Senior Linux Security Architect

Sr. Linux Security Architect (100% Remote)

Optomi, in partnership with a large Fortune 500 Organization, is seeking a Sr. Linux Security Architect.

As a Senior Linux Security Architect, you will be the primary designer and guardian of our hardened Linux infrastructure. We aren't just looking for someone to "patch servers"—we need a visionary who understands the intersection of kernel-level security, automated orchestration, and the complex lifecycle of cryptographic secrets.

Your mission is to ensure that our Linux environments are not only resilient against modern threats but that our Key Management Infrastructure is secure, scalable, and compliant.

Core Responsibilities:

• Architectural Strategy: Design and implement secure-by-default Linux builds (RHEL, Ubuntu, Alpine) utilizing Mandatory Access Control (MAC) like SELinux or AppArmor.
• Key Management & Cryptography: Lead the architecture of enterprise Key Management Systems (KMS). You will manage the lifecycle of SSH keys, TLS certificates, and API secrets using tools like HashiCorp Vault, AWS KMS, SSH Universal Key Manager, or Hardware Security Modules (HSMs).
• Hardening & Compliance: Develop automated hardening scripts (Ansible/Terraform) based on CIS Benchmarks and STIGs.
• Identity & Access: Integrate Linux ecosystems with centralized identity providers (LDAP, FreeIPA, Active Directory) using SSSD and PAM configurations.
• Threat Modeling: Conduct deep-dive security reviews of system architectures to identify vulnerabilities in data-at-rest and data-in-transit encryption.

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Preferred Qualifications:

• Experience: 8+ years in Linux Systems Engineering with at least 4 years focused purely on Security Architecture.
• Certifications: CISSP, CISM, or Linux-specific security certs (e.g., Red Hat Certified Specialist in Security).
• Pas Project Experience: You’ve successfully migrated a legacy environment from manual "secret-spreading" to a centralized, rotated, and audited Key Management System.