Senior Linux Security Platform Engineer

Responsibilities

Peraton is seeking a Senior Linux Security Platform Engineer (“Engineer”) to join our team of qualified and diverse individuals on our Department of State (DOS) Bureau of Consular Affairs Enterprise Infrastructure Operations (CAEIO) Program. The CAEIO Program provides IT Operations and Maintenance to modernize the legacy networks, applications, and databases supporting CA services globally. 

The Engineer will be a member of the Infrastructure Support team that manages the physical and virtual infrastructure across the customer organization, including all operational support for the hardware/software platforms on which the IT systems reside and operate The team is comprised of systems architects, engineers and administrators.

Responsibilities

• Support the personnel, applications, and appliances employed to maintain compliance with all regulatory requirements, including, but not limited to, extensive engineering of Linux Operating Systems.
• Maintain Puppet SICURA, Red Hat Satellite, Ansible Automation Platform, and Illumio environments to include upgrading, engineering baselines and patching schedules, provisioning and packaging of patches, implementing dashboard solutions for the platforms, and maintaining overall security health of the Linux environment.
• Install, configure, and tune Operating Systems, Third Party Applications, and Operating System Security Patches.
• Troubleshoot operating systems, applications, and databases.
• Work with systems hosted in a complex, multi-layered network.
• Control cybersecurity implementation, IT infrastructure management, resource monitoring and alerting.
• Test patches before they are applied to endpoints to ensure outages do not occur.
• Support MFA, DIT, and DAR solutions for Linux environment.
• Provide technical leadership and technical guidance on projects.
• Participate in internal workshops and provide presentations of the proposed solutions.
• Provide Tier 2 and Tier 3 level engineering support for environments.
• Understand all elements of the software development life cycle, including planning, development, requirements management, configuration management, quality assurance, and release management.
• Deliver technical documentation and user documentation as required.
• Provide on- and off-hours support to perform upgrades and patches.
• Work closely with the customer and technical team leads, clearly articulating the scope of solutions and remediation plans.

 

Core Work Schedule: Monday – Friday, 7:00 AM ET - 3:30 PM ET (Flexible)

 

Work Location: This position is hybrid with remote work and up to two days per week in the office in Sterling, VA or Washington, DC.

 

Qualifications

Basic Qualifications

• U.S. citizenship and an active SECRET Government Security Clearance.
• Must demonstrate proficiency on two or more of the following: Puppet, Ansible, Satellite, Microsoft Defender for Linux, or Illumio.
• In-depth knowledge of multi-platform engineering; planning, coordinating, and executing patch and configuration management operations, creating baselines, and configuring hardened systems.
• Experience with centrally managed Linux systems patched through automated processes, or in some cases manually if required to bring the systems into compliance.
• Demonstrated proficiency in infrastructure engineering and administration to include building, patching, and hardening of infrastructure.
• Demonstrated experience working with security teams to translate common vulnerability and exposures (CVE) into actionable mitigation and remediation steps.
• Familiarity with fundamental networking/distributed computing environment concepts.
• Ability to write scripts in some administrative language (Bash, Perl, Python, VBScript, PowerShell, etc.).

 

Desired Qualifications

• 5+ years administrating and securing Linux systems.
• 5+ years' experience with VMWare, vSphere, vRealize and/or vCenter.
• Strong coordination, organizational, and cross-functional collaboration skills.
• Ability to effectively execute tasks, resolve issues, and meet challenging schedules.
• Experience in research and development programs leveraging Scaled Agile Framework (SAFe).
• Experience developing and maintaining automated systems.
• Understanding and working knowledge with databases (Oracle, MySQL, or PostgreSQL).
• Understanding and working knowledge of CyberArk.
• Experience developing Multi-Factor Authentication solutions for Linux platforms.

 

Education and Experience Requirements: Minimum o