.
• Coordinate patches and maintenance within strict SLA windows.
• Maintain thorough documentation and incident histories.

Skills

RHEL expertise

NixOS expertise

Kernel tuning

Firewalling (nftables/iptables)

Suricata/Zeek

Container security (Cilium)

Cloud-native security

Documentation & cross-functional comms

8+ years Linux engineering

Security incident response

Work authorization Philippines

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

Kubernetes

Docker

Ansible

Python

ServiceNow/Jira

Elastic Stack/Splunk

Job description

Trinity Consulting in Manila, Philippines seeks an experienced Linux Engineer to design, deploy, and harden enterprise Linux environments (RHEL and NixOS) with immutable infrastructure and container security controls.

You will manage Suricata and Zeek sensors, advanced firewall rules, nftables/iptables, and cloud-native security tooling to ensure high availability, strong threat defense, and rigorous documentation across security and infrastructure teams.