The Role
Provision, configure, patch, and troubleshoot Linux and Kubernetes infrastructure across on-premises, cloud, and hybrid environments. Develop IaC, CaC, scripts, and CI/CD pipelines for automated deployments and secure configuration changes. Implement STIGs, access controls, vulnerability remediation, monitoring, logging, and alerting. Support RMF and ATO evidence, configuration management, incident response, capacity planning, recovery procedures, technical documentation, and operational runbooks.
Summary Generated by Built In
cFocus Software seeks a Linux/Kubernetes Automation Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience administering Linux services, permissions, networking, storage, and patches.
- Experience operating Kubernetes and container workloads, including deployments, cluster health, upgrades, access controls, and troubleshooting.
- Ability to write maintainable scripts and provision infrastructure with IaC/CaC tools.
- Experience with source control, CI/CD pipelines, automated validation, deployment workflows, and configuration change management.
- Working knowledge of secure baselines, STIG implementation, vulnerability remediation, and evidence supporting RMF and ATO processes.
- Experience with platform monitoring, logging, alerting, and capacity management.
- Ability to work across on-premises, cloud, and hybrid environments and coordinate dependencies with multidisciplinary technical teams.
- Clear technical writing and communication skills; ability to maintain runbooks and resolve incidents
- Provision, configure, patch, and troubleshoot Linux servers and operating system services using approved baselines and repeatable automation.
- Automate Kubernetes cluster and workload deployment, configuration, upgrades, and lifecycle tasks where these platforms are approved for use.
- Develop and maintain Infrastructure as Code (IaC), Configuration as Code (CaC), and scripts for consistent deployment across on-premises, cloud, and hybrid environments.
- Create version-controlled CI/CD pipeline artifacts for infrastructure and platform changes, incorporating testing, security guardrails, and deployment traceability.
- Automate application of Security Technical Implementation Guides (STIGs) and Government-specified cybersecurity controls; validate configuration compliance.
- Implement approved platform access controls, workload isolation, secrets handling, and configuration practices consistent with authorization boundaries.
- Configure logging, monitoring, observability, and alerting to identify platform availability, performance, capacity, and security issues.
- Integrate vulnerability scanning into pipelines and coordinate remediation, patching, and configuration corrections with cybersecurity and operations teams.
- Test infrastructure changes and container deployments; obtain required Government review and authorization before production implementation.
- Maintain configuration baselines and inventory records; document changes under the approved Configuration Management Plan.
- Troubleshoot cluster, node, workload, storage, and connectivity issues in coordination with network, cloud, application, and database teams.
- Support capacity planning, recovery procedures, and service continuity for assigned Linux and container infrastructure.
- Generate and maintain operational scripts, system configurations, technical documentation, and live-environment inputs for network diagrams.
- Provide technical evidence for Risk Management Framework (RMF), Authority to Operate (ATO), continuous ATO, and continuous monitoring activities.
- Support incident response with logs and technical data, implement approved corrective actions, and maintain operational runbooks.
Skills Required
- Active TS/SCI security clearance
- Bachelor's degree in Computer Science, Information Technology, or a related field
- Experience administering Linux services, permissions, networking, storage, and patches
- Experience operating Kubernetes and container workloads, including deployments, cluster health, upgrades, access controls, and troubleshooting
- Ability to write maintainable scripts and provision infrastructure with IaC/CaC tools
- Experience with source control, CI/CD pipelines, automated validation, deployment workflows, and configuration change management
- Working knowledge of secure baselines, STIG implementation, vulnerability remediation, and RMF and ATO evidence processes
- Experience with platform monitoring, logging, alerting, and capacity management
- Ability to work across on-premises, cloud, and hybrid environments and coordinate dependencies with multidisciplinary technical teams
- Clear technical writing and communication skills, including maintaining runbooks and resolving incidents
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Established in 2006, cFocus Software automates FedRAMP compliance and develops government chatbots for the Azure Government Cloud, Office 365, and SharePoint. cFocus Software is the exclusive vendor of ATO (Authority To Operate) as a Service™, which automates FedRAMP compliance for the Azure Government Cloud and Office 365. Contact Us for a demo of ATO as a Service™ or a FREE government chatbot proof of concept project today!
