USAF - Linux/Kubernetes Automation Engineer

cFocus Software Incorporated•Linthicum Heights, MD

1d•Onsite

About The Position

cFocus Software is seeking a Linux/Kubernetes Automation Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD and requires an Active TS/SCI clearance. The role involves provisioning, configuring, patching, and troubleshooting Linux servers and operating system services using approved baselines and repeatable automation. It also includes automating Kubernetes cluster and workload deployment, configuration, upgrades, and lifecycle tasks. The engineer will develop and maintain Infrastructure as Code (IaC), Configuration as Code (CaC), and scripts for consistent deployment across various environments. Responsibilities also extend to creating version-controlled CI/CD pipeline artifacts, automating the application of Security Technical Implementation Guides (STIGs), implementing access controls, configuring logging and monitoring, integrating vulnerability scanning, testing infrastructure changes, and maintaining configuration baselines. The role requires troubleshooting various issues in coordination with multidisciplinary teams, supporting capacity planning, and generating operational documentation. Additionally, the engineer will provide technical evidence for Risk Management Framework (RMF) and Authority to Operate (ATO) processes, support incident response, and maintain operational runbooks.

Requirements

Active TS/SCI clearance
B.S. Computer Science, Information Technology, or a related field
Experience administering Linux services, permissions, networking, storage, and patches.
Experience operating Kubernetes and container workloads, including deployments, cluster health, upgrades, access controls, and troubleshooting.
Ability to write maintainable scripts and provision infrastructure with IaC/CaC tools.
Experience with source control, CI/CD pipelines, automated validation, deployment workflows, and configuration change management.
Working knowledge of secure baselines, STIG implementation, vulnerability remediation, and evidence supporting RMF and ATO processes.
Experience with platform monitoring, logging, alerting, and capacity management.
Ability to work across on-premises, cloud, and hybrid environments and coordinate dependencies with multidisciplinary technical teams.
Clear technical writing and communication skills; ability to maintain runbooks and resolve incidents

Responsibilities

Provision, configure, patch, and troubleshoot Linux servers and operating system services using approved baselines and repeatable automation.
Automate Kubernetes cluster and workload deployment, configuration, upgrades, and lifecycle tasks where these platforms are approved for use.
Develop and maintain Infrastructure as Code (IaC), Configuration as Code (CaC), and scripts for consistent deployment across on-premises, cloud, and hybrid environments.
Create version-controlled CI/CD pipeline artifacts for infrastructure and platform changes, incorporating testing, security guardrails, and deployment traceability.
Automate application of Security Technical Implementation Guides (STIGs) and Government-specified cybersecurity controls; validate configuration compliance.
Implement approved platform access controls, workload isolation, secrets handling, and configuration practices consistent with authorization boundaries.
Configure logging, monitoring, observability, and alerting to identify platform availability, performance, capacity, and security issues.
Integrate vulnerability scanning into pipelines and coordinate remediation, patching, and configuration corrections with cybersecurity and operations teams.
Test infrastructure changes and container deployments; obtain required Government review and authorization before production implementation.
Maintain configuration baselines and inventory records; document changes under the approved Configuration Management Plan.
Troubleshoot cluster, node, workload, storage, and connectivity issues in coordination with network, cloud, application, and database teams.
Support capacity planning, recovery procedures, and service continuity for assigned Linux and container infrastructure.
Generate and maintain operational scripts, system configurations, technical documentation, and live-environment inputs for network diagrams.
Provide technical evidence for Risk Management Framework (RMF), Authority to Operate (ATO), continuous ATO, and continuous monitoring activities.
Support incident response with logs and technical data, implement approved corrective actions, and maintain operational runbooks.