Linux Engineer

                                                 Job Title: Linux Network Security Engineer

Location: Malaysia

Employment Type: Full-Time

Total Positions: 1

Experience Required: 8+ Years

Role Overview

We are looking for a highly skilled and experienced Linux Network Security Engineer to join our next-gen infrastructure team. This role focuses on modern, immutable Linux operating systems (NixOS/GUIX), advanced container networking (Cilium), open-source threat detection (Suricata, Zeek), and host-based firewalls (nftables/iptables). You will work on security zoning, stateful firewalls, and traditional firewall deployments (Cisco/FortiGate/Check Point/Palo Alto). If you are passionate about Linux security, eBPF, and automation at scale, this is the role for you.

Key Responsibilities

• Design, deploy, and maintain NixOS and GUIX / Immutable OS environments for declarative, reproducible, and secure system configurations.
• Implement Cilium for eBPF-based networking, load-balancing, and security observability within Kubernetes/containerized environments.
• Deploy and manage Suricata (IDS/IPS) and Zeek (network monitoring) to analyze network traffic, detect anomalies, and enhance threat visibility.
• Configure and manage nftables and legacy iptables for host-based security, packet filtering, and network address translation.
• Implement security zoning and stateful firewall policies for network segmentation and access control.
• Provide hands-on administration for RHEL and other enterprise Linux distributions.
• Implement L2 Routing & Switching for underlying network fabric integration.
• Assist in the implementation and deployment of traditional firewalls (Cisco, FortiGate, Check Point, Palo Alto) as required.
• Utilize scripting (Bash, Python) for automation of security tasks and system provisioning.

Required Skills & Experience

NixOS (Declarative OS)

• Preferred / Strongly Desired

Cilium (eBPF Networking)

• Preferred / Strongly Desired

Suricata (IDS/IPS)

• Preferred / Strongly Desired

Zeek (Network Monitoring)

• Preferred / Strongly Desired

RHEL (Linux Administration)

• Hands-on Experience – Mandatory

GUIX / Immutable OS

• Preferred

nftables

• Hands-on Experience – Mandatory

iptables

• Hands-on Experience – Mandatory

Security Zoning

• Implementation Experience – Mandatory

Stateful Firewall

• Implementation Experience – Mandatory

Routing & Switching (L2)

• Implementation & Deployment Experience – Mandatory

Firewall Technologies (Cisco / FortiGate / Check Point / Palo Alto)

• Implementation & Deployment Experience – Mandatory

Linux OS (General)

• Hands-on Experience – Mandatory

Scripting (Bash / Python)

• Good to Have