Junior Red Hat Linux Engineer

Commitent; Quantico (VA); On-site; USD 110,000 - 120,000; Full time

Job summary

CommIT Enterprises, Inc. is seeking a Junior Red Hat Linux Engineer to join the Quantico, VA team. The role focuses on supporting the ACAS design, installation, and maintenance for GEN networks, ensuring system hardening and compliance with DISA STIGs.

The candidate will work with Nessus, PVS, Ansible, and vSphere in a DoD environment, and will train operators and IA personnel to operate ACAS effectively.

Qualifications

• Red Hat Enterprise Linux (RHEL) expertise in an enterprise environment.
• Experience with STIGs, CAS, IAVA management and DoD security processes.
• Strong troubleshooting of SSH connections and kernel issues.
• Knowledge of virtualized environments including vSphere/ESXi.
• Experience with patching, RPM management, and Linux system hardening.

Responsibilities

• Install, patch, and harden operating systems and applications per DISA STIGs.
• Assess and document ACAS design for GEN networks with IP/host details.
• Create network diagrams using Visio and specify hardware/software requirements.
• Maintain Nessus scanners and PVS connectivity to Security Center.
• Develop or update SOPs for each ACAS solution and provide operator training.
• Generate reports and build Linux servers from DISA ISO images.

Skills

Red Hat Linux

SSH troubleshooting

LVM

VMware vSphere

Ansible

Nessus Manager

Nessus (PVS)

PVS

DISA STIGs

Patch management

Education

DoD 8570 IAT III or IAM II (CASP+, CCNP Security, CISA, GSE, CISSP [or Associate], CAP, GSLC, CISM, GCED, GCIH, CISO, HCISPP)

Tools

VMware vSphere

ESXi

Nessus

Satell ite 6.12+

Leapp

RHEL 7.x+

Ansible playbooks

Azure/AWS (cloud)

DISA STIGs tooling

Job description

Overview

CommIT Enterprises, Inc. is seeking an Junior Red Hat Linux Engineer tojoin the team inQuantico, VA. The successful candidate will use their Red Hat Linux experience to support the Customer in the design and implementation of their Assured Compliance Assessment Solution (ACAS) for the Customer’s Government Enterprise Networks (GEN). The Linux Administrator will operate and maintain the infrastructure for the ACAS solution to support network and appliance scanning and configuration assessments and provide training to operators and Information Assurance personnel to maintain and operate the ACAS tool functionality.

Responsibilities

Your essential job functions will include but may not be limited to-

• Install and patch operating systems, application, and document Department Information Systems Agency (DISA) Security Technical Implementation Guidelines (STIGs) applicable to each network environment for all ACAS implementations.
• Assesses current ACAS implementations for each of the GEN networks and recommend changes.
• Document the steps required to design the ACAS solution for each of the GEN networks to include IP address, Fully Qualified Domain Name, and physical location of each component.
• Create network diagrams of the designs with Microsoft Visio (include list of hardware and software requirements).
• Maintains the Nessus scanners and Passive Vulnerability Scanner’s (PVS) connectivity with the associated Security Center (SC).
• Develop and/or update the Standard Operating Procedures (SOP) to support each of the client ACAS solutions documented within the SharePoint portal.
• Provide reports as necessary.
• Build Linux Server from DISA provided ISO image.

Qualifications

Required Experience and Education:

• Knowledge and experience with RedHat Linux. Possesses understanding and experience with common cybersecurity toolsets and processes to include STIGs, CAS, IAVA Management and Implementation, and Operation Order (OPORD)/Fragmentary Order (FRAGO) support.
• Red Hat Enterprise Linux (RHEL) experience.
• Must be able to troubleshoot SSH connection issues.
• Good understanding of LVM Partitioning, Disk space and troubleshooting Systems related issues.
• Familiar with VMware and vSphere.
• Understanding of SSL/TLS Certificate and OS hardening.
• Strong understanding of Network configuration and troubleshooting (nmtui, nmcli, service, netstat, grep, top command).
• Understanding of patching and RPM package management is a MUST!!!
• Be able to troubleshoot Kernel Panic, Root and Grub password Reset, & Firewall configurations.
• Familiar with Ansible, Ansible-playbook and ansible roles
• DoD 8570 IAT III or IAM II (CASP+, CCNP Security, CISA, GSE, SCNA, CISSP [or Associate], CAP, GSLC, CISM, GCED, GCIH, CISO, or HCISPP).
• 3+ years’ experience in supporting, configuring, and administering Linux
• 3+ (RHEL) operating system in an enterprise environment RHEL 7.x or greater
• Experience with virtualized environments (vSphere, ESXI)

Preferred Skills:

• Understanding on Red Hat Satellite Version 6.12 or higher
• Familiar with Active Directory Concepts, LDAP, or Kerberos
• Familiar with migration from RHEL7 to RHEL8 using Leapp utility.
• Build or configure new YUM Repositories for patching purposes.
• Familiar with AWS/AZURE Cloud for future projects.
• Scripting (Nessus Attack Scripting Language (NASL), Python, Bash)
• Engineering experience with Nessus Manager and Monitor Implementation
• Able to spin new instance on the cloud from a given AMI or Launch Template
• Understand the concept of Security Groups, VPC, IAM, Autoscaling, Load Balancer Container architecture
• Experience with DoW’s ACAS application.
• ACAS training certification

Security Requirements:

• Active DoD – Secret

Salary:

• The anticipated salary range for this position is $110,000 - $120,000 annually. Final compensation will be determined based on job-related factors, including the candidate’s relevant work experience, education, professional certifications, technical skills, required security clearance level, geographic location, and overall qualifications. The posted range reflects the company’s good-faith expectation for this position at the time of posting.

About CommIT:

• Established in 2001, CommIT is a Certified Veteran-Owned Small Business (CVOSB) providing innovative technical engineering and data science services. Our enterprise systems support includes the Department of Defense’s (DoD) GCSS-MC, CAC2S, TBMCS-MC, and the Department of Veteran’s Affairs’ (VA) telehealth communications. We offer acquisition management, systems engineering, Agile software development, cloud management, IT modernization, data analytics, cybersecurity, and training, including leading-edge DevSecOps, automated testing, and mobile application development.

Equal Opportunity Employer:

CommIT Enterprises, Inc. is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.