Linux Systems Engineer

Roka Security; Sterling (VA); On-site; USD 95,000 - 135,000; Full time

Job summary

Roka Security is seeking a highly skilled Linux Systems Engineer to design and support large-scale Linux infrastructure in Sterling, Virginia. This role requires deep expertise in Linux networking, VPN technologies, and infrastructure automation, ensuring secure and reliable operations.

The ideal candidate will collaborate with various engineering teams and contribute significantly to mission-critical environments. Preferred qualifications include cloud platform experience, knowledge of container technologies, and strong skills in troubleshooting and documentation.

Qualifications

• 5+ years of Linux Systems Engineering experience.
• 3+ years of advanced Linux networking experience.
• 3+ years of VPN engineering experience.
• 3+ years of SaltStack administration and automation experience.

Responsibilities

• Design, deploy, and maintain enterprise Linux environments.
• Troubleshoot complex operating system, networking, and application issues.
• Design and implement advanced routing architectures.
• Develop and maintain Infrastructure-as-Code (IaC) solutions.

Skills

Linux Systems Engineering

Advanced Linux Networking

VPN Engineering

SaltStack Automation

Bash Scripting

Education

Top-Secret Clearance with SCI Eligibility

Tools

SaltStack

WireGuard

OpenVPN 2.6+

Debian Linux

Ubuntu Linux

Job description

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.Nightwing is seeking a highly skilled Linux Systems Engineer to design, deploy, optimize, automate, and support large-scale Linux infrastructure supporting secure networking and remote-access services. This role is ideal for an engineer with deep expertise in Linux networking, policy-based routing, kernel performance tuning, infrastructure automation, and modern VPN technologies including WireGuard, OpenVPN, and IPSec.The successful candidate will collaborate closely with network engineering, systems administration, and platform engineering teams to deliver highly available, secure, and scalable infrastructure solutions in mission-critical environments.Primary ResponsibilitiesLinux Infrastructure EngineeringDesign, deploy, administer, and maintain enterprise Linux environments.Develop standardized operating system configurations and hardened baseline builds.Perform operating system upgrades, patch management, lifecycle maintenance, and performance optimization.Troubleshoot complex operating system, networking, and application issues.Advanced Network EngineeringDesign and implement advanced routing architectures utilizing:Policy-Based Routing (PBR)Multiple routing tablesRoute maps and traffic steeringSource-based and destination-based routingMulti-homed network environmentsConfigure and troubleshoot:OSPF and static routingVLANs, LACP, and 802.1Q trunkingNetwork namespacesVRFsNAT and firewall policiesAnalyze and troubleshoot network traffic using:tcpdumpWiresharkiproute2nftablesiptablesLinux Kernel Tuning & Performance OptimizationTune Linux kernel parameters for:High-throughput networkingLow-latency applicationsVPN gateway performanceLarge-scale concurrent connectionsOptimize:TCP/IP stack performanceNetwork buffer sizingIRQ balancingCPU affinityNUMA awarenessMemory managementUtilize performance analysis tools including:perfsarvmstatiostateBPF observability toolssystemd performance metricsVPN EngineeringDesign, deploy, and support secure VPN infrastructures using:OpenVPN 2.6+WireGuardIPSecImplement and support:Site-to-site VPNsRemote-access VPNsHub-and-spoke architecturesHigh-availability VPN clustersDynamic routing across VPN overlaysResponsibilities include:Troubleshooting encryption, routing, MTU, and performance issuesImplementing modern cryptographic standards and VPN hardening best practicesConfiguration Management & AutomationDevelop and maintain Infrastructure-as-Code (IaC) solutions using SaltStack.Create and maintain:Salt StatesPillarsCustom modulesOrchestration workflowsAutomate:System provisioningConfiguration deploymentCompliance enforcementVPN deploymentsSecurity baseline managementIntegrate SaltStack with CI/CD pipelines and infrastructure monitoring platforms.Required Qualifications:Current Top-Secret Clearance with SCI EligibilityTechnical Experience5+ years of Linux Systems Engineering experience3+ years of advanced Linux networking experience3+ years of VPN engineering experience3+ years of SaltStack administration and automation experienceOperating SystemsStrong hands-on experience with:Debian LinuxUbuntu LinuxNetworking ExpertiseDemonstrated expertise with:Policy-Based Routing (PBR)iproute2Routing tables and policy rulesLinux bridgesBonding and teamingVLANsVRFsNetwork namespacesDynamic routing protocolsHigh-availability networking architecturesVPN ExpertiseStrong practical experience with:WireGuardOpenVPN 2.6+IPSecPKI and certificate managementTLS authenticationMulti-site VPN topologiesVPN performance tuningAutomation & ScriptingExperience with:SaltStackPythonBashGitCI/CD workflowsPreferred QualificationsExperience supporting cloud platforms including:Google Cloud Platform (GCP)Amazon Web Services (AWS)Microsoft AzureExperience with container technologies:DockerKubernetesExperience supporting confidential computing environmentsKnowledge of CNSA-compliant cryptographic implementationsFamiliarity with eBPF-based observability and network diagnosticsIndustry certifications such as:RHCELFCECCNPEquivalent advanced certificationsDesired SkillsExceptional troubleshooting and root-cause analysis capabilitiesStrong documentation and technical writing skillsAbility to operate independently in mission-critical environmentsExperience designing highly available and fault-tolerant systemsSecurity-first mindset with strong infrastructure design principlesExcellent collaboration and communication skillsAt Nightwing, we value collaboration and teamwork. You’ll have the opportunity to work alongside talented individuals who are passionate about what they do. Together, we’ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients.Thank you for considering joining us as we embark on this new journey and shape the future of cybersecurity and intelligence together as part of the Nightwing team.Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.