Linux Systems Administrator – Active Security Clearance Required

Job description

Company Description Join us and make YOUR mark on the World! Lawrence Livermore National Laboratory (LLNL) has turned bold ideas into world-changing impact advancing science and technology to strengthen U.S. security and promote global stability. Our mission spans four critical national security areas nuclear deterrence, threat preparedness, energy security, and multi-domain defense empowering teams to take on the toughest challenges of today and tomorrow. With a culture built on innovation and operational excellence, LLNL is a place where your expertise can make a real impact. Job Description We're looking for a Linux Systems Administrator to provide advanced technical computer infrastructure support for Linux systems in a complex classified and unclassified computing environment. This role serves as a subject matter expert of Linux infrastructure, collaborates with customers and technical partners to define requirements and design computing solutions, and leads resolution of broad, complex system issues with long-term operational and security Impact. This position is in the Information Technology Operations (ITO) Division within the Computing Directorate. This position requires full-time on-site presence due to the nature of the work. This position will be filled at either level based on knowledge and related experience as assessed by the hiring team. Additional job responsibilities (outlined below) will be assigned if hired at the higher level. You will Provide Tier 3 support for Linux and storage systems, including incident resolution, root cause analysis, and long-term remediation on classified and unclassified networks. Architect, implement, and maintain diskless Linux environments, including PXE booting and related provisioning, identity and authentication services, such as FreeIPA or similar identity management solutions. Implement technical standards for Linux system hardening in alignment with security policies, STIGs, CIS benchmarks, and other security baseline standards. Monitor and optimize system performance, capacity planning, reliability engineering, and lifecycle management across Linux platforms. Create and maintain documentation for system architectures, procedures, runbooks, and troubleshooting guides. Collaborate with cybersecurity teams to support vulnerability management, incident response, and audit activities on both classified and unclassified systems. Perform installation of software releases, patches of operating systems and utilities, third-party products, and open-source software. Collaborate with management, customers, and team members to evaluate and recommend procurement of Linux hardware and software. Perform other duties as assigned. Additional job responsibilities, at the 393.2 level Act as an internal and external consultant in area of expertise, advising customers, peers, and management on Linux architecture, security, performance, and operational strategy. Implement highly advanced designs, produced in collaboration with data scientists and infrastructure architects. Lead advanced projects from concept through implementation, coordinating technical scope, milestones, risks, and customer communication. Provide technical direction on complex operational and project-based work to team members. Qualifications Active DOE Q clearance (or active Top Secret clearance) with the ability to obtain and maintain Sensitive Compartmented Information (SCI) access. Ability to successfully complete a lifestyle polygraph as required by the sponsoring program. Bachelor’s Degree in a Computer, Information Technology, or Engineering related field or equivalent combination of technical training and experience. Strong understanding of networking fundamentals (TCP/IP, DNS, routing, firewalls) as they relate to Linux systems. Broad and in-depth knowledge of and technical experience with Linux operating systems and related hardware. Experience supporting diskless Linux infrastructure, including PXE booting and other Linux network boot or diskless boot technologies. Experience applying security hardening standards and working in environments with strict security and compliance requirements. Experience with complex troubleshooting. Advanced ability to set priorities and independently resolve complex problems in a fast-paced environment. Experience patching operating systems and performing installation of software releases. Proficient interpersonal and communication (verbal and written) skills, with the ability to work independently and interact with a multi-disciplinary staff in a team environment. Additional qualifications at the 393.2 level Demonstrated experience architecting and deploying Linux infrastructure solutions for complex or high-security environments. Highly advanced knowledge of and significant technical experience with Linux operating systems, virtual environments, and/or related hardware. Significant