linux Engineer
Job Description
Position Title: Linux Network & Security Infrastructure Engineer
Experience: 3–6+ years
Location: Malaysia
Employment Type: 1-2 years contract with ATS (Possibility of transition to permanent based on performance)
Job Overview
We are seeking a skilled Linux Network & Security Infrastructure Engineer to design, secure, and manage cutting-edge Linux systems and networking environments. This role involves integrating declarative and immutable OS administration (NixOS/RHEL/Guix) with sophisticated stateful firewalling (nftables, Cisco/Forti/Palo Alto), cloud-native networking (Cilium), and threat detection systems (Suricata, Zeek) to ensure a resilient network architecture with effective defense-in-depth strategies.
Core Responsibilities
Immutable OS & Linux Engineering: Develop, automate, and oversee declarative, reproducible Linux systems utilizing NixOS, Guix, or immutable RHEL environments.
Firewalling & Network Segmentation: Execute stateful packet filtering, NAT, and network zoning through nftables in conjunction with enterprise-grade firewalls (Fortinet, Palo Alto, Cisco, Check Point).
Network Infrastructure & L2/L3: Implement and troubleshoot Routing & Switching (L2/L3, VLANs, BGP/OSPF, TAP/SPAN configurations).
NIDS & Network Security: Deploy, fine-tune, and manage Suricata rule sets and Zeek network analysis tools for proactive threat monitoring and hunting.
Cloud-Native Networking: Establish and oversee container networking, eBPF policy enforcement, and observability using Cilium.
Essential Requirements
Experience: 3–6 years in Linux Systems, Network Security, or Infrastructure Engineering.
Linux & Immutable OS: In-depth knowledge of Linux internals; practical experience with NixOS, Nix Flakes, Guix, or immutable distributions.
Firewall & Security Framework: Expertise in nftables, enterprise firewalls (Fortigate/Palo Alto/Cisco), network segmentation, and stateful inspection.
NIDS & Observability: Practical experience with Zeek and Suricata operations.
Advanced Networking: Strong comprehension of L2/L3 Routing & Switching and Cilium (eBPF).