{"schemaVersion":"jobsearcher.job.v1","id":"f4ff225a2ee366e443aedae4","url":"https://jobsearcher.com/jobs/f4ff225a2ee366e443aedae4","canonicalUrl":"https://jobsearcher.com/jobs/f4ff225a2ee366e443aedae4","title":"Senior Network & Linux Security Engineer","description":"About Alpha Origin\n\nAlpha Origin is a profitable, bootstrapped, independent engineering firm for critical infrastructure. We help operators find where their systems are vulnerable to compromise or failure, then engineer and test the fixes.\n\nOur work spans hyperscale and AI data centers, financial services, telecom, and energy. Our team brings experience from Special Operations, the intelligence community, national laboratories, and infrastructure operations. We work across vendors and technologies, with the freedom to recommend what a customer should keep, change, buy, or build.\n\nThe role\n\nYou will design, build, harden, and secure the networks and Linux infrastructure behind our customer engagements and internal platforms. You will lead enterprise network implementations, evaluate unfamiliar environments independently, and make practical recommendations that customers can act on.\n\nThis is a hands-on senior engineering role with responsibility from architecture through implementation and validation. You should understand why a configuration works, how it can fail, and how to verify a change safely in a production environment.\n\nYou will work directly with AO's founders, engineers, offensive security team, and customers. You will also help shape what we build next by turning recurring customer problems into better tools, services, and engineering capabilities.\n\nWhat you'll do\n\nBuild, host, and maintain applications and services in hardened Linux environments.\n\nImplement and maintain host and network controls, including firewalls, access control lists, proxies, and SELinux policies.\n\nDesign and operate routed and switched networks, including OSPF, BGP, VLAN segmentation, and inter-site connectivity.\n\nConfigure, audit, and troubleshoot networks, firewalls, and routing across multiple vendors. Adapt to the customer's environment and make sound decisions about what to retain, improve, or replace.\n\nLead architecture and configuration reviews against applicable CIS benchmarks, NIST guidance, and vendor hardening recommendations. Present findings and recommendations directly to technical and executive stakeholders.\n\nPrioritize remediation by risk reduction, cost, implementation effort, and operational impact. Make the tradeoffs explicit and identify improvements that work within the customer's budget and existing infrastructure.\n\nWork with engineering and offensive security teams to validate controls under realistic attack scenarios, within agreed scope and operating constraints.\n\nProduce clear architecture diagrams, configurations, findings, implementation plans, and runbooks that customer teams can use and maintain.\n\nIdentify recurring gaps across engagements and propose new tools, products, or service offerings, with a clear problem statement and a practical path to a prototype.\n\nWhat you'll bring\n\nExtensive hands-on experience in Linux engineering and enterprise networking, typically gained over 15+ years, with current responsibility for production environments.\n\nLinux engineering\n\nDeep experience with application hosting, service hardening, and system administration at scale.\n\nStrong experience with host firewalls, network access control lists, and proxy configuration.\n\nExperience writing, debugging, and maintaining SELinux policies in enforcing mode.\n\nAdvanced networking\n\nStrong routing and switching fundamentals, including OSPF, BGP, VLANs, trunking, and Spanning Tree Protocol.\n\nHands-on experience configuring and troubleshooting Cisco switches and firewalls, Fortinet FortiGate firewalls, and Palo Alto Networks firewalls.\n\nThe ability to work across vendors and learn unfamiliar technologies without depending on one product ecosystem.\n\nConsulting and judgment\n\nThe ability to enter an unfamiliar customer environment, establish the facts, identify consequential weaknesses, and make a defensible recommendation.\n\nConfidence communicating difficult findings respectfully and directly, including to senior stakeholders.\n\nA track record of recommending practical, budget-aware improvements and recognizing when a targeted change is more useful than replacing an entire system.\n\nClear written and verbal communication. You can explain a technical finding, its consequences, and the proposed investment to both an engineer and a CFO.\n\nThe ability to own work independently, follow through on commitments, and know when to bring in another specialist.\n\nEducation and certifications\n\nA bachelor's or master's degree in Computer Science or a closely related field. Equivalent practical experience will be considered.\n\nOne or more relevant certifications, such as CISSP, CCNP, CCIE, CompTIA Security+, or CEH. Proven experience supported by professional references may substitute for certifications.\n\nUseful additional experience\n\nOT/ICS or other critical infrastructure environments.\n\nScripting and automation using Python, Bash, or Ansible.\n\nTurning a customer problem into an internal tool, productized service, or commercial product.\n\nWhy AO\n\nYou will join a small team where senior engineers stay close to the work and have a direct voice in technical decisions. You will see projects through from understanding the environment to building and validating improvements.\n\nThere is room to grow through technical leadership, ownership of complex engagements, and development of new capabilities. That scope will grow with your judgment, execution, and the needs you identify.\n\nLocation and working arrangements\n\nHybrid role based in the DC metro area, with in-person work in Arlington, VA.\n\nAd hoc travel based on customer and engagement needs.\n\nMust be legally authorized to work in the United States. AO does not sponsor employment visas at this time.\n\nCompensation and benefits\n\nThe base salary range for this role is $180,000–$220,000, depending on relevant experience, technical depth, and demonstrated ability to lead complex customer engagements independently.\n\nEligible for a meaningful discretionary bonus based on individual and company performance. Profit sharing from day one. Participation in long-term company upside. Excellent healthcare and other benefits. Unlimited PTO.