Security Engineer (Linux Systems Engineer) at fa-etbx-saasfaprod1 in Pensacola, FL, United States

Job description

• Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.
• At Navy Federal, we are passionate about our members--they are our mission. We're looking for a talented, experienced systems engineer professional to join our growing Advanced Cyber Initiatives team as a cybersecurity engineer with a job role in Linux systems engineering.
• The Advanced Cyber Initiatives is looking for a driven professional to help advance the program's strategic vision. You will also have the opportunity to work closely with the Platform Engineering manager and lead the collaboration with Information Security teams for deployment & maintenance of cybersecurity enterprise applications.

Responsibilities

• Support NFCU in the maintenance of IT and enterprise class security applications and systems
• Troubleshooting Linux and/or Windows servers operating systems and predominately the enterprise applications running on those servers
• Deploying, optimizing, and maintaining enterprise security applications, on prem, SaaS, and IaaS
• Remediate vulnerabilities on Windows and/or Linux systems, ensure the stability and sustainability of supported platforms by monitoring, maintaining, patching, and administering all aspects of those systems
• Deploying and configuring SaaS enterprise applications
• Deploying AI, Agentic solutions, and ML/LLM’s solutions to handle modern security threats
• Contribute to and maintain internal engineering documentation (e.g., tool documentation, lessons learned, procedures, status updates, etc.)
• Renewing and updating TLS certificates on appliances and enterprise applications
• Responding to audit and enterprise hardening requests
• Updating stories and subtasks work in flight
• Update/speak in Daily Operations briefings
• Daily ticket queue monitoring, for incidents and work ingestion and assigning as required
• Responsible for quarterly access reviews
• On call and after-hours rotation
• Perform other duties as assigned

Requirements

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline, or equivalent combination of education and experience.
• Extensive hands on experience of automating/scripting of server configurations/deployments/etc
• Extensive hands on experience patching and upgrading Linux and Windows based operating systems, packages, and applications
• Extensive hands on experience with enterprise high security systems engineering related or similar role required (Understanding of enterprise best practices for security and hardening with a focus on PCI-DSS/NCUA ideal)
• Experience with AI, Agentic solutions, and ML/LLM’s in practice and/or deployment of technology.
• Experience scripting in one of the following: Ansible, Python, Bash, PowerShell, Ruby, etc to automate routine tasks
• Experience & thorough understanding of SSO/SAML/OAUTH integration of enterprise applications
• Strong understanding and ability to troubleshoot various common Linux operating systems (Centos, Red hat, Ubuntu, and/or Cisco derivative OS’s) OR Strong understanding and ability to troubleshoot various Windows server operating systems
• Experience working in environments with infrastructure management processes such as change management, problem management, configuration management and project management
• Hands on Experience in Agile specifically Kanban workflow.
• Experience using/integrating tools with SIEM’s
• Experience with large enterprise processes and working a siloed environment where tickets/coordination/detailed change management and control processes are required
• Knowledge of core network, firewall, routing, switching, load balancing, and proxy principles and troubleshooting related issues from a server deployment/maintenance perspective
• Experience with Cybersecurity applications
• Linux based Java/Tomcat COTS web applications in a clustered environment
• Windows .net based IIS COTS applications in a clustered environment
• Physical or Virtual appliances with limited linux based OS CLI interfaces
• Ability to read/understand a packet capture
• Experience using Jira/Confluence

Skills

Required

• SSO/SAML/OAUTH integration
• Agile specifically Kanban workflow
• SIEM integration

Preferred

• Cybersecurity applications
• Packet capture analysis
• Jira/Confluence

Benefits

• $99,400 - $155,850 annually