Senior Ansible Engineer

Sealing Technologies, a Parsons Company; Maryland; On-site; USD 120,000 - 180,000; Full time

Job summary

Sealing Technologies, a Parsons company, seeks a Senior Ansible Engineer to develop and maintain automation for Defender Cyber Operations (DCO) kits, integrating hardware and software components with a focus on secure deployments.

You will design complex Ansible playbooks, automate network and server hardware, apply STIG hardening, and drive CI/CD with GitHub Actions while partnering with software and security teams to meet DoD standards.

Qualifications

• 8+ years of automation and systems engineering experience.
• Expert in writing, testing, and maintaining Ansible playbooks, with Jinja2 and collections knowledge.
• Experience using Ansible Galaxy and Ansible Vault for sensitive data.
• Strong Fedora-based Linux administration and security hardening experience.
• Hands-on with virtualization and containers (VMware, Kubernetes, Docker/Podman).
• Experience with CI/CD pipelines (GitHub Actions) and Agile (Jira).
• Bachelor's degree or equivalent in a related field.

Responsibilities

• Lead the design, implementation, testing, and maintenance of complex Ansible playbooks and modules to automate Defender Cyber Operations (DCO) kits.
• Collaborate with software teams to create parameterized Ansible aligning with software stacks.
• Configure and automate physical hardware and network appliances using Ansible.
• Implement security controls, including STIG hardening and SELinux, in the automation pipeline.
• Implement CI/CD GitHub Action pipelines for extensive testing.
• Collaborate with stakeholders to apply technology standards and security controls.

Skills

Ansible

Python

Bash

Linux administration

Networking concepts

Security best practices

Documentation

Education

Bachelor's degree in Engineering, Computer Science, Information Technology, or related field

Tools

Jinja2

Ansible Vault

Ansible Galaxy

VMware

Kubernetes

Docker/Podman

GitHub Actions

CI/CD

Jira

Job description

Sealing Technologies, a Parsons company, innovates and delivers high-performance deployable anywhere technologies that push what's possible at the edge, enabling organizations across the globe to solve complex challenges with speed and confidence. We design, engineer, and deliver products and deployable technologies built for environments where traditional infrastructure falls short.

Position Overview:

SealingTech is looking for a talented and experienced Senior Ansible Engineer to join our dynamic team of engineers delivering cutting-edge solutions. You will be performing hardware and software integration, cybersecurity and systems engineering, and mission support in mostly unclassified spaces in support of our warfighters.

You will be engineering a complex automation framework to deploy a production environment to physical hardware. This includes automating networking, server hardware, operating systems, containers, software, virtualization and more to build a cohesive and integrated environment for cyber defenders.

Duties and Responsibilities:

• Lead the design, implementation, testing, and maintenance of complex Ansible playbooks, roles, and modules to automate the deployment of Defensive Cyber Operations (DCO) kits. This includes automation of kit infrastructure, configuration, and application deployment across diverse environments.
• Collaborate with software development teams across the company to create highly parameterized Ansible that aligns the software product stack, transforming project requirements into robust automation solutions.
• Configure and automate physical hardware and network appliances, such as routers and firewalls, using Ansible.
• Implement security controls, including STIG hardening and SELinux, within the automation pipeline to ensure "secure by default" deployments.
• Implement CI/CD GitHub Action pipelines to perform extensive automatic testing
• Collaborate with stakeholders to ensure technology standards, security controls, and engineering practices are well understood and consistently applied.
• Partner with internal teams to deliver technical demonstrations and showcase SealingTech capabilities to customers.
• Identify and define high-level functional and technical requirements by working with the user community and leveraging knowledge of existing DoD enterprise architectures.

Minimum Qualifications:

• 8 years of automation and systems engineering experience.
• Expert proficiency in Ansible; including and not limited to:
• Writing, testing, and maintaining Ansible playbooks, roles, and modules, with a deep understanding of Jinja2, Collections, and configuration management
• Leveraging Ansible Galaxy for reusable components and Ansible Vault for managing sensitive data
• Utilizing Ansible for the configuration and automating physical hardware and network appliances (e.g., routers, firewalls)
• Strong analytical and debugging abilities to resolve complex issues within automation workflows.
• Deep hands-on experience with Fedora-based Linux distributions (RHEL, Rocky, Oracle) including administration of drivers, firmware, file systems, networking, and security
• Proficiency in Python and Bash for custom modules and advanced automation
• Experience with virtualization and container platforms (e.g., VMware, Kubernetes, Docker/Podman)
• Strong understanding of core cybersecurity concepts, technologies, and methodologies and understanding of infrastructure security, hardening processes, techniques, and industry best practices
• Experience with network protocols, architecture design, and defense-in-depth practices
• Understanding of best practices for security patching, authentication, and log retention
• Experience operating within security frameworks to support compliance and auditing requirements
• Experience with Git/GitHub, CI/CD pipelines (e.g., GitHub Actions), and Agile (project management) workflows (Jira)
• Strong written and verbal communication skills, with the ability to document and maintain engineering processes and procedures
• Bachelor's degree in Engineering, Computer Science, Information Technology, or related field; equivalent experience will be considered.

Preferred Qualifications:

• Experience supporting Defensive Cyber Operations within Service Cyber Command elements or other U.S. Government organizations
• Experience with defensive cyber tools such as Security Onion, Splunk, Elastic, Zeek, pfSense, and related platforms
• Security certification such as CySA+ or CISSP
• An active Secret security clearance or ability to obtain one is preferred