Red Hat Linux Engineer

Commitent; Virginia, Northern (MN, KY); Hybrid; USD 100,000 - 150,000; Full time

Job summary

CommIT Enterprises, Inc. seeks a Red Hat Linux Engineer to join the team in Quantico, VA to design and implement the ACAS solution for GEN.

The role involves operating and maintaining Linux infrastructure, scanning, configuration assessments, and training operators and IA personnel to sustain ACAS tool functionality. The ideal candidate has 7+ years of Linux experience, DoD certifications, strong patching and security hardening skills, and hands-on experience with RHEL, VMware, Ansible, and

Qualifications

• DoD 8570 IAT III or IAM II (certifications listed).
• 7+ years’ experience in supporting, configuring, and administering Linux (RHEL) in enterprise.
• RHEL 8.x or greater; experience with virtualized environments (vSphere, ESXi).
• RHEL experience in enterprise environments.
• Ability to troubleshoot SSH connections.
• Strong LVM, disk space management, and troubleshooting skills.
• Familiar with VMware and vSphere.
• Understanding of SSL/TLS certificates and OS hardening.
• Strong network configuration/troubleshooting (nmtui, nmcli, netstat, etc.).
• Understanding of patching and RPM management.
• Troubleshoot Kernel Panic, Grub, firewall configurations.
• Familiar with Ansible and Ansible playbooks/roles.
• Knowledge of RedHat Linux and cybersecurity tools like STIGs, CAS, IAVA.

Responsibilities

• Install and patch OS/applications per DISA STIGs for ACAS.
• Assess ACAS deployments across GEN networks and recommend changes.
• Document ACAS designs with IPs, FQDNs, and locations.
• Create network diagrams with Visio and specify hardware/software.
• Maintain Nessus scanners and PVS with Security Center connectivity.
• Develop or update SOPs for ACAS solutions in SharePoint.
• Provide reports as needed.
• Build Linux server from DISA ISO image.

Skills

RHEL administration

SSH troubleshooting

LVM and disks

VMware/vSphere

Ansible

Nessus & PVS

Patching RPM management

SSL/TLS hardening

Network troubleshooting

Scripting NASL/Python/Bash

Education

DoD 8570 IAT III / IAM II

Tools

vSphere/ESXi

Nessus Manager

Active Directory / LDAP

Job description

Overview

CommIT Enterprises, Inc. is seeking a Red Hat Linux Engineer to join the team inQuantico, VA. The successful candidate will use their Red Hat Linux experience to support the Customer in the design and implementation of their Assured Compliance Assessment Solution (ACAS) for the Customer’s Government Enterprise Networks (GEN). The Linux Administrator will operate and maintain the infrastructure for the ACAS solution to support network and appliance scanning and configuration assessments and provide training to operators and Information Assurance personnel to maintain and operate the ACAS tool functionality.

Responsibilities

Your essential job functions will include but may not be limited to-

• Install and patch operating systems, application, and document Department Information Systems Agency (DISA) Security Technical Implementation Guidelines (STIGs) applicable to each network environment for all ACAS implementations.

• Assesses current ACAS implementations for each of the GEN networks and recommend changes.

• Document the steps required to design the ACAS solution for each of the GEN networks to include IP address, Fully Qualified Domain Name, and physical location of each component.

• Create network diagrams of the designs with Microsoft Visio (include list of hardware and software requirements).

• Maintains the Nessus scanners and Passive Vulnerability Scanner’s (PVS) connectivity with the associated Security Center (SC).

• Develop and/or update the Standard Operating Procedures (SOP) to support each of the client ACAS solutions documented within the SharePoint portal.

• Provide reports as necessary.

• Build Linux Server from DISA provided ISO image.

Qualifications

Required Experience, Certifications, and Education:

• DoD 8570 IAT III or IAM II (CASP+, CCNP Security, CISA, GSE, SCNA, CISSP [or Associate], CAP, GSLC, CISM, GCED, GCIH, CISO, or HCISPP).
• 7+ years’ experience in supporting, configuring, and administering Linux 8+ (RHEL) operating system in an enterprise environment
• RHEL 8.x or greater Experience with virtualized environments (vSphere, ESXI)
• Red Hat Enterprise Linux (RHEL) experience.
• Must be able to troubleshoot SSH connection issues.
• Good understanding of LVM Partitioning, Disk space and troubleshooting Systems related issues.
• Familiar with VMware and vSphere.
• Understanding of SSL/TLS Certificate and OS hardening.
• Strong understanding of Network configuration and troubleshooting (nmtui, nmcli, service, netstat, grep, top command).
• Understanding of patching and RPM package management is a MUST!!!
• Be able to troubleshoot Kernel Panic, Root and Grub password Reset, & Firewall configurations.
• Familiar with Ansible, Ansible-playbook and ansible roles
• Knowledge and experience with RedHat Linux. Possesses understanding and experience with common cybersecurity toolsets and processes to include STIGs, CAS, IAVA Management and Implementation, and Operation Order (OPORD)/Fragmentary Order (FRAGO) support.

Preferred Skills:

• Understanding on Red Hat Satellite Version 6.12 or higher

• Familiar with Active Directory Concepts, LDAP, or Kerberos

• Build or configure new YUM Repositories for patching purposes.

• Familiar with AWS/AZURE Cloud for future projects.

• Scripting (Nessus Attack Scripting Language (NASL), Python, Bash)

• Engineering experience with Nessus Manager and Monitor Implementation

• Able to spin new instance on the cloud from a given AMI or Launch Template

• Understand the concept of Security Groups, VPC, IAM, Autoscaling, Load Balancer Container architecture

Physical Demands and Work Environment:

• General office environment. Work is generally sedentary in nature but may require standing and walking for up to 10% of the time. The working environment is generally favorable. Lighting and temperature are adequate, and there are not hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.
• Contractor site with 0-10% travel possible
• Possible off-hours work to support releases and outages
• 10 lbs. maximum lifting, occasional lift/carry of small articles
• Occasionally required to stand; frequently required to walk and sit
• Continually required to utilize hand and finger dexterity
• Occasionally required to climb, balance, bend, stoop, kneel or crawl
• Continually required to talk or hear
• Continually utilize visual acuity to operate equipment, read technical information, and/or use a keyboard

Security Requirements:

• Active DoD – Secret

Salary

The anticipated salary range for this position is $100,000 - $150,000 annually. Final compensation will be determined based on job-related factors, including the candidate’s relevant work experience, education, professional certifications, technical skills, required security clearance level, geographic location, and overall qualifications. The posted range reflects the company’s good-faith expectation for this position at the time of posting.

About CommIT Enterprises

Established in 2001, CommIT is a Certified Veteran-Owned Small Business (CVOSB) providing innovative technical engineering and data science services. Our enterprise systems support includes the Department of Defense’s (DoD) GCSS-MC, CAC2S, TBMCS-MC, and the Department of Veteran’s Affairs’ (VA) telehealth communications. We offer acquisition management, systems engineering, Agile software development, cloud management, IT modernization, data analytics, cybersecurity, and training, including leading-edge DevSecOps, automated testing, and mobile application development.

Equal Opportunity Employer:

CommIT Enterprises, Inc. is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.