Linux Engineer (Classified Environment)

Oak Ridge National Laboratory; Oak Ridge (TN); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Prescription Drug Plan

Dental Plan

Vision Plan

401(k) Retirement Plan

Contributory Pension Plan

Life Insurance

Disability Benefits

Generous Vacation and Holidays

Parental Leave

Legal Insurance with Identity Theft 保护

Employee Assistance Plan

Flexible Spending Accounts

Health Savings Accounts

Wellness Programs

Educational Assistance

Relocation Assistance

Employee Discounts

Job summary

Oak Ridge National Laboratory is seeking a Linux Engineer to design, build, and modernize highly secure Linux infrastructure supporting classified missions. You will own mission-critical accounts and collaborate with a focused team to deliver resilient, scalable systems with RMF/NIST compliance.

The role requires deep Linux expertise, automation focus, and the ability to operate across security domains, with Top-Secret clearance access to Q/SCI.

Qualifications

• BS degree in a related technical field and at least five years of Linux engineering or administration experience.
• Current Top-Secret clearance with Q and SCI eligibility.
• Demonstrated expertise with RHEL/Linux engineering, troubleshooting, performance tuning, automation, and scripting.
• Experience with Ansible, Python, Bash, enterprise virtualization, identity integration, storage, monitoring/logging, and cybersecurity compliance.
• Strong analytical and problem-solving skills with the ability to independently solve complex technical challenges and collaborate across multidisciplinary teams.

Responsibilities

• Engineer and modernize secure Linux infrastructure supporting classified environments using RHEL and related distributions.
• Design, build, configure, optimize, and sustain Linux platforms across multiple security domains.
• Develop automation using Ansible, Python, Bash, and Git-based workflows to improve deployment, patching, and compliance.
• Implement cybersecurity requirements including RMF, NIST 800-53, STIGs, DOE directives, and ICD 503.
• Integrate Linux with identity, virtualization, storage, backup, and monitoring capabilities (AD, LDAP, Kerberos, PKI, VMware, KVM).
• Troubleshoot complex issues and partner with cybersecurity, networking, storage, and mission teams to build secure solutions.
• Evaluate new technologies and architectures to advance modernization and mission capabilities.
• Support mission-critical operations, planned maintenance, and occasional after-hours requirements.

Skills

RHEL/Linux engineering

Troubleshooting

Automation

Scripting

Ansible

Python

Bash

Enterprise virtualization

Identity integration

Storage

Monitoring/logging

Cybersecurity compliance

Education

BS degree in a related technical field

Tools

Active Directory

LDAP

Kerberos

PKI

VMware

KVM

Job description

Select how often (in days) to receive an alert:

The Field Intelligence Operations Division (FIOD) of the National Security Directorate (NSSD), is seeking an exceptional Linux Engineer to help design, build, and advance the secure computing environments behind some of the nation’s most consequential national security, intelligence, and scientific missions. You’ll have genuine ownership over mission-critical accounts and work closely with a small, focused team trusted to execute with minimal supervision. The position requires Top-Secret Clearance with access to Q and SCI.

This is not a traditional Linux administration role. You will work at the intersection of advanced Linux engineering, cybersecurity, high-performance computing, emerging technologies, and classified mission systems—solving complex technical challenges in environments where security, reliability, and performance are critical.

As a Linux Engineer, you will help architect, implement, automate, operate, and continuously modernize highly secure Linux infrastructure supporting both current missions and rapidly evolving capabilities. You will work across multiple security domains and collaborate with cybersecurity professionals, systems and network engineers, scientists, researchers, and mission partners to turn demanding requirements into resilient, scalable, and secure computing solutions.

We are looking for someone who enjoys building, automating, troubleshooting, experimenting, and solving problems others cannot. The ideal candidate brings deep Linux expertise, a strong engineering mindset, curiosity about emerging technologies, and the drive to continually improve how secure computing environments are designed and operated. If you are a Linux engineer who wants more than routine administration—and you want to apply your skills to technically challenging problems with real national impact—this is an opportunity to build systems that matter.

