Linux Security Engineer

IBM; Maryland; On-site; USD 120,000 - 180,000; Full time

Job summary

IBM Consulting is seeking a Linux Security Engineer to help maintain the security posture of a progressive Federal agency. You will install, configure, patch Linux servers, manage containerized workloads, and implement secure baseline configurations across large environments.

You will audit configurations, assess vulnerabilities, and deliver remediation roadmaps. Collaboration with cross-functional teams and ability to obtain Public Trust clearance are required.

Qualifications

• Expertise in installing, configuring, operating, and patching Linux servers.
• Advanced knowledge of configuration management tools (Ansible, Chef, Puppet, SaltStack).
• Strong shell scripting with SSH, SCP, RSYNC, SUDO; hands-on with containerization and orchestration tools (Docker, Podman, Kubernetes, ECS/EKS, Fargate, Singularity).
• Advanced understanding of clustering, load balancing, replication, and automation using Python with Flask, Django, or FastAPI.
• Familiarity with container security tools (Twistlock, Falco, Clair) and RHCE or equivalent certification/experience.
• Ability to obtain and maintain Public Trust clearance.
• Experience with federal agencies.

Responsibilities

• Perform security hardening and rule creation in Linux environments.
• Review configurations to identify vulnerabilities and propose changes.
• Audit firmware versions and settings to ensure compliance with vendor guidance and DoD/DHS standards.
• Analyze security incidents and provide improvement recommendations and roadmaps.
• Deliver consulting services to help clients achieve a superior security posture.
• Create remediation roadmaps to address identified vulnerabilities and incidents.

Skills

Linux servers

Configuration management

Linux/Windows admin

Shell scripting

Container orchestration

Python automation

Container security tools

RHCE or equivalent

Security incident response

Education

Bachelor’s Degree

Tools

Docker

Podman

Kubernetes

ECS/EKS

Fargate

Singularity

Twistlock

Falco

Clair

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your Role And Responsibilities

As a Linux Security Engineer in Infrastructure Security, you play a crucial role in helping maintain security posture for supporting the mission of a progressive Federal agency.

Your Primary Responsibilities Will Include

• Perform security hardening and rule creation Linux environment. This includes reviewing new and re‑evaluating existing configuration settings and rules to verify USCIS’ security posture and eliminate unnecessary risk.
• Review existing configuration settings to identify potential security vulnerabilities and propose settings or architectural changes to address these vulnerabilities.
• Audit firmware versions and configuration settings for all Linux end points to eliminate vulnerabilities and ensure network devices are deployed in accordance with vendor recommendations, industry best‑practices, DoD
• Security Technical and Implementation Guides (STIG), and DHS configuration guidance.
• Analyze Security Incidents and provide recommendations for improvement.
• Deliver consulting services to help clients achieve a superior security posture and effectively manage security incidents.
• Create remediation recommendations and roadmaps to address identified security vulnerabilities and incidents.

Preferred Education

Bachelor’s Degree

Required Technical And Professional Expertise

• Expertise in installing, configuring, operating, and patching Linux servers and managing Linux-based applications.
• Advanced knowledge of configuration management tools (e.g., Ansible, Chef, Puppet, SaltStack) and Linux/Windows administration in medium–large enterprises.
• Strong shell scripting experience (ssh, scp, rsync, sudo) with hands‑on work in containerization and orchestration tools (Docker, Podman, Kubernetes, ECS/EKS, Fargate, Singularity).
• Advanced understanding of clustering, load balancing, replication services, and automation using Python with frameworks such as Flask, Django, or FastAPI.
• Familiarity with container security tools (Twistlock, Falco, Clair) and possession of an active RHCE or equivalent certification/experience.

Ability to obtain and maintain Public Trust clearance

Preferred Technical And Professional Experience

• Able to perform security hardening, reviewing new and re‑evaluating existing configuration settings and rules to verify organizations security posture and eliminate unnecessary risk in all environments.
• Experience supporting federal agencies.
• Ability to demonstrate and explain technical concepts to both technical and non-technical audiences
• Able to clearly communicate with both customers and teammates and provide recommendations for improvements to existing software applications
• Understanding of New Relic, Nagios or similar monitoring.