Senior Linux Systems Administrator

AV; Simi Valley (CA); On-site; USD 91,000 - 139,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K matching

9/80 schedule

Paid holidays

Job summary

AV is seeking a Senior Linux Systems Administrator to design, deploy, secure, and automate enterprise Linux server infrastructure across on-premises and multi-cloud environments. You will own automation with Ansible, Terraform, Puppet/Chef, and manage Canonical Landscape at scale for hundreds of Ubuntu desktops while meeting CMMC 2.0 L2 / NIST SP 800-171 requirements.

Ideal candidates bring deep expertise in PAM/MFA, IaC, and security hardening, with VMware, storage, and SIEM familiarity to

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent combination of education, training, and experience.
• 8–12 years total IT infra experience with at least 6+ years in enterprise Linux systems administration.
• Deep, hands-on administration of Oracle Linux (UEK), Red Hat Enterprise Linux (RHEL), and Ubuntu Server.
• Proven experience managing Linux endpoints at scale using Canonical Landscape, Red Hat Satellite, or Foreman.
• Experience implementing Linux MFA authentication (YubiKey, PKI/Smartcard, Duo, Okta PAM).
• Direct experience hardening Linux to NIST SP 800-171, CMMC Level 2, or DISA STIG requirements.
• Strong scripting in Bash or Python and automation using Ansible.
• VMware vSphere/ESXi and enterprise storage management (LVM, NFS, iSCSI, SAN).
• U.S. Person due to ITAR/EAR regulations; ability to obtain DoD clearance if required.

Responsibilities

• Enterprise Linux Server Administration: Design, build, configure, and maintain mission-critical Linux servers across on-prem and cloud environments.
• Developer Fleet Management: Architect, deploy, and administer Canonical Landscape for hundreds of Ubuntu developer endpoints.
• Identity & Access Management: Implement MFA, PAM, SSSD/FreeIPA, AD/LDAP bridging, and centralized sudoers delegation.
• CMMC L2 & Security Compliance: Harden systems to NIST SP 800-171, DISA STIG, and CIS Level 2; enable audit logging and FIM.
• Automation & Configuration Management: Develop IaC using Ansible, Terraform, Puppet/Chef, with Bash/Python scripting.
• Storage & Virtualization: Manage SAN/NAS, iSCSI, NFS, LVM; VMware ESXi/vCenter for Linux guests.
• Service Desk Escalation: Tier 3 support for toolchains, build environments, license managers, DNS/DHCP/Kerberos/LDAP.

Skills

Linux administration

PAM/MFA

IaC automation

Ansible

Terraform

Puppet/Chef

VMware vSphere

Storage management

SIEM tooling

Security hardening

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Canonical Landscape

Red Hat Satellite

Foreman

Job description

Job Description

The

Worker Type

Regular

Summary

Job Description

The Senior Linux Systems Administrator is responsible for designing, deploying, securing, automating, and maintaining enterprise Linux server infrastructure and developer workstation fleets across on-premises and multi-cloud environments.

This role serves as the subject matter expert for enterprise Linux distributions (Oracle Linux, Red Hat Enterprise Linux, Ubuntu), configuration management, and centralized orchestration. A primary focus includes managing and scaling Canonical Landscape to administer hundreds of Ubuntu developer desktops within a strict CMMC 2.0 Level 2 / NIST SP 800-171 compliant environment. The ideal candidate brings deep expertise in Linux PAM architecture, enterprise MFA integrations, infrastructure-as-code automation, and defense-in-depth security hardening.

Position Responsibilities

• Enterprise Linux Server Administration: Design, build, configure, and maintain mission-critical Linux servers across on-prem (VMware vSphere) and cloud environments (OCI, AWS, Azure), supporting engineering workloads, database platforms, and custom development pipelines.
• Developer Fleet Management: Architect, deploy, and administer Canonical Landscape to manage configuration profiles, package repositories, compliance policies, and automated patch management for hundreds of Ubuntu developer endpoints.
• Identity & Access Management (MFA/PAM): Implement and enforce robust authentication and authorization frameworks, including smart card/FIPS-compliant MFA at desktop and SSH login, PAM module engineering, SSSD/FreeIPA integration, Active Directory/LDAP bridging, and centralized sudoers delegation.
• CMMC L2 & Security Compliance: Harden Linux servers and workstations to NIST SP 800-171, DISA STIG, and CIS Level 2 benchmarks. Implement SELinux/AppArmor enforcement, auditd daemon logging, file integrity monitoring (FIM), and SIEM log forwarding.
• Automation & Configuration Management: Develop and maintain Infrastructure-as-Code (IaC) and configuration baselines using Ansible, Terraform, Puppet/Chef, and advanced Bash/Python scripting.
• Storage & Virtualization: Configure and troubleshoot enterprise SAN/NAS storage, iSCSI/NFS mounts, multipathing, LVM volumes, and VMware ESXi/vCenter virtualization for Linux guests.
• Engineering Tools & Service Desk Escalation: Serve as Tier 3 escalation support for engineering applications, toolchains, build environments, license managers (FlexLM), and core network/directory services (DNS, DHCP, LDAP, Kerberos, NTP).
• High Availability & Disaster Recovery: Design robust backup and recovery workflows, test system failover procedures, monitor system health/telemetry (Prometheus, Grafana, Zabbix), and resolve complex performance bottlenecks.

