ATC Linux Security Engineer: LDAP, Logs & Hardening

LDAP Directory Server Implementation: Design, deploy, and maintain LDAP based directory services (e.g., OpenLDAP). Integrate Linux systems, applications, and security tools with enterprise authentication directories. Configure secure communication (TLS), replication, schema design, and access control policies. Ensure directory service scalability, high availability, and compliance with security best practices. Development of Syslog Aggregation Service: Architect and implement a centralized syslog aggregation environment (e.g., rsyslog, syslog ng, Elastic Stack, Graylog). Develop and maintain ingestion pipelines, log normalization, and storage strategies. Implement log integrity controls and access management to meet audit and compliance requirements. Monitor log infrastructure performance and ensure reliable log collection across all VCS system assets. Linux Server Administration: Manage, configure, and troubleshoot Linux server platforms (a. o. Oracle Linux 9). Perform system provisioning, patching, updates, and lifecycle management. Implement automation (Ansible, Bash, Python) to improve system reliability and reduce manual tasks. Monitor system performance, availability, and security across production and staging environments. Linux Cybersecurity Penetration Testing Conduct penetration tests and security assessments of Linux systems, services, and applications. Identify vulnerabilities, misconfigurations, and privilege escalations through manual and automated testing. Work with engineering and operations teams to remediate findings and improve system security posture. Prepare detailed reports, risk assessments, and technical recommendations. Hardening of Linux Services (DISA STIG): Apply DISA STIG benchmarks and hardening requirements to Linux systems and applications. Develop and maintain compliance baselines using automated tools (e.g., OpenSCAP, Ansible STIG roles). Perform regular compliance scans and deliver remediation plans. Document hardening configurations, exceptions, and system security plans. #J-18808-Ljbffr