Junior Red Hat Linux Engineer

Socket.dev; Virginia (MN); On-site; USD 85,000 - 105,000; Full time

Job summary

Agile Defense seeks a Junior Red Hat Linux Engineer to support ACAS deployments for government networks. You will install and patch Linux systems, maintain Nessus scanners, and contribute to security assessments and documentation.

The role requires 3+ years of Linux support and RHEL experience, with DoD-level security awareness and capacity to work at Quantico, VA. Some travel and off-hours support may be required.

Qualifications

• 3+ years of experience in supporting, configuring, and administering Linux.
• Experience with Red Hat Enterprise Linux (RHEL) 7.x or greater in an enterprise environment.
• Familiarity with virtualization (vSphere/ESXi) and Nessus tools.
• Knowledge of STIGs, IAM, CAS, IAVA management, and security operations.

Responsibilities

• Install and patch operating systems and applications per DISA STIGs for ACAS deployments.
• Assess existing ACAS implementations and recommend changes.
• Document ACAS designs including IP, FQDN, and location of components.

Skills

Red Hat Linux

SSH troubleshooting

VMware

Nessus

Ansible

Python

Bash

Networking basics

Tools

vSphere/ESXi

Nessus Manager

PVS

RHEL

Job description

Requisition #: 1639
Job Title: Junior Red Hat Linux Engineer
Location: Quantico, VA
Clearance Level: Secret, Must Have Clearance to Start
Required Certification(s): DoD 8570 IAT III or IAM II (CASP+, CCNP Security, CISA, GSE, SCNA, CISSP, CAP, GSLC, CISM, GCED, GCIH, CISO, or HCISPP)

The successful candidate will use their Red Hat Linux experience to support the Customer in the design and implementation of their Assured Compliance Assessment Solution (ACAS) for the Customer’s Government Enterprise Networks (GEN). The Linux Administrator will operate and maintain the infrastructure for the ACAS solution to support network and appliance scanning and configuration assessments and provide training to operators and Information Assurance personnel to maintain and operate the ACAS tool functionality.

Duties and Responsibilities

• Install and patch operating systems, application, and document Department Information Systems Agency (DISA) Security Technical Implementation Guidelines (STIGs) applicable to each network environment for all ACAS implementations.
• Assess current ACAS implementations for each of the GEN networks and recommend changes.
• Document the steps required to design the ACAS solution for each of the GEN networks to include IP address, Fully Qualified Domain Name, and physical location of each component.
• Create network diagrams of the designs with Microsoft Visio (include list of hardware and software requirements).
• Maintain the Nessus scanners and Passive Vulnerability Scanner’s (PVS) connectivity with the associated Security Center (SC).
• Develop and/or update the Standard Operating Procedures (SOP) to support each of the client ACAS solutions documented within the SharePoint portal.
• Provide reports as necessary.
• Build Linux Server from DISA provided ISO image.
• Have knowledge and experience with RedHat Linux.
• Possess understanding and experience with common cybersecurity toolsets and processes to include STIGs, CAS, IAVA Management and Implementation, and Operation Order (OPORD)/Fragmentary Order (FRAGO) support.
• Have 3+ years’ experience in supporting, configuring, and administering Linux.
• Have 3+ (RHEL) operating system in an enterprise environment – RHEL 7.x or greater.
• Have experience with virtualized environments (vSphere, ESXi).
• Have Red Hat Enterprise Linux (RHEL) experience.
• Must be able to troubleshoot SSH connection issues.
• Have good understanding of LVM Partitioning, Disk space and troubleshooting systems related issues.
• Be familiar with VMware and vSphere.
• Have an understanding of SSL/TLS Certificate and OS hardening.
• Have a strong understanding of Network configuration and troubleshooting (nmtui, nmcli, service, netstat, grep, top command).
• Understand patching and RPM package management – this is a MUST!!!
• Be able to troubleshoot Kernel Panic, Root and Grub password Reset, & Firewall configurations.
• Be familiar with Ansible, Ansible-playbook and ansible roles.
• Understand Red Hat Satellite Version 6.12 or higher.
• Be familiar with Active Directory Concepts, LDAP, or Kerberos.
• Be familiar with migration from RHEL7 to RHEL8 using Leapp utility.
• Build or configure new YUM Repositories for patching purposes.
• Be familiar with AWS/AZURE Cloud for future projects.
• Have scripting experience (Nessus Attack Scripting Language (NASL), Python, Bash).
• Have engineering experience with Nessus Manager and Monitor Implementation.

Physical Requirements

• General office environment. Work is generally sedentary in nature but may require standing and walking for up to 10% of the time. The working environment is generally favorable. Lighting and temperature are adequate, and there are not hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.
• Contractor site with 0-10% travel possible.
• Possible off-hours work to support releases and outages.
• 10 lbs. maximum lifting, occasional lift/carry of small articles.
• Occasionally required to stand; frequently required to walk and sit.
• Continually required to utilize hand and finger dexterity.
• Occasionally required to climb, balance, bend, stoop, kneel or crawl.
• Continually required to talk or hear.
• Continually utilize visual acuity to operate equipment, read technical information, and/or use a keyboard.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities