Linux系统安全工程师 - TS/SCI
Linux Systems Security Engineer - TS/SCI
在无限可能的世界中，追求充满机遇的未来。想象下一个可能！
在Parsons，你可以拥有一个让你成长、与优秀的人合作并做自己的职业生涯。在我们重视人才、拥抱敏捷、促进成长的领导愿景指引下，我们培养出一种创新文化，使你能够充分发挥潜能。释放你的才华，重新定义可能。
**职位描述：**
Parsons正在寻找一位经验丰富的**Linux系统安全工程师**，负责设计、实施、保护和维护企业级Linux基础设施。理想的候选人应具备Red Hat Enterprise Linux或Rocky Linux的扎实实践经验，以及企业身份和基础设施服务、网络安全加固和安全技术实施指南（STIG）应用方面的经验。
该职位将支持安全、可扩展的Linux企业解决方案的开发和运营，包括身份管理、配置管理、网络服务、源代码管理、认证、安全日志记录和漏洞管理。
_此职位支持混合办公安排，每周需在弗吉尼亚州Centreville出现3天。_
**你将负责：**
- 设计、实施、管理并保护Rocky Linux环境。
- 使用以下工具开发和维护企业级Linux解决方案：
- FreeIPA
- Pulp/Foreman
- RADIUS
- DHCP
- DNS
- GitLab
- STIG应用和合规基线
- 根据适用的STIG、组织安全策略和法规要求，对Linux系统应用安全加固标准。
- 配置集中式认证、授权、身份管理和访问控制。
- 协助开发系统架构、技术实施方案、标准操作流程和安全文档。
- 在适当的情况下自动化系统部署、配置、补丁和合规活动。
- 排查复杂的操作系统、应用程序、网络、认证和基础设施问题。
- 支持漏洞评估、修复和持续的安全监控活动。
- 与网络、网络安全、虚拟化、系统管理及应用团队成员协作。
- 参与系统设计评审、风险评估、事件响应和变更管理流程。
- 指导初级工程师，并为操作标准和最佳实践做出贡献。
- 确保系统配置为可用
查看英文原文
In a world of possibilities, pursue one with endless opportunities. Imagine Next!
At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.
**Job Description:**
Parsons is seeking an experienced **Linux Systems Security Engineer** to design, implement, secure, and maintain enterprise Linux infrastructure. The ideal candidate will have strong hands-on experience with Red Hat Enterprise Linux or Rocky Linux, enterprise identity and infrastructure services, cybersecurity hardening, and Security Technical Implementation Guide STIG application.
This position will support the development and operation of secure, scalable Linux enterprise solutions, including identity management, configuration management, networking services, source-code management, authentication, security logging, and vulnerability management.
_This role supports a hybrid schedule and requires presence in Centreville, VA 3 days per week._
**What You'll Be Doing:**
- Design, implement, administer, and secure Rocky Linux environments.
- Develop and maintain enterprise Linux solutions using:
- FreeIPA
- Pulp/Foreman
- RADIUS
- DHCP
- DNS
- GitLab
- STIG application and compliance baselines
- Apply security hardening standards to Linux systems in accordance with applicable STIGs, organizational security policies, and regulatory requirements.
- Configure centralized authentication, authorization, identity management, and access controls.
- Aid development of system architectures, technical implementation plans, standard operating procedures, and security documentation.
- Automate system deployment, configuration, patching, and compliance activities where appropriate.
- Troubleshoot complex operating system, application, networking, authentication, and infrastructure issues.
- Support vulnerability assessment, remediation, and continuous security monitoring activities.
- Collaborate with network, cybersecurity, virtualization, systems administration, and application team members.
- Participate in system design reviews, risk assessments, incident response, and change-management processes.
- Mentor junior engineers and contribute to operational standards and best practices.
- Ensure systems are configured for availability, performance, maintainability, and security.
**What Required Skills You'll Bring:**
- U.S. Citizenship and an active TS/SCI clearance
- Bachelor’s degree and 5+ years of experience in Cybersecurity, Computer Science, Information Technology, or a related field. Additional years of experience may be considered in lieu of a dregree.
- Current IAT Level II certification or higher, such as:
- Security+
- SSCP
- CySA+
- GSEC
- CCNA Cyber Ops
- Another qualifying certification under applicable DoD or organizational requirements
- Demonstrated professional experience administering and securing Red Hat Enterprise/Rocky Linux environments.
- Experience designing, implementing, and supporting Linux enterprise solutions that include:
- FreeIPA
- Pulp/Foreman
- RADIUS
- DHCP
- DNS
- Enterprise Security Logging
- STIG application and system hardening
- Strong understanding of Linux security controls, authentication, authorization, encryption, access management, patch management, and vulnerability remediation.
- Experience troubleshooting enterprise systems in production environments.
- Ability to create and maintain technical documentation, diagrams, configuration standards, and implementation procedures.
- Strong communication, analytical, problem-solving, and collaboration skills.
**What Desired Skills You'll Bring:**
- Experience with network engineering and administration, particularly Juniper technologies.
- RHCSA certification or higher.
- JNCIA certification or higher.
- Experience with VMware vSphere administration and virtualization technologies.
- Experience implementing OpenSearch or similar platforms for security logging, monitoring, and analysis.
- Experience configuring and operating ACAS/Tenable for vulnerability assessment and scanning.
- Experience with enterprise hardware configuration, provisioning, installation, and deployment.
- Knowledge of automation and infrastructure-as-code tools such as Ansible, Git, Bash, and Python.
- Experience supporting highly regulated, government, defense, or security-sensitive environments.
- Familiarity with cybersecurity frameworks, configuration management, vulnerability management, and continuous monitoring practices.
**Security Clearance Requirement:**
An active Top Secret SCI security clearance is required for this position.
This position is part of our Federal Solutions team.
The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.
Salary Range: $103,500.00 - $181,100.00
We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!
This position will be posted for a minimum of 3 days and will continue to be posted for an average of 30 days until a qualified applicant is selected or the position has been cancelled.
Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.
We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!
Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to[https://www.parsons.com/fraudulent-recruitment/](https://www.parsons.com/fraudulent-recruitment/).