\n\nCompensation Range: $180K - $220K","company":"Alpha Origin","rawCompany":"alpha origin","city":"Washington","state":"DC","isRemote":false,"isActive":true,"createdAt":"2026-10-17T08:17:30.539Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1244.00","title":"Network and Computer Systems Administrators","slug":"network-and-computer-systems-administrators"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"},{"code":"541513","title":"Computer Facilities Management Services","slug":"computer-facilities-management-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Senior Network & Linux Security Engineer","description":"About Alpha Origin\n\nAlpha Origin is a profitable, bootstrapped, independent engineering firm for critical infrastructure. We help operators find where their systems are vulnerable to compromise or failure, then engineer and test the fixes.\n\nOur work spans hyperscale and AI data centers, financial services, telecom, and energy. Our team brings experience from Special Operations, the intelligence community, national laboratories, and infrastructure operations. We work across vendors and technologies, with the freedom to recommend what a customer should keep, change, buy, or build.\n\nThe role\n\nYou will design, build, harden, and secure the networks and Linux infrastructure behind our customer engagements and internal platforms. You will lead enterprise network implementations, evaluate unfamiliar environments independently, and make practical recommendations that customers can act on.\n\nThis is a hands-on senior engineering role with responsibility from architecture through implementation and validation. You should understand why a configuration works, how it can fail, and how to verify a change safely in a production environment.\n\nYou will work directly with AO's founders, engineers, offensive security team, and customers. You will also help shape what we build next by turning recurring customer problems into better tools, services, and engineering capabilities.\n\nWhat you'll do\n\nBuild, host, and maintain applications and services in hardened Linux environments.\n\nImplement and maintain host and network controls, including firewalls, access control lists, proxies, and SELinux policies.\n\nDesign and operate routed and switched networks, including OSPF, BGP, VLAN segmentation, and inter-site connectivity.\n\nConfigure, audit, and troubleshoot networks, firewalls, and routing across multiple vendors. Adapt to the customer's environment and make sound decisions about what to retain, improve, or replace.\n\nLead architecture and configuration reviews against applicable CIS benchmarks, NIST guidance, and vendor hardening recommendations. Present findings and recommendations directly to technical and executive stakeholders.\n\nPrioritize remediation by risk reduction, cost, implementation effort, and operational impact. Make the tradeoffs explicit and identify improvements that work within the customer's budget and existing infrastructure.\n\nWork with engineering and offensive security teams to validate controls under realistic attack scenarios, within agreed scope and operating constraints.\n\nProduce clear architecture diagrams, configurations, findings, implementation plans, and runbooks that customer teams can use and maintain.\n\nIdentify recurring gaps across engagements and propose new tools, products, or service offerings, with a clear problem statement and a practical path to a prototype.\n\nWhat you'll bring\n\nExtensive hands-on experience in Linux engineering and enterprise networking, typically gained over 15+ years, with current responsibility for production environments.\n\nLinux engineering\n\nDeep experience with application hosting, service hardening, and system administration at scale.\n\nStrong experience with host firewalls, network access control lists, and proxy configuration.\n\nExperience writing, debugging, and maintaining SELinux policies in enforcing mode.\n\nAdvanced networking\n\nStrong routing and switching fundamentals, including OSPF, BGP, VLANs, trunking, and Spanning Tree Protocol.\n\nHands-on experience configuring and troubleshooting Cisco switches and firewalls, Fortinet FortiGate firewalls, and Palo Alto Networks firewalls.\n\nThe ability to work across vendors and learn unfamiliar technologies without depending on one product ecosystem.\n\nConsulting and judgment\n\nThe ability to enter an unfamiliar customer environment, establish the facts, identify consequential weaknesses, and make a defensible recommendation.\n\nConfidence communicating difficult findings respectfully and directly, including to senior stakeholders.\n\nA track record of recommending practical, budget-aware improvements and recognizing when a targeted change is more useful than replacing an entire system.\n\nClear written and verbal communication. You can explain a technical finding, its consequences, and the proposed investment to both an engineer and a CFO.\n\nThe ability to own work independently, follow through on commitments, and know when to bring in another specialist.\n\nEducation and certifications\n\nA bachelor's or master's degree in Computer Science or a closely related field. Equivalent practical experience will be considered.\n\nOne or more relevant certifications, such as CISSP, CCNP, CCIE, CompTIA Security+, or CEH. Proven experience supported by professional references may substitute for certifications.\n\nUseful additional experience\n\nOT/ICS or other critical infrastructure environments.\n\nScripting and automation using Python, Bash, or Ansible.\n\nTurning a customer problem into an internal tool, productized service, or commercial product.\n\nWhy AO\n\nYou will join a small team where senior engineers stay close to the work and have a direct voice in technical decisions. You will see projects through from understanding the environment to building and validating improvements.\n\nThere is room to grow through technical leadership, ownership of complex engagements, and development of new capabilities. That scope will grow with your judgment, execution, and the needs you identify.\n\nLocation and working arrangements\n\nHybrid role based in the DC metro area, with in-person work in Arlington, VA.\n\nAd hoc travel based on customer and engagement needs.\n\nMust be legally authorized to work in the United States. AO does not sponsor employment visas at this time.\n\nCompensation and benefits\n\nThe base salary range for this role is $180,000–$220,000, depending on relevant experience, technical depth, and demonstrated ability to lead complex customer engagements independently.\n\nEligible for a meaningful discretionary bonus based on individual and company performance. Profit sharing from day one. Participation in long-term company upside. Excellent healthcare and other benefits. Unlimited PTO.\n\nCompensation Range: $180K - $220K","datePosted":"2026-10-17T08:17:30.539Z","dateModified":"2026-10-17T08:17:30.539Z","hiringOrganization":{"@type":"Organization","name":"Alpha Origin","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Washington","addressRegion":"DC","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"f4ff225a2ee366e443aedae4"},"url":"https://jobsearcher.com/jobs/f4ff225a2ee366e443aedae4"}}