Cloud Linux Administrator

About JYG Innovations

JYG Innovations (JYG) is a professional solutions and services company focused on providing innovative and exceptional service in the Defense, State/Local and Commercial sectors. With a primary focus on IT Solutions, Cyber Security, Research and Analysis, and Medical/Clinical Staffing, JYG continues to receive exceptional customer satisfaction surveys due to the outstanding technical expertise and performance of its employees and strategic partners.

Support Your Well Being: JYG offers exceptional benefits, including Medical/Dental/Vision, short and long-term disability, life insurance, paid vacation, paid holidays, 401(k) with match, educational assistance, team building events, wellness tips and more!

Job Title: Cloud Linux Administrator

Location: Remote (Supporting Gunter Annex AFB, Montgomery, AL)

Employment Type: Full Time, Remote

Targeted Start Date: 19 Oct 2026

About the Opportunity: JYG is seeking a Cloud Linux Administrator to support infrastructure migration of existing SAP and Canvas Learning Management System (LMS) application environments to newly provisioned, STIG-hardened SUSE Linux Enterprise Server (SLES) 15 SP7/16 virtual instances. The ideal candidate will execute migration activities across the Development, Test, and Production environments during the 12-month period of performance. Application installation and configuration activities will be performed in coordination with Air University's designated Application Services Provider, which retains ownership and responsibility for application installation and configuration.

The Cloud Linux Administrator will assess the existing Air University AWS environment and identify configurations that may introduce operational, security, or performance risks. Any identified issues will be documented and reported to the Program Management Office (PMO), along with recommended courses of action (COAs) for remediation.

Required Qualifications

• Candidate must be a US Citizen

• Candidate must have an active DoD Secret Security Clearance at minimum

• Candidate must have an active Level 2 IAT Level Information Assurance Technician (IAT) certification (DoD 8140) (Security+, etc.) at time of hire.

• Candidate must have a bachelor's degree from an accredited institution in Computer Science, Information Technology, Cybersecurity, or a related discipline.

• 15+ years with information technology service desk support preferably in cloud contexts.

Position Summary

The Cloud Linux Administrator will support the engineering, security, automation, and administration of Linux systems hosting SAP workloads within AWS GovCloud. This role will focus on building and maintaining secure Linux environments, automated image creation, patch management, security compliance, vulnerability remediation, and cloud storage and encryption.

Technical Expertise: Elite "SUSE Fu" (advanced SUSE Linux Enterprise Server systems administration) and expert-level "STIG Fu" (automated DISA STIG application, RMF compliance, and AWS STIG tool integration).

The Cloud Linux Administrator will:

• Provide the specialized systems expertise that this migration uniquely demands: configuring EBS directory partition structures for both the baseline OS and SAP-specific AMIs, deploying and maintaining one RMT server per active environment to support quarterly AMI patching, implementing DISA STIG controls and Risk Management Framework (RMF) compliance rules, executing vulnerability remediation scans via AWS Inspector, managing SSL/TLS certificates across cutover instances, and leading the re-encryption of EFS storage enclaves using Customer KMS keys.

• Configure the SAP blueprint to implement the standard OS partition mount points augmented with separate, application-specific EBS volume mounts, tailored by instance type and environmental sizing across the Development, Test, and Production enclaves.

• Develop hardening scripts that utilize the native AWS STIG tool Utility, retrieved directly from the Cloud One-approved S3 storage bucket, to apply and validate STIG controls as an integrated step within the Packer-driven image build process.

• Map a dedicated SUSE subscription to each RMT server to authorize upstream synchronization of OS and security update packages, leveraging the baseline OnDemand SUSE instances available in AWS GovCloud as the default subscription connection method and configuring each instance to connect to its respective local subscription repository, ensuring that each environment maintains its own locally staged repository of approved patches independent of the others.

• Patch AMIs on a quarterly basis to remediate vulnerabilities

• Securely generate and apply new SSL/TLS certificates across the newly deployed instances to accommodate the IP address changes that occur during cutover, ensuring that encrypted communications remain uninterrupted and that all certificate bindings are validated prior to directing production traffic to the new infrastructure.

• Audit all unencrypted legacy EFS shares currently housing software installation packages, migrate any packages that remain operationally necessary to encrypted storage, archive the remaining contents to Amazon S3, and permanently remove the legacy shares from the active enclaves.

• Bring the specialized SUSE and STIG expertise needed to harden images, sustain the RMT patching infrastructure, and maintain continuous RMF compliance.

JYG Innovations is committed to hiring and retaining a diverse workforce. JYG Innovations is an equal opportunity/affirmative action employer and does not discriminate on the basis of race, color, creed, sex, national origin, religion, age, disability, pregnancy or veteran status. We welcome the employment of women, minorities, veterans and individuals with disabilities in our workforce. If you need special assistance, please contact our Human Resources Department. Interested parties may view our Affirmative Action Plan for Veterans and Individuals with Disabilities by contacting the Human Resources Department. JYG Innovations participates in E-Verify.