Senior Network & Linux Security Engineer

Alpha Origin is a profitable, bootstrapped, independent engineering firm for critical infrastructure. We help operators find where their systems are vulnerable to compromise or failure, then engineer and test the fixes.

Our work spans hyperscale and AI data centers, financial services, telecom, and energy. Our team brings experience from Special Operations, the intelligence community, national laboratories, and infrastructure operations. We work across vendors and technologies, with the freedom to recommend what a customer should keep, change, buy, or build.

You will design, build, harden, and secure the networks and Linux infrastructure behind our customer engagements and internal platforms. You will lead enterprise network implementations, evaluate unfamiliar environments independently, and make practical recommendations that customers can act on.

This is a hands-on senior engineering role with responsibility from architecture through implementation and validation. You should understand why a configuration works, how it can fail, and how to verify a change safely in a production environment.

You will work directly with AO's founders, engineers, offensive security team, and customers. You will also help shape what we build next by turning recurring customer problems into better tools, services, and engineering capabilities.

• Build, host, and maintain applications and services in hardened Linux environments.

• Implement and maintain host and network controls, including firewalls, access control lists, proxies, and SELinux policies.

• Design and operate routed and switched networks, including OSPF, BGP, VLAN segmentation, and inter-site connectivity.

• Configure, audit, and troubleshoot networks, firewalls, and routing across multiple vendors. Adapt to the customer's environment and make sound decisions about what to retain, improve, or replace.

• Lead architecture and configuration reviews against applicable CIS benchmarks, NIST guidance, and vendor hardening recommendations. Present findings and recommendations directly to technical and executive stakeholders.

• Prioritize remediation by risk reduction, cost, implementation effort, and operational impact. Make the tradeoffs explicit and identify improvements that work within the customer's budget and existing infrastructure.

• Work with engineering and offensive security teams to validate controls under realistic attack scenarios, within agreed scope and operating constraints.

• Produce clear architecture diagrams, configurations, findings, implementation plans, and runbooks that customer teams can use and maintain.

• Identify recurring gaps across engagements and propose new tools, products, or service offerings, with a clear problem statement and a practical path to a prototype.

Extensive hands-on experience in Linux engineering and enterprise networking, typically gained over 15+ years, with current responsibility for production environments.

• Deep experience with application hosting, service hardening, and system administration at scale.

• Strong experience with host firewalls, network access control lists, and proxy configuration.

• Experience writing, debugging, and maintaining SELinux policies in enforcing mode.

• Strong routing and switching fundamentals, including OSPF, BGP, VLANs, trunking, and Spanning Tree Protocol.

• Hands-on experience configuring and troubleshooting Cisco switches and firewalls, Fortinet Forti Gate firewalls, and Palo Alto Networks firewalls.

• The ability to work across vendors and learn unfamiliar technologies without depending on one product ecosystem.

• The ability to enter an unfamiliar customer environment, establish the facts, identify consequential weaknesses, and make a defensible recommendation.

• Confidence communicating difficult findings respectfully and directly, including to senior stakeholders.

• A track record of recommending practical, budget-aware improvements and recognizing when a targeted change is more useful than replacing an entire system.

• Clear written and verbal communication. You can explain a technical finding, its consequences, and the proposed investment to both an engineer and a CFO.

• The ability to own work independently, follow through on commitments, and know when to bring in another specialist.

• A bachelor's or master's degree in Computer Science or a closely related field. Equivalent practical experience will be…