LINUX Systems Engineer Security Clearance

Pillars

Nightwing provides technologically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers' most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

Nightwing is seeking a highly skilled Linux Systems Engineer to design, deploy, optimize, automate, and support large-scale Linux infrastructure supporting secure networking and remote-access services. This role is ideal for an engineer with deep expertise in Linux networking, policy-based routing, kernel performance tuning, infrastructure automation, and modern VPN technologies including Wire Guard, OpenVPN, and IPSec. The successful candidate will collaborate closely with network engineering, systems administration, and platform engineering teams to deliver highly available, secure, and scalable infrastructure solutions in mission-critical environments.

• Linux Infrastructure Engineering:
  Design, deploy, administer, and maintain enterprise Linux environments.
• Develop standardized operating system configurations and hardened baseline builds.
• Perform operating system upgrades, patch management, lifecycle maintenance, and performance optimization.
• Troubleshoot complex operating system, networking, and application issues.

• Design and implement advanced routing architectures utilizing:
  Policy-Based Routing (P )
• Multiple routing tables
• Route maps and traffic steering
• Source-based and destination-based routing
• Multi-homed network environments

• OSPF and static routing
• VLANs, LACP, and 802.1Q trunking
• Network name spaces
• VRFs
• NAT and firewall policies

• tcpdump
• Wireshark
• iproute2
• nftables
• iptables

• Tune Linux kernel parameters for:
  High-throughput networking
• Low-latency applications
• VPN gateway performance
• Large-scale concurrent connections

• TCP/IP stack performance
• Network buffer sizing
• IRQ balancing
• CPU affinity
• NUMA awareness
• Memory management

• perf
• sar
• vmstat
• iostat
• eBPF observability tools
• systemd performance metrics

• Design, deploy, and support secure VPN infrastructures using OpenVPN 2.6+
• Wire Guard
• IPSec

• Site-to-site VPNs
• Remote-access VPNs
• Hub-and-spoke architectures
• High-availability VPN clusters
• Dynamic routing across VPN overlays

• Troubleshooting encryption, routing, MTU, and performance issues
• Implementing modern cryptographic standards and VPN hardening best practices

• Develop and maintain Infrastructure-as-Code (IaC) solutions using Salt Stack
• Salts States
• Custom modules
• Orchestration workflows
• Automate system provisioning
• Configuration deployment
• Compliance enforcement
• VPN deployments
• Security baseline management
• Integrate Salt Stack with CI/CD pipelines and infrastructure monitoring platforms.

• Current Top-Secret Clearance with SCI Eligibility
• Minimum 5+ years of Linux Systems Engineering experience
• Minimum 3+ years of advanced Linux networking experience
• Minimum 3+ years of VPN engineering experience
• Minimum 3+ years of Salt Stack administration and automation experience

• Debian Linux
• Ubuntu Linux

• Policy-Based Routing (P )
• iproute2
• Routing tables and policy rules
• Linux bridges
• Bonding and teaming
• VLANs
• VRFs
• Network name spaces
• Dynamic routing protocols
• High-availability networking architectures

• Wire Guard
• OpenVPN 2.6+
• IPSec
• PKI and certificate management
• TLS authentication
• Multi-site VPN topologies
• VPN performance tuning

• Salt Stack
• Python
• Bash
• Git
• CI/CD workflows

• Experience supporting cloud platforms including:
  Google Cloud Platform (GCP)
• Amazon Web Services (AWS)
• Microsoft Azure
• Experience with…