SELinux SME

M9 Solutions•Springfield, VA

24d•Onsite

About The Position

M9 Solutions is dedicated to providing IT services and solutions to the Federal Government by mobilizing the right people, skills, clearance levels, and technologies to help organizations who desire improved performance and modern, sustainable change. M9 has provided quality IT services and support to more than 30 Federal Agencies and multiple commercial customers nationwide. Our capabilities include digital transformation, software development, cloud migration, applications & infrastructure, cybersecurity, data delivery & analytics, and IT talent solutions. M9 Solutions is seeking an SELinux SME to work on-site in support of a government contract for a client located in Springfield, VA. An active TS/SCI with CI Poly clearance is required.

Requirements

TS/SCI with CI Poly clearance.
Bachelor's degree in Computer Science or an AIS degree required, plus 10 years of experience.
A minimum of 5 years of experience developing system software in heterogeneous, multi-platform environments.
Proficiency with all aspects of SE Linux configuration, policy, MAC labeling, Security contexts, debugging policy issues, MLS FreeIPA, MLS Ethernet interface networking, developing least access policies, etc.
Proficiency in Bourne/Bash and Expect scripting.
Proficiency in debugging issues with the Linux kernel, including examining source code, system logs, and using tools such as crash and systemtap.
Experience with managing Satellite repositories to apply patches and build custom kernels as required to implement functionality or address security concerns.
Familiarity with automating approaches to configuring and maintaining (e.g. patching) systems using Ansible and Satellite Server.
Understanding and experience working with identity management systems, including LDAP and token-based authentication systems.
Excellent written and oral communication and people skills; excellent time management and organizational skills.
Demonstrated ability to analyze, debug, and maintain the integrity of an existing scripting base.
Demonstrated organization skills to balance and prioritize work, and the ability to multitask.
Demonstrated communication skills to communicate with support personnel, customers, and managers.

Nice To Haves

Familiarity with High Performance Computing (HPC) environment and related technologies.
Familiarity with Infiniband or Omni-Path high-speed fabrics, including subnet management, IPoIB and/or IPoOPA mechanisms, fabric topology, and health monitoring and integration with MPI.
Experience with Lustre, NFS, and other direct-attach file systems.
Experience with Ethernet networking.
Experience with RDMA communications (InfiniBand and OmniPath).
Knowledge of Python, Perl, Korn, and other shell scripting.
Experience with revision control software (CVS, SVN, Git).

Responsibilities

Develops, configures, and maintains integrated Red Hat Enterprise Linux/SE Linux Mandatory Access Control (MAC) configurations across multiple systems, networks, and NAS storage based on the current configuration approach.
Works closely with the Dev/Sec/Ops automation development team to deploy RHEL SE Linux MLS configurations based on site-specific input files.
Works closely with the security team to ensure RMF, RTB, and other security controls are met and fully documented.
Manages impacts to system HPC performance, ensuring minimal impacts.
Applies best practices in software engineering, delivering projects on time and with excellent quality.
Provides support to staff and end users to resolve issues in deployed configurations.
Modifies existing software to correct errors and/or improve performance.
Ensures InfiniBand high-speed fabrics operate correctly with MAC labeling.
Ensures MLS networking meets controls requirements.