Job description

cFocus Software seeks a Linux/Kubernetes Automation Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance. Qualifications: • Active TS/SCI clearance • B.S. Computer Science, Information Technology, or a related field • Experience administering Linux services, permissions, networking, storage, and patches. • Experience operating Kubernetes and container workloads, including deployments, cluster health, upgrades, access controls, and troubleshooting. • Ability to write maintainable scripts and provision infrastructure with IaC/CaC tools. • Experience with source control, CI/CD pipelines, automated validation, deployment workflows, and configuration change management. • Working knowledge of secure baselines, STIG implementation, vulnerability remediation, and evidence supporting RMF and ATO processes. • Experience with platform monitoring, logging, alerting, and capacity management. • Ability to work across on-premises, cloud, and hybrid environments and coordinate dependencies with multidisciplinary technical teams. • Clear technical writing and communication skills; ability to maintain runbooks and resolve incidents Duties: • Provision, configure, patch, and troubleshoot Linux servers and operating system services using approved baselines and repeatable automation. • Automate Kubernetes cluster and workload deployment, configuration, upgrades, and lifecycle tasks where these platforms are approved for use. • Develop and maintain Infrastructure as Code (IaC), Configuration as Code (CaC), and scripts for consistent deployment across on-premises, cloud, and hybrid environments. • Create version-controlled CI/CD pipeline artifacts for infrastructure and platform changes, incorporating testing, security guardrails, and deployment traceability. • Automate application of Security Technical Implementation Guides (STIGs) and Government-specified cybersecurity controls; validate configuration compliance. • Implement approved platform access controls, workload isolation, secrets handling, and configuration practices consistent with authorization boundaries. • Configure logging, monitoring, observability, and alerting to identify platform availability, performance, capacity, and security issues. • Integrate vulnerability scanning into pipelines and coordinate remediation, patching, and configuration corrections with cybersecurity and operations teams. • Test infrastructure changes and container deployments; obtain required Government review and authorization before production implementation. • Maintain configuration baselines and inventory records; document changes under the approved Configuration Management Plan. • Troubleshoot cluster, node, workload, storage, and connectivity issues in coordination with network, cloud, application, and database teams. • Support capacity planning, recovery procedures, and service continuity for assigned Linux and container infrastructure. • Generate and maintain operational scripts, system configurations, technical documentation, and live-environment inputs for network diagrams. • Provide technical evidence for Risk Management Framework (RMF), Authority to Operate (ATO), continuous ATO, and continuous monitoring activities. • Support incident response with logs and technical data, implement approved corrective actions, and maintain operational runbooks.

Requirements

Must-haves

Qualifications: • Active TS/SCI clearance
B.S. Computer Science, Information Technology, or a related field
Experience administering Linux services, permissions, networking, storage, and patches.
Experience operating Kubernetes and container workloads, including deployments, cluster health, upgrades, access controls, and troubleshooting.
Ability to write maintainable scripts and provision infrastructure with IaC/CaC tools.
Experience with source control, CI/CD pipelines, automated validation, deployment workflows, and configuration change management.
Working knowledge of secure baselines, STIG implementation, vulnerability remediation, and evidence supporting RMF and ATO processes.
Experience with platform monitoring, logging, alerting, and capacity management.
Ability to work across on-premises, cloud, and hybrid environments and coordinate dependencies with multidisciplinary technical teams.
Clear technical writing and communication skills; ability to maintain runbooks and resolve incidents
Duties: • Provision, configure, patch, and troubleshoot Linux servers and operating system services using approved baselines and repeatable automation.
Automate Kubernetes cluster and workload deployment, configuration, upgrades, and lifecycle tasks where these platforms are approved for use.
Develop and maintain Infrastructure as Code (IaC), Configuration as Code (CaC), and scripts for consistent deployment across on-premises, cloud, and hybrid environments.
Create version-controlled CI/CD pipeline artifacts for infrastructure and platform changes, incorporating testing, security guardrails, and deployment traceability.
Automate application of Security Technical Implementation Guides (STIGs) and Government-specified cybersecurity controls; validate configuration compliance.
Implement approved platform access controls, workload isolation, secrets handling, and configuration practices consistent with authorization boundaries.
Configure logging, monitoring, observability, and alerting to identify platform availability, performance, capacity, and security issues.
Integrate vulnerability scanning into pipelines and coordinate remediation, patching, and configuration corrections with cybersecurity and operations teams.
Test infrastructure changes and container deployments; obtain required Government review and authorization before production implementation.
Maintain configuration baselines and inventory records; document changes under the approved Configuration Management Plan.
Troubleshoot cluster, node, workload, storage, and connectivity issues in coordination with network, cloud, application, and database teams.
Support capacity planning, recovery procedures, and service continuity for assigned Linux and container infrastructure.
Generate and maintain operational scripts, system configurations, technical documentation, and live-environment inputs for network diagrams.
Provide technical evidence for Risk Management Framework (RMF), Authority to Operate (ATO), continuous ATO, and continuous monitoring activities.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

kubernetesci/cd

Platform: jazzhr
Effort: medium

Benefits

Benefits detected in the listing.

Vision