Information Systems Security Engineer (ISSE) - Red Hat Enterprise Linux (RHEL)

AMERICAN SYSTEMS, a 100% employee-owned federal contractor, is seeking a highly experienced Information Systems Security Engineer (ISSE) to support Red Hate Enterprise Linux systems in a High Performance Computing (HPC) environment in Arlington, VA.

This role includes a $10,000 sign-on bonus in addition to a generous compensation package.

Design and implement enterprise-level security architectures for RHEL systems in a High Performance Computing (HPC) SAP environment
• Utilize RHEL command-line and systems knowledge to apply JSIG requirements across the entire environment.
• Manually develop RMF/JSIG authorization artifacts, including SSPs, control narratives, POA&Ms, and supporting evidence
• Perform hands-on security assessments on Linux, Palo Alto, Cisco, PostgreSQL and ESXI systems including command-line audits, compliance scans, log review, and control validation
• Analyze scan results, identify security gaps, develop remediation plans and execute these plans in a production environment.
• Validate and implement host-based firewall and auditd configurations in coordination with system administrators
• Manage and track POA&Ms through mitigation, remediation, or risk acceptance
• Ensure system compliance through continuous monitoring of controls, procedures, and documentation
• Identify security deficiencies and provide actionable remediation recommendations
• Support system recovery and lead technical security oversight following outages or incidents
• Lead incident response investigation, mitigation, reporting and remediation.
• Collaborate with engineering teams to integrate security requirements into system design and production releases.

• Active Top Secret/SCI with SAP eligibility
• Bachelor's degree in a STEM discipline with 11-12 years of relevant experience, or
  • Master's degree with 8-10 years of relevant experience
• Minimum 5 years of experience designing and implementing enterprise-scale security solutions with hands-on security assessment experience, including command-line validation, across Linux systems.
• DoD 8140 IAT Level III-equivalent certification (e.g., SecurityX, CISSP, CCNP Security, CISA, GCED, GCIH, or CCSP)
• Working experience in Linux command-line (eg. RHEL, Ubuntu, Fedora, CentOS)
• Strong background in RMF, ICD 503, NIST SP 800-53, DCID 6/3, or current DoW authorization practices
• Working knowledge of the JSIG and its application to RMF authorization
• Experience supporting security tools such as Splunk Enterprise, ACAS, SELinux, Rsyslog, Shorewall, Firewalld
• Demonstrated security engineering experience across Linux, Cisco networking, databases (SQL or Oracle), and virtualized environments