Linux Systems Security Engineer - TS/SCI

Parsons Corporation•Centreville, VA

1d•$103,500 - $181,100•Hybrid

About The Position

Parsons is seeking an experienced Linux Systems Security Engineer to design, implement, secure, and maintain enterprise Linux infrastructure. The ideal candidate will have strong hands-on experience with Red Hat Enterprise Linux or Rocky Linux, enterprise identity and infrastructure services, cybersecurity hardening, and Security Technical Implementation Guide STIG application. This position will support the development and operation of secure, scalable Linux enterprise solutions, including identity management, configuration management, networking services, source-code management, authentication, security logging, and vulnerability management. This role supports a hybrid schedule and requires presence in Centreville, VA 3 days per week.

Requirements

U.S. Citizenship and an active TS/SCI clearance
Bachelor’s degree and 5+ years of experience in Cybersecurity, Computer Science, Information Technology, or a related field. Additional years of experience may be considered in lieu of a degree.
Current IAT Level II certification or higher, such as: Security+, SSCP, CySA+, GSEC, CCNA Cyber Ops, or another qualifying certification under applicable DoD or organizational requirements.
Demonstrated professional experience administering and securing Red Hat Enterprise/Rocky Linux environments.
Experience designing, implementing, and supporting Linux enterprise solutions that include: FreeIPA, Pulp/Foreman, RADIUS, DHCP, DNS, Enterprise Security Logging, STIG application and system hardening.
Strong understanding of Linux security controls, authentication, authorization, encryption, access management, patch management, and vulnerability remediation.
Experience troubleshooting enterprise systems in production environments.
Ability to create and maintain technical documentation, diagrams, configuration standards, and implementation procedures.
Strong communication, analytical, problem-solving, and collaboration skills.

Nice To Haves

Experience with network engineering and administration, particularly Juniper technologies.
RHCSA certification or higher.
JNCIA certification or higher.
Experience with VMware vSphere administration and virtualization technologies.
Experience implementing OpenSearch or similar platforms for security logging, monitoring, and analysis.
Experience configuring and operating ACAS/Tenable for vulnerability assessment and scanning.
Experience with enterprise hardware configuration, provisioning, installation, and deployment.
Knowledge of automation and infrastructure-as-code tools such as Ansible, Git, Bash, and Python.
Experience supporting highly regulated, government, defense, or security-sensitive environments.
Familiarity with cybersecurity frameworks, configuration management, vulnerability management, and continuous monitoring practices.

Responsibilities

Design, implement, administer, and secure Rocky Linux environments.
Develop and maintain enterprise Linux solutions using: FreeIPA, Pulp/Foreman, RADIUS, DHCP, DNS, GitLab, STIG application and compliance baselines.
Apply security hardening standards to Linux systems in accordance with applicable STIGs, organizational security policies, and regulatory requirements.
Configure centralized authentication, authorization, identity management, and access controls.
Aid development of system architectures, technical implementation plans, standard operating procedures, and security documentation.
Automate system deployment, configuration, patching, and compliance activities where appropriate.
Troubleshoot complex operating system, application, networking, authentication, and infrastructure issues.
Support vulnerability assessment, remediation, and continuous security monitoring activities.
Collaborate with network, cybersecurity, virtualization, systems administration, and application team members.
Participate in system design reviews, risk assessments, incident response, and change-management processes.
Mentor junior engineers and contribute to operational standards and best practices.
Ensure systems are configured for availability, performance, maintainability, and security.