USAF - Linux/Kubernetes Automation Engineer

cFocus Software Incorporated; Linthicum (MD); On-site; USD 120,000 - 170,000; Full time

Job summary

cFocus Software seeks a Linux/Kubernetes Automation Engineer to join our program supporting the United States Air Force (USAF). This on-site role in Linthicum Heights, MD requires an Active TS/SCI clearance.

You will provision, automate, and secure Linux and Kubernetes environments across on-prem, cloud, and hybrid platforms. Responsibilities include building IaC/CaC, CI/CD artifacts, STIG enforcement, and incident-ready runbooks, working with multidisciplinary teams to ensure mission readiness

Qualifications

• Active TS/SCI clearance required.
• B.S. in Computer Science, Information Technology, or related field.
• Experience administering Linux services, permissions, networking, storage, and patches.
• Experience operating Kubernetes and container workloads, including deployments, cluster health, upgrades, access controls, and troubleshooting.
• Ability to write maintainable scripts and provision infrastructure with IaC/CaC tools.
• Experience with source control, CI/CD pipelines, automated validation, deployment workflows, and configuration change management.
• Working knowledge of secure baselines, STIG implementation, vulnerability remediation, and evidence supporting RMF and ATO processes.
• Experience with platform monitoring, logging, alerting, and capacity management.
• Ability to work across on-premises, cloud, and hybrid environments and coordinate dependencies with multidisciplinary technical teams.
• Clear technical writing and communication skills; ability to maintain runbooks and resolve incidents.

Responsibilities

• Provision, configure, patch, and troubleshoot Linux servers and OS services using baselines and repeatable automation.
• Automate Kubernetes cluster and workload deployment, configuration, upgrades, and lifecycle tasks where approved.
• Develop and maintain Infrastructure as Code (IaC), Configuration as Code (CaC), and scripts for deployment across on-premises, cloud, and hybrid environments.
• Create version-controlled CI/CD pipeline artifacts for infrastructure and platform changes, with testing, security guardrails, and deployment traceability.
• Automate application of STIGs and cybersecurity controls; validate configuration compliance.
• Implement platform access controls, workload isolation, secrets handling, and configuration practices per authorization boundaries.
• Configure logging, monitoring, observability, and alerting to identify availability, performance, capacity, and security issues.
• Integrate vulnerability scanning into pipelines and coordinate remediation with cybersecurity and operations teams.
• Test infrastructure changes and container deployments; obtain Government review and authorization before production.
• Maintain configuration baselines and inventory records; document changes under the Configuration Management Plan.
• Troubleshoot cluster, node, workload, storage, and connectivity issues with network, cloud, application, and DB teams.
• Support capacity planning, recovery procedures, and service continuity for Linux and container infra.
• Generate and maintain operational scripts, system configurations, and live-environment inputs for network diagrams.
• Provide evidence for RMF/ATO/continuous monitoring activities.

Skills

TS/SCI clearance

Linux administration

Kubernetes

IaC/CaC

Scripting

CI/CD pipelines

Security baselines & STIG

RMF & ATO awareness

Monitoring & logging

Cross-functional collaboration

Education

B.S. Computer Science/Information Technology

Job description

cFocus Software seeks a Linux/Kubernetes Automation Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.

Qualifications:

• Active TS/SCI clearance
• B.S. Computer Science, Information Technology, or a related field
• Experience administering Linux services, permissions, networking, storage, and patches.
• Experience operating Kubernetes and container workloads, including deployments, cluster health, upgrades, access controls, and troubleshooting.
• Ability to write maintainable scripts and provision infrastructure with IaC/CaC tools.
• Experience with source control, CI/CD pipelines, automated validation, deployment workflows, and configuration change management.
• Working knowledge of secure baselines, STIG implementation, vulnerability remediation, and evidence supporting RMF and ATO processes.
• Experience with platform monitoring, logging, alerting, and capacity management.
• Ability to work across on-premises, cloud, and hybrid environments and coordinate dependencies with multidisciplinary technical teams.
• Clear technical writing and communication skills; ability to maintain runbooks and resolve incidents

Duties:

• Provision, configure, patch, and troubleshoot Linux servers and operating system services using approved baselines and repeatable automation.
• Automate Kubernetes cluster and workload deployment, configuration, upgrades, and lifecycle tasks where these platforms are approved for use.
• Develop and maintain Infrastructure as Code (IaC), Configuration as Code (CaC), and scripts for consistent deployment across on-premises, cloud, and hybrid environments.
• Create version-controlled CI/CD pipeline artifacts for infrastructure and platform changes, incorporating testing, security guardrails, and deployment traceability.
• Automate application of Security Technical Implementation Guides (STIGs) and Government-specified cybersecurity controls; validate configuration compliance.
• Implement approved platform access controls, workload isolation, secrets handling, and configuration practices consistent with authorization boundaries.
• Configure logging, monitoring, observability, and alerting to identify platform availability, performance, capacity, and security issues.
• Integrate vulnerability scanning into pipelines and coordinate remediation, patching, and configuration corrections with cybersecurity and operations teams.
• Test infrastructure changes and container deployments; obtain required Government review and authorization before production implementation.
• Maintain configuration baselines and inventory records; document changes under the approved Configuration Management Plan.
• Troubleshoot cluster, node, workload, storage, and connectivity issues in coordination with network, cloud, application, and database teams.
• Support capacity planning, recovery procedures, and service continuity for assigned Linux and container infrastructure.
• Generate and maintain operational scripts, system configurations, technical documentation, and live-environment inputs for network diagrams.
• Provide technical evidence for Risk Management Framework (RMF), Authority to Operate (ATO), continuous ATO, and continuous monitoring activities.
• Support incident response with logs and technical data, implement approved corrective actions, and maintain operational runbooks.