Linux Security Engineer - New York City, NY Hybrid
Job Description
Job Description
Hello There,
My name is Himanshu Sharma, and I serve as the Recruitment Lead at Kanak-IT INC. I am reaching out to share an excellent career opportunity for the role of Linux Security Engineer with our esteemed client. If you are interested then please share your updated resume at Himanshu01@kanakits.com .
Job Description
Position : Linux Security Engineer (Linux / Ansible / LXD)
Location : New York City, NY Hybrid
Duration : Long term contract
Interview : Final round could be onsite
Focus:
Design and build a reproducible, secure compute lab environment to support future SRHG custody site deployments. Deliver hardened, automated Linux builds that can be cloned and deployed consistently across physical custody sites.
Core Skills:
- Expert in Linux (Ubuntu) administration and OS-level hardening
- Proficient in Ansible (roles, playbooks, idempotent automation)
- Experienced with LXD for containerized lab environments
- Strong knowledge of GitLab and GitLab CI/CD pipelines (workflow automation, runners, artifacts)
- Experience building secure, reproducible system images (kickstart, preseed, or similar)
Security Requirements:
- Apply CIS Ubuntu benchmarks and OS hardening best practices
- Enforce disk encryption (LUKS or equivalent) and secure boot configurations
- Implement auditd and centralized logging
- Lock down SSH, sudo, and privileged access paths
- Integrate key management, secrets handling, and package signing validation
- Ensure all automation is reproducible, testable, and version-controlled
Expectations:
- Build and document an Ansible-based bootstrap process for secure hosts
- Produce versioned base images and container templates ready for custody site use
- Set up GitLab pipelines to validate, lint, and deploy builds automatically