Cloud Engineer

System One; Herndon (VA); Remote; USD 200,000 - 250,000; Full time

Job summary

System One seeks a Cloud Engineer to support ICAM platforms with active Secret clearance. The role involves Linux server administration, scripting, and implementing security baselines while coordinating with cybersecurity and application teams.

Remote-offsite collaboration is expected, with 40-hour weeks and direct-hire status. Responsibilities include patching, monitoring, and automation development using Bash, Python, and Ansible to support CI/CD workflows for ICAM services.

Qualifications

• US Citizen required
• Active Secret Clearance required
• Experience with Linux administration and system services
• Familiarity with identity or security services (LDAP, SSO, federation, certificates, PAM, SSSD)
• Familiarity with logging platforms (Splunk, ELK) and monitoring tools
• Scripting experience (Bash, Python, Ansible)
• Understanding IAM concepts: authentication, authorization, identity lifecycle, RBAC, MFA
• Knowledge of security hardening and compliance frameworks

Responsibilities

• Manage, configure, and maintain Linux servers (RHEL/Oracle Linux/Ubuntu) including patching and lifecycle management
• Monitor system performance, health, and capacity for optimal operations
• Support ICAM tools and services ensuring secure configuration and uptime
• Assist in integrating identity services with enterprise applications and infrastructure
• Implement and maintain security baselines (DISA STIGs, CIS) and assist with audits and compliance reporting
• Manage certificates, key stores, and cryptographic components
• Develop scripts to automate tasks and support CI/CD or DevOps for ICAM updates
• Troubleshoot OS and application issues, participate in on-call rotations, perform root cause analysis
• Collaborate with ICAM architects and cybersecurity teams to support projects, migrations, and environment buildouts

Skills

Linux administration

Scripting

IAM concepts

Security hardening

Logging/monitoring

Tools

LDAP

SSO

PAM

SSSD

Splunk

ELK

Job description

Job Title: Cloud Engineer
Location: Herndon, Virginia
Type: Direct Hire
Compensation: $200,000.00 - $250,000.00
Work Model: Remote – offsite
Hours: 40.0 hours per week
Security Clearance: Active Secret Clearance Required

Responsibilities

• Manage, configure, and maintain Linux servers (RHEL/Oracle Linux/Ubuntu or distribution in use), including patching, vulnerability remediation, system hardening, and lifecycle management.
• Monitor system performance, health, and capacity to ensure optimal operations.
• Support ICAM tools and services such as IAM directories, federation services, PKI components, privileged access systems, connectors, and agent-based integrations, ensuring secure configuration and uptime.
• Assist in integrating identity services with enterprise applications and infrastructure.
• Implement and maintain security baselines (DISA STIGs, CIS Benchmarks, internal policies), assist with audits, log management, identity access reviews, and compliance reporting.
• Manage certificates, key stores, and cryptographic components supporting ICAM services.
• Develop scripts (Bash, Python, Ansible) to automate administrative tasks and support CI/CD or DevOps workflows for ICAM platform updates and configuration changes.
• Troubleshoot OS-level and application-level issues, participate in on-call rotations for high-severity ICAM service events, conduct root cause analysis, and implement permanent fixes.
• Collaborate closely with ICAM architects, cybersecurity teams, network teams, and application teams to support project deliverables, migrations, and environment buildouts.

Requirements

• US Citizen (No dual citizens)
• Active Secret Clearance Required
• Possession of Security+ or equivalent
• Strong knowledge of Linux administration (system services, networking, storage, SELinux, etc.)
• Experience with identity or security services (LDAP, SSO, federation, certificates, PAM, SSSD)
• Familiarity with logging platforms (Splunk, ELK) and monitoring tools
• Scripting experience (Bash, Python, Ansible)
• Understanding of IAM concepts: authentication, authorization, identity lifecycle, RBAC, MFA
• Knowledge of security hardening and compliance frameworks

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.