Linux Systems Engineer Identity PKI and Security IDM

You will own Linux identity, authentication, certificate, and secrets infrastructure. You will build declarative identity services, automate SSH and PKI workflows, integrate authentication protocols, and translate security policies and threat models into hardened Linux configurations.

Responsibilities

• Manage Kanidm as the central identity source of truth
• Architect Linux host integrations using SSSD, PAM, and NSS
• Design and automate SSH CA, step-ca, and OpenBao workflows
• Use SaltStack and Ansible for declarative identity and access configuration
• Translate security policies, zero-trust requirements, and threat models into Linux infrastructure
• Architect and troubleshoot OIDC and OAuth2 integrations

Requirements

• Hands-on Linux systems engineering experience at scale
• Knowledge of RHEL or Debian systems and SSSD, PAM, NSS, and OpenSSH
• Expertise with SaltStack or Ansible
• Experience with SSH CAs, short-lived certificates, and automated internal TLS issuance
• Understanding of OIDC, OAuth2, WebAuthn or FIDO2, and POSIX mapping
• Ability to translate security policies into system configurations and automation

Benefits

• Equity compensation
• Fringe benefits