Location: Columbia, MD
Type: Hybrid
Travel: 10%
Position Overview:SealingTech is looking for a talented and experienced Senior Ansible Engineer to join our dynamic team of engineers delivering cutting-edge solutions. You will be performing hardware and software integration, cybersecurity and systems engineering, and mission support in mostly unclassified spaces in support of our warfighters.
You will be engineering a complex automation framework to deploy a production environment to physical hardware. This includes automating networking, server hardware, operating systems, containers, software, virtualization and more to build a cohesive and integrated environment for cyber defenders.
Duties and Responsibilities:- Lead the design, implementation, testing, and maintenance of complex Ansible playbooks, roles, and modules to automate the deployment of Defensive Cyber Operations (DCO) kits. This includes automation of kit infrastructure, configuration, and application deployment across diverse environments.
- Collaborate with software development teams across the company to create highly parameterized Ansible that aligns the software product stack, transforming project requirements into robust automation solutions.
- Configure and automate physical hardware and network appliances, such as routers and firewalls, using Ansible.
- Implement security controls, including STIG hardening and SELinux, within the automation pipeline to ensure "secure by default" deployments.
- Implement CI/CD GitHub Action pipelines to perform extensive automatic testing
- Collaborate with stakeholders to ensure technology standards, security controls, and engineering practices are well understood and consistently applied.
- Partner with internal teams to deliver technical demonstrations and showcase SealingTech capabilities to customers.
- Identify and define high-level functional and technical requirements by working with the user community and leveraging knowledge of existing DoD enterprise architectures.
Minimum Qualifications:- U.S. Citizenship
- 8 years of automation and systems engineering experience.
- Expert proficiency in Ansible; including and not limited to:
- Writing, testing, and maintaining Ansible playbooks, roles, and modules, with a deep understanding of Jinja2, Collections, and configuration management
- Leveraging Ansible Galaxy for reusable components and Ansible Vault for managing sensitive data
- Utilizing Ansible for the configuration and automating physical hardware and network appliances (e.g., routers, firewalls)
- Strong analytical and debugging abilities to resolve complex issues within automation workflows.
- Deep hands-on experience with Fedora-based Linux distributions (RHEL, Rocky, Oracle) including administration of drivers, firmware, file systems, networking, and security
- Proficiency in Python and Bash for custom modules and advanced automation
- Experience with virtualization and container platforms (e.g., VMware, Kubernetes, Docker/Podman)
- Strong understanding of core cybersecurity concepts, technologies, and methodologies and understanding of infrastructure security, hardening processes, techniques, and industry best practices
- Experience with network protocols, architecture design, and defense-in-depth practices
- Understanding of best practices for security patching, authentication, and log retention
- Experience operating within security frameworks to support compliance and auditing requirements
- Experience with Git/GitHub, CI/CD pipelines (e.g., GitHub Actions), and Agile (project management) workflows (Jira)
- Strong written and verbal communication skills, with the ability to document and maintain engineering processes and procedures
- Bachelor's degree in Engineering, Computer Science, Information Technology, or related field; equivalent experience will be considered.
Preferred Qualifications:- Experience supporting Defensive Cyber Operations within Service Cyber Command elements or other U.S. Government organizations
- Experience with defensive cyber tools such as Security Onion, Splunk, Elastic, Zeek, pfSense, and related platforms
- Security certification such as CySA+ or CISSP
- An active Secret security clearance or ability to obtain one is preferred
Sealing Tech offers competitive compensation packages, health, dental, and vision insurance, retirement contributions, continuing education budgets, tuition reimbursement, flexible schedules, and generous vacation policies. Other perks include complimentary snacks, drinks & monthly catered lunches, and company retreats and gatherings. Plus, flexible work arrangements, pet friendly offices and quarterly merit bonuses for qualified employees. We are looking for a new member to join our team, take on challenges, be innovative and willing to grow with us. BUILD, SECURE, SOLVE.
