USAF - Linux/Kubernetes Automation Engineer

cFocus Software Incorporated; United States; On-site; USD 130,000 - 170,000; Full time

Job summary

cFocus Software seeks a Linux/Kubernetes Automation Engineer to join our program supporting the United States Air Force (USAF). This on-site position is in Linthicum Heights, MD and requires an Active TS/SCI clearance.

You will automate Linux and Kubernetes deployments, develop IaC/CaC scripts, and integrate security controls, STIGs, RMF/ATO, and CI/CD pipelines across on-prem, cloud, and hybrid environments.

Qualifications

• Active TS/SCI clearance required.
• B.S. Computer Science, Information Technology, or a related field.
• Experience administering Linux services, permissions, networking, storage, and patches.
• Experience operating Kubernetes and container workloads, including deployments, cluster health, upgrades, access controls, and troubleshooting.
• Ability to write maintainable scripts and provision infrastructure with IaC/CaC tools.
• Experience with source control, CI/CD pipelines, automated validation, deployment workflows, and configuration change management.
• Working knowledge of secure baselines, STIG implementation, vulnerability remediation, and evidence supporting RMF and ATO processes.
• Experience with platform monitoring, logging, alerting, and capacity management.
• Ability to work across on-premises, cloud, and hybrid environments and coordinate dependencies with multidisciplinary technical teams.
• Clear technical writing and communication skills; ability to maintain runbooks and resolve incidents.

Responsibilities

• Provision, configure, patch, and troubleshoot Linux servers and operating system services using approved baselines and repeatable automation.
• Automate Kubernetes cluster and workload deployment, configuration, upgrades, and lifecycle tasks where these platforms are approved for use.
• Develop and maintain Infrastructure as Code (IaC), Configuration as Code (CaC), and scripts for consistent deployment across on-premises, cloud, and hybrid environments.
• Create version-controlled CI/CD pipeline artifacts for infrastructure and platform changes, incorporating testing, security guardrails, and deployment traceability.
• Automate application of Security Technical Implementation Guides (STIGs) and Government-specified cybersecurity controls; validate configuration compliance.
• Implement approved platform access controls, workload isolation, secrets handling, and configuration practices consistent with authorization boundaries.
• Configure logging, monitoring, observability, and alerting to identify platform availability, performance, capacity, and security issues.
• Integrate vulnerability scanning into pipelines and coordinate remediation, patching, and configuration corrections with cybersecurity and operations teams.
• Test infrastructure changes and container deployments; obtain required Government review and authorization before production implementation.
• Maintain configuration baselines and inventory records; document changes under the approved Configuration Management Plan.
• Troubleshoot cluster, node, workload, storage, and connectivity issues in coordination with network, cloud, application, and database teams.
• Support capacity planning, recovery procedures, and service continuity for assigned Linux and container infrastructure.
• Generate and maintain operational scripts, system configurations, technical documentation, and live-environment inputs for network diagrams.
• Provide technical evidence for RMF, ATO, continuous ATO, and continuous monitoring activities.
• Support incident response with logs and technical data, implement approved corrective actions, and maintain operational runbooks.

Skills

Linux administration

Kubernetes administration

Infrastructure as Code (IaC)

Configuration as Code (CaC)

CI/CD pipelines

Security baselines & STIGs

RMF/ATO knowledge

Monitoring & logging

Cross-functional coordination

Education

Bachelor's degree in Computer Science or related field

Tools

Kubernetes

IaC tools

CaC tools

CI/CD tooling

Job description

cFocus Software seeks a Linux/Kubernetes Automation Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.

Qualifications:

• Active TS/SCI clearance
• B.S. Computer Science, Information Technology, or a related field
• Experience administering Linux services, permissions, networking, storage, and patches.
• Experience operating Kubernetes and container workloads, including deployments, cluster health, upgrades, access controls, and troubleshooting.
• Ability to write maintainable scripts and provision infrastructure with IaC/CaC tools.
• Experience with source control, CI/CD pipelines, automated validation, deployment workflows, and configuration change management.
• Working knowledge of secure baselines, STIG implementation, vulnerability remediation, and evidence supporting RMF and ATO processes.
• Experience with platform monitoring, logging, alerting, and capacity management.
• Ability to work across on-premises, cloud, and hybrid environments and coordinate dependencies with multidisciplinary technical teams.
• Clear technical writing and communication skills; ability to maintain runbooks and resolve incidents

Duties:

• Provision, configure, patch, and troubleshoot Linux servers and operating system services using approved baselines and repeatable automation.
• Automate Kubernetes cluster and workload deployment, configuration, upgrades, and lifecycle tasks where these platforms are approved for use.
• Develop and maintain Infrastructure as Code (IaC), Configuration as Code (CaC), and scripts for consistent deployment across on-premises, cloud, and hybrid environments.
• Create version-controlled CI/CD pipeline artifacts for infrastructure and platform changes, incorporating testing, security guardrails, and deployment traceability.
• Automate application of Security Technical Implementation Guides (STIGs) and Government-specified cybersecurity controls; validate configuration compliance.
• Implement approved platform access controls, workload isolation, secrets handling, and configuration practices consistent with authorization boundaries.
• Configure logging, monitoring, observability, and alerting to identify platform availability, performance, capacity, and security issues.
• Integrate vulnerability scanning into pipelines and coordinate remediation, patching, and configuration corrections with cybersecurity and operations teams.
• Test infrastructure changes and container deployments; obtain required Government review and authorization before production implementation.
• Maintain configuration baselines and inventory records; document changes under the approved Configuration Management Plan.
• Troubleshoot cluster, node, workload, storage, and connectivity issues in coordination with network, cloud, application, and database teams.
• Support capacity planning, recovery procedures, and service continuity for assigned Linux and container infrastructure.
• Generate and maintain operational scripts, system configurations, technical documentation, and live-environment inputs for network diagrams.
• Provide technical evidence for Risk Management Framework (RMF), Authority to Operate (ATO), continuous ATO, and continuous monitoring activities.
• Support incident response with logs and technical data, implement approved corrective actions, and maintain operational runbooks.