Senior Linux Security Architect - Remote Position

About the Role

We are hiring a Senior Linux Security Architect to join our team remotely. In this role, you will be the primary designer and guardian of our hardened Linux infrastructure. As a Senior Linux Security Architect remote position, you will not only patch servers but also lead the architectural strategy to ensure our Linux environments are resilient against modern threats.

What You'll Do

• Design and implement secure-by-default Linux builds (RHEL, Ubuntu, Alpine) utilizing Mandatory Access Control (MAC) like SELinux or AppArmor.
• Lead the architecture of enterprise Key Management Systems (KMS) and manage the lifecycle of SSH keys, TLS certificates, and API secrets using tools like HashiCorp Vault, AWS KMS, and Hardware Security Modules (HSMs).
• Develop automated hardening scripts (Ansible/Terraform) based on CIS Benchmarks and STIGs to ensure compliance.
• Integrate Linux ecosystems with centralized identity providers (LDAP, FreeIPA, Active Directory) using SSSD and PAM configurations.
• Conduct deep-dive security reviews of system architectures to identify vulnerabilities in data-at-rest and data-in-transit encryption.

Requirements

• 8+ years of experience in Linux Systems Engineering with at least 4 years focused purely on Security Architecture.
• Certifications such as CISSP, CISM, or Linux-specific security certifications (e.g., Red Hat Certified Specialist in Security).
• Proven project experience in migrating legacy environments to a centralized, rotated, and audited Key Management System.

Nice to Have

• Experience with cloud platforms like AWS.
• Familiarity with Terraform and Ansible for automation.
• Strong understanding of cryptographic principles and practices.

What We Offer

• Competitive salary ranging from $140,000 to $180,000 per year.
• Flexible work arrangements with a fully remote setup.
• Opportunities for professional development and certifications.
• Work with a team of experienced professionals in a Fortune 500 environment.
• Engage in meaningful projects that enhance security across our infrastructure.