Linux Administrator

OverviewCommIT Enterprises, Inc. is seeking a Linux Administrator join the team in Quantico, VA. The successful candidate will use their Red Hat Linux experience to support the Customer in the design and implementation of their Assured Compliance Assessment Solution (ACAS) for the Customer’s Government Enterprise Networks (GEN). The Linux Administrator will operate and maintain the infrastructure for the ACAS solution to support network and appliance scanning and configuration assessments and provide training to operators and Information Assurance personnel to maintain and operate the ACAS tool functionality.In addition, the ideal candidate will have knowledge and experience with RedHat Linux, and possess understanding and experience with common cybersecurity toolsets and processes to include STIGs, CAS, IAVA Management and Implementation, and Operation Order (OPORD)/Fragmentary Order (FRAGO) support.Established in 2001, CommIT is a Certified Veteran-Owned Small Business (CVOSB) providing innovative technical engineering and data science services. Our enterprise systems support includes the Department of Defense’s (DoD) GCSS-MC, CAC2S, TBMCS-MC, and the Department of Veteran’s Affairs’ (VA) telehealth communications. We offer acquisition management, systems engineering, Agile software development, cloud management, IT modernization, data analytics, cybersecurity, and training, including leading-edge DevSecOps, automated testing, and mobile application development.ResponsibilitiesYour essential job functions will include but may not be limited to-Install and patch operating systems, application, and document Department Information Systems Agency (DISA) Security Technical Implementation Guidelines (STIGs) applicable to each network environment for all ACAS implementations.Assesses current ACAS implementations for each of the GEN networks and recommend changes.Document the steps required to design the ACAS solution for each of the GEN networks to include IP address, Fully Qualified Domain Name, and physical location of each component.Create network diagrams of the designs with Microsoft Visio (include list of hardware and software requirements).Maintains the Nessus scanners and Passive Vulnerability Scanner’s (PVS) connectivity with the associated Security Center (SC).Develop and/or update the Standard Operating Procedures (SOP) to support each of the client ACAS solutions documented within the SharePoint portal.Provide reports as necessary.Build Linux Server from DISA provided ISO image.QualificationsRequired Experience and Education:DoD 8570 IAT III or IAM II (CASP+, CCNP Security, CISA, GSE, SCNA, CISSP [or Associate], CAP, GSLC, CISM, GCED, GCIH, CISO, or HCISPP). Candidate has 180 days to attain if they have a lower level 8570 certificate.3+ years’ experience in supporting, configuring, administering Linux3+ (RHEL) operating system in an enterprise environment RHEL 7.x or greaterExperience with virtualized environments (vSphere, ESXI)Red Hat Enterprise Linux (RHEL) experience.Must be able to troubleshoot SSH connection issues.Good understanding of LVM Partitioning, Disk space and troubleshooting Systems related issues.Familiar with VMware and vSphere.Understanding of SSL/TLS Certificate and OS hardening.Strong understanding of Network configuration and troubleshooting (nmtui, nmcli, service, netstat, grep, top command).Understanding of patching and RPM package management is a MUST!!!Be able to troubleshoot Kernel Panic, Root and Grub password Reset, & Firewall configurations.Familiar with Ansible, Ansible-playbook and ansible roles Preferred Skills:Understanding on Red Hat Satellite Version 6.12 or higherFamiliar with Active Directory Concepts, LDAP, or KerberosFamiliar with migration from RHEL7 to RHEL8 using Leapp utility.Build or configure new YUM Repositories for patching purposes.Familiar with AWS/AZURE Cloud for future projects.Scripting (Nessus Attack Scripting Language (NASL), Python, Bash)Engineering experience with Nessus Manager and Monitor ImplementationAble to spin new instance on the cloud from a given AMI or Launch TemplateUnderstand the concept of Security Groups, VPC, IAM, Autoscaling, Load Balancer Container architectureCompetencies: Good communication and interpersonal skillsAbility to follow policies and proceduresAbility to communicate in a clear speaking voice as well as the ability to respond clearly to questionsAptitude to address negative situations and resolve them in a positive mannerPhysical Demands and Work Environment:General office environment. Work is generally sedentary in nature but may require standing and walking for up to 10% of the time. The working environment is generally favorable. Lighting and temperature are adequate, and there are not hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.Contractor site with 0-10% travel possiblePossible off-hours work to support releases and outages10 lbs. maximum lifting, occasional lift/carry of small articlesOccasionally required to stand; frequently required to walk and sitContinually required to utilize hand and finger dexterityOccasionally required to climb, balance, bend, stoop, kneel or crawlContinually required to talk or hearContinually utilize visual acuity to operate equipment, read technical information, and/or use a keyboardSecurity Requirements:Active DoD- Secret Clearance Equal Opportunity Employer:CommIT Enterprises, Inc. is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.