Security-Cleared Linux & Kubernetes Automation Engineer

cFocus Software Incorporated

Linthicum (MD)

On-site

USD 120,000 - 170,000

Full time

4 days ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

cFocus Software seeks a Linux/Kubernetes Automation Engineer to join our program supporting the United States Air Force (USAF). This on-site role in Linthicum Heights, MD requires an Active TS/SCI clearance.

You will provision, automate, and secure Linux and Kubernetes environments across on-prem, cloud, and hybrid platforms. Responsibilities include building IaC/CaC, CI/CD artifacts, STIG enforcement, and incident-ready runbooks, working with multidisciplinary teams to ensure mission readiness

Qualifications

Active TS/SCI clearance required.
B.S. in Computer Science, Information Technology, or related field.
Experience administering Linux services, permissions, networking, storage, and patches.
Experience operating Kubernetes and container workloads, including deployments, cluster health, upgrades, access controls, and troubleshooting.
Ability to write maintainable scripts and provision infrastructure with IaC/CaC tools.
Experience with source control, CI/CD pipelines, automated validation, deployment workflows, and configuration change management.
Working knowledge of secure baselines, STIG implementation, vulnerability remediation, and evidence supporting RMF and ATO processes.
Experience with platform monitoring, logging, alerting, and capacity management.
Ability to work across on-premises, cloud, and hybrid environments and coordinate dependencies with multidisciplinary technical teams.
Clear technical writing and communication skills; ability to maintain runbooks and resolve incidents.

Responsibilities

Provision, configure, patch, and troubleshoot Linux servers and OS services using baselines and repeatable automation.
Automate Kubernetes cluster and workload deployment, configuration, upgrades, and lifecycle tasks where approved.
Develop and maintain Infrastructure as Code (IaC), Configuration as Code (CaC), and scripts for deployment across on-premises, cloud, and hybrid environments.
Create version-controlled CI/CD pipeline artifacts for infrastructure and platform changes, with testing, security guardrails, and deployment traceability.
Automate application of STIGs and cybersecurity controls; validate configuration compliance.
Implement platform access controls, workload isolation, secrets handling, and configuration practices per authorization boundaries.
Configure logging, monitoring, observability, and alerting to identify availability, performance, capacity, and security issues.
Integrate vulnerability scanning into pipelines and coordinate remediation with cybersecurity and operations teams.
Test infrastructure changes and container deployments; obtain Government review and authorization before production.
Maintain configuration baselines and inventory records; document changes under the Configuration Management Plan.
Troubleshoot cluster, node, workload, storage, and connectivity issues with network, cloud, application, and DB teams.
Support capacity planning, recovery procedures, and service continuity for Linux and container infra.
Generate and maintain operational scripts, system configurations, and live-environment inputs for network diagrams.
Provide evidence for RMF/ATO/continuous monitoring activities.