SE Linux Based MLS SME Linux Administrator

SE Linux Based MLS SME Linux AdministratorLocation: Springfield, VA Clearance: Must have active TS/SCI with CI Poly to apply Program Description: Cohere Technology provides Red Hat Enterprise Linux (RHEL) based High Performance Computing (HPC) services through the HPC lifecycle for computational requirements, architecture, acquisition, and operations to federal government customers. Our employees embrace automation, innovation, and are committed to a culture of continuous, standards-driven process improvement and assimilation of industry best practices. CSCF provides key supercomputing capabilities for solving important problems in science and technology. CSCF is involved in efforts to develop scientific software and libraries for HPC platforms. The tasks involve working on cutting edge HPC technologies to ensure that scientists and engineers will be able to fully utilize modern HPC systems. We are seeking a SE Linux Based MLS Linux Administrator SME for our enterprise MLS configuration team which includes our Centralized SuperComputing Facility (CSCF) High Performance Computing and other contracts.Summary You will be an active member of the Enterprise MLS team working many and varied Red Hat Enterprise Linux (RHEL) SE Linux based configuration, policy, and development projects including full automation of configuration deployments. The Enterprise MLS team is responsible for developing all aspects of secure, enterprise level MLS configurations through deployment, training, and problem solutions for deployed configurations. You will work closely with the contract Chief Architect, Dev/Sec/Ops SME/Lead and their teams to ensure the Enterprise MLS product meets requirements and fully support each program's needs. An individual should have demonstrated his/her problem-solving ability. We are looking for an individual with a majority of the experience listed.Duties and Responsibilities:Develops, configures, and maintains integrated Red Hat Enterprise Linux/SE Linux Mandatory Access Control (MAC) configurations across multiple systems, networks, and NAS storage based on current LM configuration approachWork closely with the Dev/Sec/Ops automation development team to deploy RHEL SE Linux MLS configurations based on site specific input filesWork closely with the security team to ensure RMF, RTB, and other security controls are met and fully documentedManage impacts to system HPC performance ensuring minimal impactsApply best practices in software engineering, delivering projects on time and with excellent qualityProvide support to staff and end users to resolve issues in deployed configurationsModify existing software to correct errors and/or improve performanceEnsure InfiniBand high speed fabrics operate correctly with MAC labelingEnsure MLS networking meets controls requirementsEducation/Requirements:Bachelor's degree in Computer Science or an AIS degree required plus 10 years of experienceA minimum of 5 years of experience developing system software in heterogeneous, multi-platform environmentsProficiency with all aspects of SE Linux configuration, policy, MAC labeling, Security contexts, debugging policy issues, MLS FreeIPA, MLS Ethernet interface networking, developing least access policies, etc.Proficiency in Bourne/Bash and Expect scriptingProficiency in debugging issues with the Linux kernel including examining source code, system logs, and using tools such a crash and systemtap.Experience with managing Satellite repositories to apply patches and build custom kernels as required to implement functionality or address security concernsFamiliarity with automating approaches to configuring and maintaining (e.g. patching) systems using Ansible and Satellite ServerUnderstanding and experience working with identity management systems including LDAP and token-based authentication systemsExcellent written and oral communication and people skills; excellent time management and organizational skillsDemonstrated ability to analyze, debug and maintain the integrity of an existing scripting baseDemonstrated organization skills to balance and prioritize work, and ability to multitaskDemonstrated communication skills to communicate with support personnel, customer, and managersPreferred Skills:Familiarity with High Performance Computing (HPC) environment and related technologiesFamiliarity with Infiniband or Omni-Path high speed fabrics, including subnet management, IPoIB and/or IPoOPA mechanisms, fabric topology and health monitoring and integration with MPIExperience with Lustre, NFS, and other direct attach file systemsExperience with Ethernet networkingExperience with RDMA communications (InfiniBand and OmniPath)Knowledge of Python, Perl, Korn, and other shell scriptingExperience with revision control software (CVS, SVN, Git)