SELinux SME

M9 Solutions is seeking an SELinux SME to work on-site in support of a government contract for a client located in Washington, DC. An active TS/SCI with CI Poly clearance is required.

Responsibilities

• Develops, configures, and maintains integrated Red Hat Enterprise Linux/SE Linux Mandatory Access Control (MAC) configurations across multiple systems, networks, and NAS storage based on the current configuration approach.
• Works closely with the Dev/Sec/Ops automation development team to deploy RHEL SE Linux MLS configurations based on site-specific input files.
• Works closely with the security team to ensure RMF, RTB, and other security controls are met and fully documented.
• Manages impacts to system HPC performance, ensuring minimal impacts.
• Applies best practices in software engineering, delivering projects on time and with excellent quality.
• Provides support to staff and end users to resolve issues in deployed configurations.
• Modifies existing software to correct errors and/or improve performance.
• Ensures InfiniBand high-speed fabrics operate correctly with MAC labeling.
• Ensures MLS networking meets controls requirements.

Required Skills and Qualifications

• TS/SCI with CI Poly clearance.
• Bachelor's degree in Computer Science or an AIS degree required, plus 10 years of experience.
• A minimum of 5 years of experience developing system software in heterogeneous, multi-platform environments.
• Proficiency with all aspects of SE Linux configuration, policy, MAC labeling, Security contexts, debugging policy issues, MLS FreeIPA, MLS Ethernet interface networking, developing least access policies, etc.
• Proficiency in Bourne/Bash and Expect scripting.
• Proficiency in debugging issues with the Linux kernel, including examining source code, system logs, and using tools such as crash and systemtap.
• Experience with managing Satellite repositories to apply patches and build custom kernels as required to implement functionality or address security concerns.
• Familiarity with automating approaches to configuring and maintaining (e.g. patching) systems using Ansible and Satellite Server.
• Understanding and experience working with identity management systems, including LDAP and token-based authentication systems.
• Excellent written and oral communication and people skills; excellent time management and organizational skills.
• Demonstrated ability to analyze, debug, and maintain the integrity of an existing scripting base.
• Demonstrated organization skills to balance and prioritize work, and the ability to multitask.
• Demonstrated communication skills to communicate with support personnel, customers, and managers.

Preferred Skills and Qualifications

• Familiarity with High Performance Computing (HPC) environment and related technologies.
• Familiarity with Infiniband or Omni-Path high-speed fabrics, including subnet management, IPoIB and/or IPoOPA mechanisms, fabric topology, and health monitoring and integration with MPI.
• Experience with Lustre, NFS, and other direct-attach file systems.
• Experience with Ethernet networking.
• Experience with RDMA communications (InfiniBand and OmniPath).
• Knowledge of Python, Perl, Korn, and other shell scripting.
• Experience with revision control software (CVS, SVN, Git).