Major Duties/Responsibilities

• Engineer and modernize secure Linux infrastructure supporting classified national security, intelligence, scientific, HPC, and emerging mission environments, primarily using Red Hat Enterprise Linux (RHEL) and related distributions.
• Design, build, configure, optimize, and sustain physical and virtual Linux platforms across multiple security domains.
• Develop automation using Ansible, Python, Bash, and Git-based workflows to improve deployment, configuration, patching, compliance, reliability, and operational efficiency.
• Implement cybersecurity requirements including RMF, NIST 800-53, STIGs, DOE directives, and ICD 503, including system hardening, vulnerability remediation, monitoring, and secure logging.
• Integrate Linux environments with enterprise identity, virtualization, storage, backup, and monitoring capabilities, including Active Directory, LDAP, Kerberos, PKI, VMware, and KVM.
• Troubleshoot complex technical issues and partner with cybersecurity, networking, storage, application, HPC, and mission teams to develop secure, scalable solutions.
• Evaluate and introduce new technologies, architectures, and engineering approaches that advance infrastructure modernization and emerging mission capabilities.
• Support mission-critical operations, planned maintenance, and occasional after-hours requirements.

Basic Qualifications

• BS degree in a related technical field and at least five years of Linux engineering or administration experience. Equivalent education, experience, and certifications may be considered.
• Current Top-Secret clearance with Q and SCI eligibility.
• Demonstrated expertise with RHEL/Linux engineering, troubleshooting, performance tuning, automation, and scripting.
• Experience with Ansible, Python, Bash, enterprise virtualization, identity integration, storage, monitoring/logging, and cybersecurity compliance.
• Strong analytical and problem-solving skills with the ability to independently solve complex technical challenges and collaborate across multidisciplinary teams.

Preferred Qualifications

Experience in one or more of the following:

• Classified, Intelligence Community, DoD, DOE, or other highly regulated computing environments.
• HPC, AI/ML infrastructure, GPU computing, containers, Kubernetes, or advanced computing platforms.
• Infrastructure-as-code, advanced automation, CI/CD, or enterprise configuration management.
• Enterprise virtualization, storage, backup, and disaster-recovery architectures.
• RMF, NIST 800-53, STIG implementation, vulnerability management, or authorization activities.
• Designing or modernizing enterprise Linux environments and introducing emerging technologies.
• Relevant Linux, automation, cybersecurity, virtualization, or cloud certifications.

Special Requirements

• Visa sponsorship: Visa sponsorship is not available for this position.
• Security, Credentials, and Eligibility Requirements: Q clearance with SCI: This position requires the ability to obtain and maintain a Secret Compartmented Information (SCI) clearance from the Department of Energy. As such, this position requires the ability to obtain and maintain a Secret Compartmented Information (SCI) clearance from the Department of Energy. This is a Workplace Substance Abuse (WSAP) testing designated position. WSAP positions require passing a pre-placement drug test and participation in an ongoing random drug testing program. In addition, due the SCI, you may also be subject to random polygraph testing.

About ORNL

As a U.S. Department of Energy (DOE) Office of Science national laboratory, ORNL has an impressive 80-year legacy of addressing the nation’s most pressing challenges. Our team is made up of over 7,000 dedicated and innovative individuals! Our goal is to create an environment where a variety of perspectives and backgrounds are valued, ensuring ORNL is known as a top choice for employment. These principles are essential for supporting our broader mission to drive scientific breakthroughs and translate them into solutions for energy, environmental, and security challenges facing the nation.

ORNL offers competitive pay and benefits programs to attract andretainindividuals whodemonstrateexceptional work behaviors. The laboratoryprovidesa range of employee benefits, including medical and retirement plans and flexible work hours, to support the well-being of you and your family. Employee amenities such as on-site fitness, banking, and cafeteria facilities are also available for added convenience.

Other Benefits

• Prescription Drug Plan
• Dental Plan
• Vision Plan
• 401(k) Retirement Plan
• Contributory Pension Plan
• Life Insurance
• Disability Benefits
• Generous Vacation and Holidays
• Parental Leave
• Legal Insurance with Identity Theft Protection
• Employee Assistance Plan
• Flexible Spending Accounts
• Health Savings Accounts
• Wellness Programs
• Educational Assistance
• Relocation Assistance
• Employee Discounts

This position will remain open for a minimum of 5 days after which it will close when a qualified candidate is identified and/or hired.

ORNL is an equal opportunity employer. All qualified applicants, including individuals with disabilities and protected veterans, are encouraged to apply. UT-Battelle is an E-Verify employer.