What are the responsibilities and job description for the USAF - Linux/Kubernetes Automation Engineer position at cFocus Software Incorporated?
cFocus Software seeks a Linux/Kubernetes Automation Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience administering Linux services, permissions, networking, storage, and patches.
- Experience operating Kubernetes and container workloads, including deployments, cluster health, upgrades, access controls, and troubleshooting.
- Ability to write maintainable scripts and provision infrastructure with IaC/CaC tools.
- Experience with source control, CI/CD pipelines, automated validation, deployment workflows, and configuration change management.
- Working knowledge of secure baselines, STIG implementation, vulnerability remediation, and evidence supporting RMF and ATO processes.
- Experience with platform monitoring, logging, alerting, and capacity management.
- Ability to work across on-premises, cloud, and hybrid environments and coordinate dependencies with multidisciplinary technical teams.
- Clear technical writing and communication skills; ability to maintain runbooks and resolve incidents
- Provision, configure, patch, and troubleshoot Linux servers and operating system services using approved baselines and repeatable automation.
- Automate Kubernetes cluster and workload deployment, configuration, upgrades, and lifecycle tasks where these platforms are approved for use.
- Develop and maintain Infrastructure as Code (IaC), Configuration as Code (CaC), and scripts for consistent deployment across on-premises, cloud, and hybrid environments.
- Create version-controlled CI/CD pipeline artifacts for infrastructure and platform changes, incorporating testing, security guardrails, and deployment traceability.
- Automate application of Security Technical Implementation Guides (STIGs) and Government-specified cybersecurity controls; validate configuration compliance.
- Implement approved platform access controls, workload isolation, secrets handling, and configuration practices consistent with authorization boundaries.
- Configure logging, monitoring, observability, and alerting to identify platform availability, performance, capacity, and security issues.
- Integrate vulnerability scanning into pipelines and coordinate remediation, patching, and configuration corrections with cybersecurity and operations teams.
- Test infrastructure changes and container deployments; obtain required Government review and authorization before production implementation.
- Maintain configuration baselines and inventory records; document changes under the approved Configuration Management Plan.
- Troubleshoot cluster, node, workload, storage, and connectivity issues in coordination with network, cloud, application, and database teams.
- Support capacity planning, recovery procedures, and service continuity for assigned Linux and container infrastructure.
- Generate and maintain operational scripts, system configurations, technical documentation, and live-environment inputs for network diagrams.
- Provide technical evidence for Risk Management Framework (RMF), Authority to Operate (ATO), continuous ATO, and continuous monitoring activities.
- Support incident response with logs and technical data, implement approved corrective actions, and maintain operational runbooks.