Linux BSP contractor

Responsibilities of the role include:

• Experience in implementing solutions to real security problems. Experience with system architecture, design, test and implementation.
• Ability to identify security vulnerabilities in the system components or network devices and provide innovative solutions.
• Provide technical leadership for the integration of requirements, design, and technology.
• Experience working with Secure Linux based servers, troubleshooting Linux boot issues and providing fixes as required.
• Produce reports and documents in support of system requirements and security certifications, write/contribute to white papers.
• Intimately familiar with Linux OS security processes, issues, and challenges.
• Be a leader and mentor to junior engineers.
• Past performance within the DoD, or a similarly regulated environment
• Experience with the RMF process

Technical requirements of the role

• Experience leading a team doing SELinux Policy development
• Experience troubleshooting other SELinux policies
• Understanding of RefPol and its limitations
• Experience doing formal policy analysis
• Solid understanding of the TCP/IP stack
• Experience with packet analysis tools (such as Wireshark) and analyzing Protocol Data Units (PDUs)
• Experience with common Linux scripting / shell utilities
• Bash/sh / Python / Perl / Awk / Sed, etc
• Experience with the following tracing/debugging tools:
• Strace, Ltrace, Ftrace, gdb, etc
• Familiar with technologies to enable applications to run with least privilege, and avoid full root permission, including Linux Capabilities (getcap/setcap), seccomp, containers, etc
• Experience with managing and securing Linux Containers (LXC), Docker Containers
• Experience working within virtualized environments - kvm / qemu, libvirt, VirtualBox, etc
• Familiar with enhanced Linux security hardening techniques -cgroups, namespaces, seccomp, capabilities, SELinux, etc
• Experience with Atlassian (JIRA, Confluence).
• Experience with tools such as Bitbake, Yocto, Linux, RTOS VxWorks
• Experience with preempt-rt, or other preemptable Linux solutions
• Performs other duties as assigned.