experience working on cross-functional technical efforts involving systems, storage, network, and cybersecurity teams. Experience serving as a recognized subject matter expert, defining technical standards and best practices, and participating in technical reviews, audits, or customer engagements. Qualifications We Desire Broad and in-depth knowledge and technical expertise with enterprise support tools for management, patching, backup or software distribution, Linux operating systems and computer security concepts and practices, and computer network hardware/software protocols and principles. Experience with writing intermediate to advanced shell scripts. Experience with one or more of the following technologies: SPLUNK, Tenable Security Scanner, Nessus, Puppet, Ansible or equivalent, Nagios, RHN Satellite, PKI authentications, Active Directory, Scripting, GIT, BIND, DNS, Perl, CSH/BASH, Docker, Podman, and other container technologies. Pay Range $125,310 - $185,640 annually $125,310 - $153,444 annually for 393.1 $151,620 - $185,640 annually for 393.2 Additional Information #LI-Onsite Position Information This is a Career Indefinite position, open to Lab employees and external candidates. Why Lawrence Livermore National Laboratory? Included in 2026 Best Places to Work by Glassdoor! Flexible Benefits Package 401(k) Relocation Assistance Education Reimbursement Program Flexible schedules (*depending on project needs) Our values - visit https://www.llnl.gov/inclusion/our-values Security Clearance This position requires an active Department of Energy (DOE) Q-level clearance or active Top Secret clearance issued by another U.S. government agency at time of hire. Also, you must have the ability to obtain and maintain Sensitive Compartmented Information (SCI) access. Please note that your current active Q or Top Secret clearance with DOE or another agency does not guarantee DOE SCI access approval; if you are denied access, you may be subject to reinvestigation of your existing Q or Top Secret Clearance. Pre-Employment Drug Test External applicant(s) selected for this position must pass a post-offer, pre-employment drug test. This includes testing for use of marijuana as Federal Law applies to us as a Federal Contractor. Wireless and Medical Devices Per the Department of Energy (DOE), Lawrence Livermore National Laboratory must meet certain restrictions with the use and/or possession of mobile devices in Limited Areas. Depending on your job duties, you may be required to work in a Limited Area where you are not permitted to have a personal and/or laboratory mobile device in your possession. This includes, but not limited to cell phones, tablets, fitness devices, wireless headphones, and other Bluetooth/wireless enabled devices. If you use a medical device, which pairs with a mobile device, you must still follow the rules concerning the mobile device in individual sections within Limited Areas. Sensitive Compartmented Information Facilities require separate approval. Hearing aids without wireless capabilities or wireless that has been disabled are allowed in Limited Areas, Secure Space and Transit/Buffer Space within buildings. How to identify fake job advertisements Please be aware of recruitment scams where people or entities are misusing the name of Lawrence Livermore National Laboratory (LLNL) to post fake job advertisements. LLNL never extends an offer without a personal interview and will never charge a fee for joining our company. All current job openings are displayed on the Career Page under “Find Your Job” of our website. If you have encountered a job posting or have been approached with a job offer that you suspect may be fraudulent, we strongly recommend you do not respond. To learn more about recruitment scams: https://www.llnl.gov/sites/www/files/2023-05/LLNL-Job-Fraud-Statement-Updated-4.26.23.pdf Equal Employment Opportunity We are an equal opportunity employer that is committed to providing all with a work environment free of discrimination and harassment. All qualified applicants will receive consideration for employment without regard to race, color, religion, marital status, national origin, ancestry, sex, sexual orientation, gender identity, disability, medical condition, pregnancy, protected veteran status, age, citizenship, or any other characteristic protected by applicable laws. Reasonable Accommodation Our goal is to create an accessible and inclusive experience for all candidates applying and interviewing at the Laboratory. If you need a reasonable accommodation during the application or the recruiting process, please use our online form to submit a request. California Privacy Notice The California Consumer Privacy Act (CCPA) grants privacy rights to all California residents. The law also entitles job applicants, employees, and non-employee workers to be notified of what personal information LLNL collects and for what purpose. The Employee Privacy Notice can be accessed here . Videos To Watch