Overview

The successful candidate will use their Red Hat Linux experience to support the Customer in the design and implementation of their Assured Compliance Assessment Solution (ACAS) for the Customer’s Government Enterprise Networks (GEN). The Linux Administrator will operate and maintain the infrastructure for the ACAS solution to support network and appliance scanning and configuration assessments and provide training to operators and Information Assurance personnel to maintain and operate the ACAS tool functionality.

Responsibilities

Your essential job functions will include but may not be limited to-

• Install and patch operating systems, application, and document Department Information Systems Agency (DISA) Security Technical Implementation Guidelines (STIGs) applicable to each network environment for all ACAS implementations.
• Assesses current ACAS implementations for each of the GEN networks and recommend changes.
• Document the steps required to design the ACAS solution for each of the GEN networks to include IP address, Fully Qualified Domain Name, and physical location of each component.
• Create network diagrams of the designs with Microsoft Visio (include list of hardware and software requirements).
• Maintains the Nessus scanners and Passive Vulnerability Scanner’s (PVS) connectivity with the associated Security Center (SC).
• Develop and/or update the Standard Operating Procedures (SOP) to support each of the client ACAS solutions documented within the SharePoint portal.
• Provide reports as necessary.
• Build Linux Server from DISA provided ISO image.

Qualifications

Required Experience and Education:

• Knowledge and experience with RedHat Linux. Possesses understanding and experience with common cybersecurity toolsets and processes to include STIGs, CAS, IAVA Management and Implementation, and Operation Order (OPORD)/Fragmentary Order (FRAGO) support.
• Red Hat Enterprise Linux (RHEL) experience.
• Must be able to troubleshoot SSH connection issues.
• Good understanding of LVM Partitioning, Disk space and troubleshooting Systems related issues.
• Familiar with VMware and vSphere.
• Understanding of SSL/TLS Certificate and OS hardening.
• Strong understanding of Network configuration and troubleshooting (nmtui, nmcli, service, netstat, grep, top command).
• Understanding of patching and RPM package management is a MUST!!!
• Be able to troubleshoot Kernel Panic, Root and Grub password Reset, & Firewall configurations.
• Familiar with Ansible, Ansible-playbook and ansible roles
• DoD 8570 IAT III or IAM II (CASP+, CCNP Security, CISA, GSE, SCNA, CISSP [or Associate], CAP, GSLC, CISM, GCED, GCIH, CISO, or HCISPP).
• 3+ years’ experience in supporting, configuring, and administering Linux
• 3+ (RHEL) operating system in an enterprise environment RHEL 7.x or greater
• Experience with virtualized environments (vSphere, ESXI)

Preferred Skills:

• Understanding on Red Hat Satellite Version 6.12 or higher

• Familiar with Active Directory Concepts, LDAP, or Kerberos

• Familiar with migration from RHEL7 to RHEL8 using Leapp utility.

• Build or configure new YUM Repositories for patching purposes.

• Familiar with AWS/AZURE Cloud for future projects.

• Scripting (Nessus Attack Scripting Language (NASL), Python, Bash)

• Engineering experience with Nessus Manager and Monitor Implementation

• Able to spin new instance on the cloud from a given AMI or Launch Template

• Understand the concept of Security Groups, VPC, IAM, Autoscaling, Load Balancer Container architecture

• Experience with DoW’s ACAS application.

• ACAS training certification

Security Requirements:

• Active DoD – Secret

Salary:

• The anticipated salary range for this position is $110,000 - $120,000 annually. Final compensation will be determined based on job-related factors, including the candidate’s relevant work experience, education, professional certifications, technical skills, required security clearance level, geographic location, and overall qualifications. The posted range reflects the company’s good-faith expectation for this position at the time of posting.