Principal Linux Engineer — Rockville, MD

ceSs3 9JyqpBCQM is looking for a Principal Linux Engineer to join a government integrator based out of Rockville, MD.

Essential Duties of the Principal Linux Engineer:

• Serve as technical lead and final escalation point for Linux support, owning triage, root-cause analysis, and permanent corrective action for complex incidents

• Own the architecture, build standards, and lifecycle of the Linux estate (RHEL and derivatives), including capacity planning and hardware/OS refresh

• Define and enforce configuration management and infrastructure-as-code practices using Ansible, Terraform, Git, and CI/CD pipelines

• Provide engineering and support ownership for the Debian Linux OS distributed as part of company products, including image definition, kernel and device-tree configuration, package selection, hardening, and release qualification

Qualifications of the Principal Linux Engineer:

• Bachelor's degree in a STEM fiel

• 10+years of progressive Linux systems administration/engineering experience in production data center environments, that includes a minimum of three years in a lead, principal, or equivalent senior technical capacity

• Debian 13 ("trixie") expertise

• Expert knowledge of installation and configuration procedures of physical and virtual servers

• Expert knowledge of patch and errata management at scale (Red Hat Satellite, Foreman, or equivalent), and backup and restore operations

Compensation for the Principal Linux Engineer:

• $130,000-$150,000+ (based on experience)

• Comprehensive benefit package; Cigna Medical, Cigna Dental, Vision, 401k w/ ADP, PTO, paid holidays, sick Leave as required by law

This job opens for applications on 11/13/26. Applications for this job will be accepted for at least 30 days from the posting date

Debian 13, Trixie, Linux Engineering, Principal Linux Engineer, Senior Linux Architect, Enterprise Linux Administration, Debian Package Management, APT, APT Pinning, dpkg, unattended-upgrades, Debian Repository Management, Local Package Mirrors, Aptly, Reprepro, Debian Backports, Debian Security Repository, Debian Stable Lifecycle, Kernel Management, Linux Kernel Tuning, Systemd, Journald, Systemctl, cgroups, Namespaces, PAM, NSS, LDAP Integration, SSSD, Kerberos, Active Directory Integration, OpenSSH, SSH Hardening, SELinux Awareness, AppArmor, Debian Hardening, CIS Benchmarks, DISA STIG, Auditd, AIDE, Fail2Ban, OS Security Compliance, Vulnerability Remediation, CVE Management, Security Baselines, Package Signing, GPG Keys, Secure Boot, TPM Integration, UEFI Management, FIPS Compliance, Linux Patch Management, OS Lifecycle Management, Platform Engineering, Infrastructure Engineering, Enterprise Automation, Configuration Management, Infrastructure as Code, Immutable Infrastructure, GitOps, DevOps, Site Reliability Engineering, SRE, Platform Reliability, Service Availability, High Availability Clustering, Disaster Recovery, Business Continuity, Capacity Planning, Performance Tuning, System Monitoring, Root Cause Analysis, Incident Response, Change Management, Release Management, Configuration Drift Detection, System Auditing, Technical Leadership, Enterprise Architecture, Linux Governance, Operational Excellence, Ansible, Ansible Core, Ansible Automation Platform, Red Hat Ansible Automation Platform, AWX, Ansible Playbooks, Ansible Roles, Ansible Collections, Ansible Inventory, Dynamic Inventory, Ansible Vault, Ansible Galaxy, Playbook Development, Infrastructure Orchestration, Configuration Enforcement, Desired State Configuration, Agentless Automation, YAML Development, Jinja2 Templates, Idempotency, Fact Gathering, Ansible Facts, Handlers, Tags, Blocks, Rescue Tasks, Custom Modules, Collections Development, Playbook Optimization, Parallel Execution, Orchestration Workflows, CI/CD Integration, GitLab CI, GitHub Actions, Azure DevOps Pipelines, Jenkins Automation, Molecule Testing, Ansible Lint, Automation Governance, Automation Frameworks, Infrastructure Provisioning, Cloud Automation, Hybrid Infrastructure Management, Fleet Management, Linux Provisioning, Compliance Automation, Security Automation, Automated Remediation, Configuration Validation, Zero-Touch Provisioning, Bare Metal Automation, VM Automation, Container Automation, Container Host Management, Docker Administration, Podman, Kubernetes Nodes, K3s, OpenShift Nodes, Cluster Automation, Secret Management, HashiCorp Vault Integration, Enterprise Automation Strategy, Automation Center of Excellence, Automation Scaling, Errata Management, Security Errata, Bug Fix Errata, Enhancement Errata, Patch Validation, Patch Governance, Patch Compliance, Vulnerability Assessment, Vulnerability Management, Security Advisory Review, Debian Security Advisories, DSA Tracking, CVE Assessment, CVSS Scoring, Risk-Based Patch Prioritization, Remediation Workflows, Patch Testing, Pre-Production Validation, Maintenance Windows, Patch Rollback, Package Dependency Analysis, Package Version Control, System Updates, Compliance Reporting, Asset Management, Endpoint Compliance, Automated Patch Deployment, Vulnerability Scanning, Nessus, OpenVAS, Greenbone, Qualys, Rapid7 InsightVM, Tenable Security Center, Security Operations, SOC Integration, Compliance Auditing, NIST 800-53, NIST CSF, ISO 27001, CIS Controls, Security Metrics, Technical Risk Reduction, Enterprise Risk Management, Log Aggregation, Elastic Stack, Elasticsearch, Kibana, Logstash, Prometheus, Grafana, Alertmanager, Zabbix, Nagios, Splunk Integration, Observability, Telemetry Collection, Event Correlation, Linux Fleet Operations, Configuration Compliance, Patch Compliance Reporting, Service Health Monitoring, Infrastructure Standardization, Technical Debt Reduction, Systems Integration, Change Advisory Board, CAB Process, Enterprise Linux Standards, Architecture Reviews, Linux Modernization, Enterprise Platform Strategy, Operational Readiness, Infrastructure Roadmaps, Enterprise Supportability, Reliability Engineering, Capacity Forecasting, Multi-Tier Architecture, API Integration, REST APIs, Automation APIs, Secure Configuration Management, Enterprise Patch Strategy, Lifecycle Governance, Debian Infrastructure, Repository Synchronization, Mirror Management, Update Automation, Security Posture Management, Enterprise Linux Operations, Continuous Compliance, Enterprise Automation Architecture, Linux Platform Engineering, Systems Reliability Leadership, Infrastructure Modernization, Enterprise Service Management, ITIL Change Control, ITIL Operations, Continuous Improvement, Enterprise Linux Security, DevSecOps, Secure Automation, Infrastructure Resilience, Enterprise Patch Orchestration, Fleet Compliance Management, Operating System Governance, Linux Enterprise Architecture, Cross-Platform Automation, Hybrid Cloud Linux Administration, Configuration Baselines, System Integrity Monitoring, Production Linux Support, Large Scale Linux Environments, Enterprise Systems Engineering, Linux Standards Development, Automated Compliance Enforcement, Vulnerability Remediation Tracking, Enterprise Configuration Management Database, CMDB Integration, ServiceNow Integration, Enterprise Operations Engineering