Information Systems Security Engineer (ISSE) - Red Hat Enterprise Linux (RHEL)

American Systems•Arlington, VA

3d•$165,000 - $200,000•Onsite

About The Position

AMERICAN SYSTEMS, a 100% employee-owned federal contractor, is seeking a highly experienced Information Systems Security Engineer (ISSE) to support Red Hat Enterprise Linux systems in a High Performance Computing (HPC) environment in Arlington, VA. This role includes a $10,000 sign-on bonus in addition to a generous compensation package.

Requirements

Active Top Secret/SCI with SAP eligibility
Bachelor’s degree in a STEM discipline with 11–12 years of relevant experience, or Master’s degree with 8–10 years of relevant experience
Minimum 5 years of experience designing and implementing enterprise-scale security solutions with hands-on security assessment experience, including command-line validation, across Linux systems.
DoD 8140 IAT Level III–equivalent certification (e.g., SecurityX, CISSP, CCNP Security, CISA, GCED, GCIH, or CCSP)
Working experience in Linux command-line (eg. RHEL, Ubuntu, Fedora, CentOS)
Strong background in RMF, ICD 503, NIST SP 800-53, DCID 6/3, or current DoW authorization practices
Working knowledge of the JSIG and its application to RMF authorization
Experience supporting security tools such as Splunk Enterprise, ACAS, SELinux, Rsyslog, Shorewall, Firewalld
Demonstrated security engineering experience across Linux, Cisco networking, databases (SQL or Oracle), and virtualized environments

Responsibilities

Design and implement enterprise-level security architectures for RHEL systems in a High Performance Computing (HPC) SAP environment
Utilize RHEL command-line and systems knowledge to apply JSIG requirements across the entire environment.
Manually develop RMF/JSIG authorization artifacts, including SSPs, control narratives, POA&Ms, and supporting evidence
Perform hands-on security assessments on Linux, Palo Alto, Cisco, PostgreSQL and ESXI systems including command-line audits, compliance scans, log review, and control validation
Analyze scan results, identify security gaps, develop remediation plans and execute these plans in a production environment.
Validate and implement host-based firewall and auditd configurations in coordination with system administrators
Manage and track POA&Ms through mitigation, remediation, or risk acceptance
Ensure system compliance through continuous monitoring of controls, procedures, and documentation
Identify security deficiencies and provide actionable remediation recommendations
Support system recovery and lead technical security oversight following outages or incidents
Lead incident response investigation, mitigation, reporting and remediation.
Collaborate with engineering teams to integrate security requirements into system design and production releases.