Senior Security Engineer

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

The Cyber Fusion Center (CFC) is seeking a highly motivated Senior Security Engineer to join our Infrastructure Security team. This role is ideal for an experienced Linux Infrastructure Engineer with a strong foundation in Linux administration, automation, and production operations, along with exposure to enterprise security technologies. The selected candidate will play a key role in managing and securing the critical infrastructure that protects the Qualys platform while developing expertise in Identity & Access Management (IAM), Public Key Infrastructure (PKI), Privileged Access Management (PAM), Secrets Management, and Secure Access platforms.

Key Responsibilities

1. Linux Infrastructure Administration

• Administer, maintain, and troubleshoot Linux servers across production and non-production environments.
• Perform operating system installation, configuration, upgrades, patching, and lifecycle management.
• Monitor system health, availability, performance, and capacity.
• Perform Linux OS hardening using industry best practices and security benchmarks.
• Manage users, groups, permissions, storage, networking, services, and system resources.
• Perform vulnerability remediation and security patch management.
• Support high availability, disaster recovery, and infrastructure resiliency initiatives.
• Create and maintain technical documentation and operational runbooks.

1. Security Infrastructure Administration

• Assist in managing and maintaining enterprise Identity and Access Management (IAM) platforms.
• Support LDAP/LDAPS infrastructure and enterprise authentication services.
• Learn, administer, and maintain ForgeRock/Ping Identity solutions.
• Support enterprise Public Key Infrastructure (PKI) including certificate lifecycle management.
• Assist with certificate issuance, renewal, revocation, and automation.
• Support Privileged Access Management (PAM) solutions and privileged account lifecycle management.
• Assist in managing Secrets Management platforms and secure credential storage.
• Support secure remote access infrastructure such as Teleport.
• Participate in infrastructure upgrades, migrations, and platform lifecycle management.

1. Automation & Infrastructure as Code

• Develop automation using Bash, Python, or PowerShell scripting.
• Build and maintain automation using Ansible, Terraform, Puppet, or similar tools.
• Automate infrastructure provisioning, configuration management, and operational activities.
• Contribute to Infrastructure as Code (IaC) repositories and CI/CD pipelines.
• Continuously improve operational efficiency through automation.

1. Security Operations & Incident Management

• Participate in 24x7 on-call support rotation for critical security infrastructure.
• Troubleshoot production incidents and restore services within defined SLAs.
• Perform Root Cause Analysis (RCA) and implement preventive measures.
• Collaborate with Engineering, Operations and other stakeholders during incident response.
• Drive operational excellence through continuous service improvements.

1. Security Compliance & Best Practices

• Implement and maintain infrastructure security best practices.
• Support vulnerability remediation across managed infrastructure.
• Assist with internal and external security audits.
• Ensure infrastructure complies with organizational security standards and regulatory requirements.
• Maintain operational procedures, architecture documentation, and standard operating procedures.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Security, Engineering, or equivalent practical experience.
• 3–5 years of hands-on Linux administration experience supporting enterprise production environments.
• Strong experience with Linux distributions such as Red Hat Enterprise Linux (RHEL), Oracle Linux, Ubuntu, or CentOS .
• Strong understanding of Linux administration including:
• User and group management
• Filesystem administration
• Storage management (LVM)
• System services (systemd)
• Networking
• Performance tuning
• SSH
• SELinux
• Security hardening
• Patch management
• Good understanding of TCP/IP networking, DNS, SSL/TLS, SSH, firewalls, and load balancing.
• Experience with virtualization platforms such as VMware.
• Hands-on scripting experience using Bash and/or Python.
• Experience with automation tools such as Ansible, Terraform, Puppet, or Jenkins.
• Strong troubleshooting and analytical skills.
• Excellent verbal and written communication skills.
• Ability to work independently and in a collaborative team environment.
• Willingness to participate in a 24x7 on-call support rotation.

Preferred Certifications

• RHCSA / RHCE
• CompTIA Security+
• CISSP
• Linux+
• AWS / OCI / Azure Cloud Certifications
• HashiCorp Vault Associate
• Ping Identity or ForgeRock Certifications

What You'll Gain

• Hands-on experience managing enterprise Identity & Access Management (IAM), Public Key Infrastructure (PKI), Privileged Access Management (PAM), Secrets Management, and Secure Access platforms.
• Exposure to enterprise scale security infrastructure supporting a global SaaS platform.
• Opportunities to work with cloud native security technologies and automation.
• A collaborative environment focused on innovation, operational excellence, and continuous learning.
• Career growth into a specialized Infrastructure Security Engineer within the Cyber Fusion Center.