Linux Systems Engineer (RHEL / DISA STIG) with Full Scope Polygraph

NetAesthetics; Chantilly (VA); On-site; USD 155,000 - 185,000; Full time

Benefits offered by this job

Competitive salary

Direct access to company leadership

Small team with impact

Job summary

NetAesthetics, a Washington, DC based IT consulting and engineering firm, seeks a Linux Systems Engineer for a full-time role on an Intelligence Community program in Chantilly, VA. This hands-on position focuses on security hardening within a classified environment, collaborating directly with leadership.

You will implement DISA STIGs on RHEL, perform SCAP/OpenSCAP scanning, and work with Ansible to remediate findings while ensuring RMF and DoD/IC security standards are met.

Qualifications

• Active TS/SCI clearance with Full Scope Polygraph is required.
• Hands-on experience implementing DISA STIGs on RHEL systems in production.
• Experience with STIG compliance tooling (SCAP/OpenSCAP, STIG Viewer, Ansible or similar).
• Understanding of DoD/IC security frameworks and the RMF process.
• Strong documentation and communication skills.

Responsibilities

• Implement and maintain DISA STIG protocols on RHEL systems.
• Perform STIG compliance scanning, remediation, and validation using SCAP/OpenSCAP, Ansible.
• Harden RHEL to meet IC/DoD security requirements and document compliance.
• Support assessment and authorization activities and respond to vulnerability findings.
• Troubleshoot system and security configuration issues across the environment.
• Collaborate with government customers, prime contractor teams, and security personnel.

Skills

TS/SCI clearance

RHEL STIGs

RMF process

DoD/IC security frameworks

Documentation

Communication skills

Tools

STIG Viewer

Ansible

SCAP/OpenSCAP

Job description

:NetAesthetics is a Washington, DC based IT consulting and engineering firm supporting critical national security missions. We're a small business where you work directly with leadership on high-impact programs, not through layers of management.

We're seeking a Linux Systems Engineer to support a full-time position on an Intelligence Community program in Chantilly, VA. This is hands-on security hardening work in a classified environment, and we need someone who can hit the ground running on day one.

What you'll do

• Implement and maintain DISA Security Technical Implementation Guide (STIG) protocols on Red Hat Enterprise Linux (RHEL) systems
• Perform STIG compliance scanning, remediation, and validation using tools such as SCAP, OpenSCAP, and Ansible
• Harden RHEL systems to meet IC and DoD security requirements and document compliance
• Support assessment and authorization (A&A) activities and respond to vulnerability findings
• Troubleshoot system and security configuration issues across the environment
• Collaborate with government customers, prime contractor teams, and security personnel

Required qualifications

• Active TS/SCI clearance with Full Scope Polygraph (strict requirement, no exceptions)
• Hands-on experience implementing DISA STIGs on RHEL systems in a production environment (strict requirement, candidates must be able to perform this work immediately)
• Experience with STIG compliance and remediation tooling (SCAP/OpenSCAP, STIG Viewer, Ansible or similar automation)
• Understanding of DoD/IC security frameworks and the RMF process
• Strong documentation and communication skills

Preferred qualifications

• RHCSA or RHCE certification
• Security+ or equivalent (DoD 8570/8140 compliance)
• Experience in IC program environments

What we offer

• Competitive salary, $155,000 to $185,000 based on experience
• Straightforward, transparent compensation with direct access to company leadership
• Small team environment where your work has real mission impact
• NetAesthetics / Veracity Holdings, Inc. is an Equal Opportunity Employer.