Linux Systems Engineer – STIG Hardened IC Role (TS/SCI)

NetAesthetics; Chantilly (VA); On-site; USD 155,000 - 185,000; Full time

Benefits offered by this job

Competitive salary

Direct access to company leadership

Small team with impact

Job summary

NetAesthetics, a Washington, DC based IT consulting and engineering firm, seeks a Linux Systems Engineer for a full-time role on an Intelligence Community program in Chantilly, VA. This hands-on position focuses on security hardening within a classified environment, collaborating directly with leadership.

You will implement DISA STIGs on RHEL, perform SCAP/OpenSCAP scanning, and work with Ansible to remediate findings while ensuring RMF and DoD/IC security standards are met.

Qualifications

• Active TS/SCI clearance with Full Scope Polygraph is required.
• Hands-on experience implementing DISA STIGs on RHEL systems in production.
• Experience with STIG compliance tooling (SCAP/OpenSCAP, STIG Viewer, Ansible or similar).
• Understanding of DoD/IC security frameworks and the RMF process.
• Strong documentation and communication skills.

Responsibilities

• Implement and maintain DISA STIG protocols on RHEL systems.
• Perform STIG compliance scanning, remediation, and validation using SCAP/OpenSCAP, Ansible.
• Harden RHEL to meet IC/DoD security requirements and document compliance.
• Support assessment and authorization activities and respond to vulnerability findings.
• Troubleshoot system and security configuration issues across the environment.
• Collaborate with government customers, prime contractor teams, and security personnel.

Skills

TS/SCI clearance

RHEL STIGs

RMF process

DoD/IC security frameworks

Documentation

Communication skills

Tools

STIG Viewer

Ansible

SCAP/OpenSCAP

Job description

NetAesthetics, a Washington, DC based IT consulting and engineering firm, seeks a Linux Systems Engineer for a full-time role on an Intelligence Community program in Chantilly, VA. This hands-on position focuses on security hardening within a classified environment, collaborating directly with leadership.

You will implement DISA STIGs on RHEL, perform SCAP/OpenSCAP scanning, and work with Ansible to remediate findings while ensuring RMF and DoD/IC security standards are met.