SE Linux Based MLS SME Linux Administrator

About the role

We are seeking a SE Linux Based MLS Linux Administrator SME for our enterprise MLS configuration team which includes our Centralized SuperComputing Facility (CSCF) High Performance Computing and other contracts.

Duties and Responsibilities

• Develops, configures, and maintains integrated Red Hat Enterprise Linux/SE Linux Mandatory Access Control (MAC) configurations across multiple systems, networks, and NAS storage based on current LM configuration approach
• Work closely with the Dev/Sec/Ops automation development team to deploy RHEL SE Linux MLS configurations based on site specific input files
• Work closely with the security team to ensure RMF, RTB, and other security controls are met and fully documented
• Manage impacts to system HPC performance ensuring minimal impacts
• Apply best practices in software engineering, delivering projects on time and with excellent quality
• Provide support to staff and end users to resolve issues in deployed configurations
• Modify existing software to correct errors and/or improve performance
• Ensure InfiniBand high speed fabrics operate correctly with MAC labeling
• Ensure MLS networking meets controls requirements

Education/Requirements

• Bachelor's degree in Computer Science or an AIS degree required plus 10 years of experience
• A minimum of 5 years of experience developing system software in heterogeneous, multi-platform environments
• Proficiency with all aspects of SE Linux configuration, policy, MAC labeling, Security contexts, debugging policy issues, MLS FreeIPA, MLS Ethernet interface networking, developing least access policies, etc.
• Proficiency in Bourne/Bash and Expect scripting
• Proficiency in debugging issues with the Linux kernel including examining source code, system logs, and using tools such a crash and systemtap.
• Experience with managing Satellite repositories to apply patches and build custom kernels as required to implement functionality or address security concerns
• Familiarity with automating approaches to configuring and maintaining (e.g. patching) systems using Ansible and Satellite Server
• Understanding and experience working with identity management systems including LDAP and token-based authentication systems
• Excellent written and oral communication and people skills; excellent time management and organizational skills
• Demonstrated ability to analyze, debug and maintain the integrity of an existing scripting base
• Demonstrated organization skills to balance and prioritize work, and ability to multitask
• Demonstrated communication skills to communicate with support personnel, customer, and managers

Preferred Skills

• Familiarity with High Performance Computing (HPC) environment and related technologies
• Familiarity with Infiniband or Omni-Path high speed fabrics, including subnet management, IPoIB and/or IPoOPA mechanisms, fabric topology and health monitoring and integration with MPI
• Experience with Lustre, NFS, and other direct attach file systems
• Experience with Ethernet networking
• Experience with RDMA communications (InfiniBand and OmniPath)
• Knowledge of Python, Perl, Korn, and other shell scripting
• Experience with revision control software (CVS, SVN, Git)