Linux Engineer (Classified Environment)

UT-Battelle; Oak Ridge (TN); On-site; USD 120,000 - 165,000; Full time

Job summary

UT-Battelle's Oak Ridge National Laboratory seeks a Linux Engineer to design, build, and modernize secure Linux infrastructure for classified missions. You will own mission-critical accounts and collaborate with cross-disciplinary teams, operating under Top-Secret clearance with Q and SCI eligibility.

This role focuses on advanced Linux engineering, automation, RMF/NIST compliance, and integration with AD/LDAP, virtualization, and monitoring tools, delivering scalable, resilient solutions for

Qualifications

• BS degree in a related technical field.
• Current Top-Secret clearance with Q and SCI eligibility.
• Strong Linux engineering, troubleshooting, automation, scripting.

Responsibilities

• Engineer and modernize secure Linux infrastructure supporting classified environments, primarily using RHEL and related distributions.
• Design, build, configure, optimize, and sustain Linux platforms across multiple security domains.
• Develop automation using Ansible, Python, Bash, and Git-based workflows to improve deployment, configuration, patching, compliance, reliability, and efficiency.
• Implement cybersecurity requirements including RMF, NIST 800-53, STIGs, and ICD 503, including system hardening and monitoring.
• Integrate Linux with enterprise identity, virtualization, storage, backup, and monitoring capabilities (AD/LDAP/Kerberos, PKI, VMware, KVM).
• Troubleshoot complex issues and partner with cybersecurity, networking, storage, and mission teams to develop secure, scalable solutions.
• Evaluate and introduce new technologies and approaches for modernization and capabilities.
• Support mission-critical operations, planned maintenance, and occasional after-hours work.

Skills

Linux engineering

Automation scripting

Troubleshooting

Identity integration

Security compliance

Education

BS degree in a related technical field

Tools

Ansible

Python

Bash

VMware

KVM

RHEL

Job description

Overview

Requisition Id 16982

The Field Intelligence Operations Division (FIOD) of the National Security Directorate (NSSD), is seeking an exceptional Linux Engineer to help design, build, and advance the secure computing environments behind some of the nation’s most consequential national security, intelligence, and scientific missions. You’ll have genuine ownership over mission‑critical accounts and work closely with a small, focused team trusted to execute with minimal supervision. The position requires Top‑Secret Clearance with access to Q and SCI.

This is not a traditional Linux administration role. You will work at the intersection of advanced Linux engineering, cybersecurity, high‑performance computing, emerging technologies, and classified mission systems—solving complex technical challenges in environments where security, reliability, and performance are critical.

As a Linux Engineer, you will help architect, implement, automate, operate, and continuously modernize highly secure Linux infrastructure supporting both current missions and rapidly evolving capabilities. You will work across multiple security domains and collaborate with cybersecurity professionals, systems and network engineers, scientists, researchers, and mission partners to turn demanding requirements into resilient, scalable, and secure computing solutions.

We are looking for someone who enjoys building, automating, troubleshooting, experimenting, and solving problems others cannot. The ideal candidate brings deep Linux expertise, a strong engineering mindset, curiosity about emerging technologies, and the drive to continually improve how secure computing environments are designed and operated. If you are a Linux engineer who wants more than routine administration—and you want to apply your skills to technically challenging problems with real national impact—this is an opportunity to build systems that matter.