Basic Qualifications (Required Skills & Experience)

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent combination of education, technical training, and experience.
• Experience: Minimum of 8–12 years of total IT infrastructure experience, with at least 6+ years focused on enterprise Linux systems administration.
• Distribution Mastery: Deep, hands-on administration of Oracle Linux (UEK), Red Hat Enterprise Linux (RHEL), and Ubuntu Server/Desktop.
• Fleet Management: Proven experience managing Linux endpoints at scale using Canonical Landscape, Red Hat Satellite, or Foreman.
• Authentication & MFA: Demonstrated experience implementing Linux desktop and SSH Multi-Factor Authentication (YubiKey, PKI/Smartcard, Duo, or Okta PAM integration).
• Compliance & Hardening: Direct experience hardening Linux environments to NIST SP 800-171, CMMC Level 2, or DISA STIG requirements.
• Automation: Strong proficiency in Ansible and scripting with Bash or Python.
• Virtualization & Storage: Solid experience with VMware vSphere/ESXi and enterprise storage management (LVM, NFS, iSCSI, SAN).
• Security Clearance / Export Control: Must be a U.S. Person (U.S. Citizen or Lawful Permanent Resident) due to compliance with ITAR/EAR regulations; ability to obtain and maintain a DoD Security Clearance if required.

Other Qualifications & Desired Competencies

• Active industry certifications: RHCE / RHCA, LPIC-3, CompTIA Security+, or CISSP.
• Experience with containerization and orchestration platforms (Docker, Podman, Kubernetes).
• Hands-on experience integrating Linux infrastructure with Oracle Cloud Infrastructure (OCI), AWS GovCloud, or Azure Government.
• Familiarity with Linux kernel tuning, custom repository mirroring, and local software distribution pipelines.
• Exceptional analytical and troubleshooting skills under time-critical operational conditions.
• Strong written and verbal communication skills; ability to document standard operating procedures (SOPs) and compliance artifacts clearly.
• High ownership mindset with a focus on cross-functional collaboration across Infrastructure, Security, and Engineering teams.

Physical Demands

• Standard office/data center environment; prolonged periods sitting or standing at computer workstations.
• Periodic physical handling of server hardware, cabling, or rack-mount equipment (up to 35 lbs).

Clearance Level

No Clearance

The Salary Range For This Role Is

$91,000 - $138,750

AeroVironment considers several factors when extending an offer, including but not limited to, the location, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills.

ITAR Requirement

This position requires access to information that is subject to compliance with the International Traffic Arms Regulations (“ITAR”) and/or the Export Administration Regulations (“EAR”). In order to comply with the requirements of the ITAR and/or the EAR, applicants must qualify as a U.S. person under the ITAR and the EAR, or a person to be approved for an export license by the governing agency whose technology comes under its jurisdiction. Please understand that any job offer that requires approval of an export license will be conditional on AeroVironment’s determination that it will be able to obtain an export license in a time frame consistent with AeroVironment’s business requirements. A “U.S. person” according to the ITAR definition is a U.S. citizen, U.S. lawful permanent resident (green card holder), or protected individual such as a refugee or asylee. See 22 CFR

• 120.15. Some positions will require current U.S. Citizenship due to contract requirements.

Benefits

AV offers an excellent benefits package including medical, dental vision, 401K with company matching, a 9/80 work schedule and a paid holiday shutdown.

• medical
• dental vision
• 401K with company matching
• 9/80 work schedule
• paid holiday shutdown

We also encourage you to review our company website at http://www.avinc.com to learn more about us.

About AV

AV isn’t for everyone. We hire the curious, the relentless, the mission-obsessed. The best of the best.

We don’t just build defense technology—we redefine what’s possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve.

Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian—but we’re not building history, we’re building what’s next.

If you’re ready to build technology that matters—with speed, scale, and purpose—there’s no better place to do it than AV.

We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans. AeroVironment, Inc. is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Qualified applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, protected veteran status, genetic data, sexual orientation, gender identity or other legally protected status.

ITAR

U.S. Citizenship required