Principal Engineer - Systems (Unix Systems Administrator)

Microchip•Boulder, CO

4d•Onsite

About The Position

We are seeking a highly experienced Systems Administrator to engineer, secure, and maintain business-critical Linux and FreeBSD infrastructure across both bare-metal hardware and virtualized platforms. You will serve as a primary technical authority on system architecture and security compliance, ensuring our environments meet stringent federal and defense-industry standards.

Requirements

10+ years of hands-on, enterprise-level system administration experience specifically with Linux and/or FreeBSD operating systems.
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related technical field.
Must be a U.S. Citizen with the ability to obtain and maintain a TS/SCI U.S. Government Security Clearance.
Proven track record of hardening systems using DISA STIGs and CIS Benchmarks without breaking production workloads, practical knowledge of SELinux configuration.
Strong working knowledge of CMMC frameworks and the specific technical guardrails required for handling CUI.
Demonstrated ability to provision, manage, and secure operating systems directly on bare-metal hardware, as well as within scalable cloud environments.
Solid foundational knowledge of virtualization technologies and containerization runtimes.

Nice To Haves

Red Hat Certified Engineer/Administrator (RHCE/RHCSA)
Linux Foundation Certified Engineer/Administrator (LFCE/LFCS)
CompTIA Linux+
BSD Certification Group (BSDA/BSDP)
Certified Information Systems Security Professional (CISSP)
CompTIA Advanced Security Practitioner (CASP+)
CompTIA Security+
AWS Certified SysOps Administrator/Security Specialty
Certified Kubernetes Administrator (CKA)

Responsibilities

Design, deploy, and maintain enterprise Linux and/or FreeBSD environments on-premises and within cloud infrastructure environments.
Implement deep system hardening and mandatory access controls using SELinux by writing custom policies.
Apply, automate, and maintain strict security baselines according to DISA STIGs and CIS Benchmarks.
Architect and manage secure enclaves compliant with Cybersecurity Maturity Model Certification (CMMC) standards for the safe processing and storage of Controlled Unclassified Information (CUI).
Deploy, secure, and manage virtualized environments and containerized workloads.
Automate patching, configuration management, and compliance auditing across all hardware and cloud perimeters, utilizing in-house and industry automated tools (e.g., Ansible).
Troubleshoot complex OS, network, and storage issues at the kernel and hypervisor levels.