Major Duties/Responsibilities

• Engineer and modernize secure Linux infrastructure supporting classified national security, intelligence, scientific, HPC, and emerging mission environments, primarily using Red Hat Enterprise Linux (RHEL) and related distributions.
• Design, build, configure, optimize, and sustain physical and virtual Linux platforms across multiple security domains.
• Develop automation using Ansible, Python, Bash, and Git‑based workflows to improve deployment, configuration, patching, compliance, reliability, and operational efficiency.
• Implement cybersecurity requirements including RMF, NIST 800‑53, STIGs, DOE directives, and ICD 503, including system hardening, vulnerability remediation, monitoring, and secure logging.
• Integrate Linux environments with enterprise identity, virtualization, storage, backup, and monitoring capabilities, including Active Directory, LDAP, Kerberos, PKI, VMware, and KVM.
• Troubleshoot complex technical issues and partner with cybersecurity, networking, storage, application, HPC, and mission teams to develop secure, scalable solutions.
• Evaluate and introduce new technologies, architectures, and engineering approaches that advance infrastructure modernization and emerging mission capabilities.
• Support mission‑critical operations, planned maintenance, and occasional after‑hours requirements.

Basic Qualifications

• BS degree in a related technical field and at least five years of Linux engineering or administration experience. Equivalent education, experience, and certifications may be considered.
• Current Top‑Secret clearance with Q and SCI eligibility.
• Demonstrated expertise with RHEL/Linux engineering, troubleshooting, performance tuning, automation, and scripting.
• Experience with Ansible, Python, Bash, enterprise virtualization, identity integration, storage, monitoring/logging, and cybersecurity compliance.
• Strong analytical and problem‑solving skills with the ability to independently solve complex technical challenges and collaborate across multidisciplinary teams.

Preferred Qualifications

Experience in one or more of the following:

• Classified, Intelligence Community, DoD, DOE, or other highly regulated computing environments.
• HPC, AI/ML infrastructure, GPU computing, containers, Kubernetes, or advanced computing platforms.
• Infrastructure‑as‑code, advanced automation, CI/CD, or enterprise configuration management.
• Enterprise virtualization, storage, backup, and disaster‑recovery architectures.
• RMF, NIST 800‑53, STIG implementation, vulnerability management, or authorization activities.
• Designing or modernizing enterprise Linux environments and introducing emerging technologies.
• Relevant Linux, automation, cybersecurity, virtualization, or cloud certifications.

Special Requirements

• Visa sponsorship: Visa sponsorship is not available for this position.
• Security, Credentials, and Eligibility Requirements: Q clearance with SCI: This position requires the ability to obtain and maintain a Secret Compartmented Information (SCI) clearance from the Department of Energy. As such, this position is a Workplace Substance Abuse (WSAP) testing designated position. WSAP positions require passing a pre‑placement drug test and participation in an ongoing random drug testing program. In addition, due the SCI, you may also be subject to random polygraph testing.

About ORNL

As a U.S. Department of Energy (DOE) Office of Science national laboratory, ORNL has an impressive 80‑year legacy of addressing the nation’s most pressing challenges. Our team is made up of over 7,000 dedicated and innovative individuals! Our goal is to create an environment where a variety of perspectives and backgrounds are valued, ensuring ORNL is known as a top choice for employment. These principles are essential for supporting our broader mission to drive scientific breakthroughs and translate them into solutions for energy, environmental, and security challenges facing the nation.

ORNL offers competitive pay and benefits programs to attract and retain individuals who demonstrate exceptional work behaviors. The laboratory provides a range of employee benefits, including medical and retirement plans and flexible work hours, to support the well‑being of you and your family. Employee amenities such as on‑site fitness, banking, and cafeteria facilities are also available for added convenience.

Other benefits include the following:

• Prescription Drug Plan
• Dental Plan
• Vision Plan
• 401(k) Retirement Plan
• Contributory Pension Plan
• Life Insurance
• Disability Benefits
• Generous Vacation and Holidays
• Parental Leave
• Legal Insurance with Identity Theft Protection
• Employee Assistance Plan
• Flexible Spending Accounts
• Health Savings Accounts
• Wellness Programs
• Educational Assistance
• Relocation Assistance
• Employee Discounts

This position will remain open for a minimum of 5 days after which it will close when a qualified candidate is identified and/or hired.

ORNL is an equal opportunity employer. All qualified applicants, including individuals with disabilities and protected veterans, are encouraged to apply. UT‑Battelle is an E‑Verify employer.