Linux System Administrator
Support NCBI's high-traffic biomedical platforms by monitoring, analyzing, and mitigating web abuse, DDoS, and scraping across hybrid cloud and on-prem infrastructure. Requires strong web architecture knowledge and hands-on experience with cloud security controls.
About the job
Duties & Responsibilities
- Develop and own protection metrics and alerting — build dashboards and alert pipelines that surface anomalies across a range of network and application-layer signals.
- Perform deep log analysis to identify overuse, scraping, abuse, DDoS, and attack patterns across millions of daily requests.
- Operate and tune cloud-based edge security controls — configure and update security policies, rate limiting, and adaptive protection rules in response to evolving threats.
- Enforce traffic controls — apply a range of mitigation strategies to abusive traffic while minimizing impact to legitimate users.
- Monitor continuously and respond quickly — triage incidents and either resolve them directly or escalate to development or sysadmin teams with clear, actionable information.
- Support protection across a mixed cloud and on-premises infrastructure.
Requirements
- Strong understanding of high-volume web service architecture — how traffic flows, where bottlenecks and abuse vectors appear, and how load balancers and edge infrastructure make routing decisions.
- Hands-on experience with a major cloud provider's security and networking stack.
- Solid grasp of HTTP/HTTPS protocol internals — headers, TLS behavior, connection patterns, and how these relate to traffic analysis and fingerprinting techniques.
- Experience analyzing traffic using network and application-layer signals including address-based, organizational, and transport-layer fingerprinting methods.
- Familiarity with common web server platforms, their log formats, and configuration.
- Ability to read, write, and tune access control and rate-limiting rules under pressure.
- Comfort working across hybrid infrastructure environments.
Preferred Skills
- Experience with advanced abuse mitigation techniques, including traffic redirection and challenge-response mechanisms.
- Scripting or automation experience (Python, Bash, or similar) for log parsing and rule generation.
- Prior work protecting high-traffic government or research platforms.
- Knowledge of bot detection techniques beyond simple blocking — behavioral signals, fingerprinting, headless browser detection, and similar approaches.
- Familiarity with evolving attacker tradecraft and how modern scrapers and abusers adapt to countermeasures.
Benefits
- Medical, dental and vision coverage
- 401k plan with employer contribution
- Paid holidays and vacation
- Tuition reimbursement
Skills
Python, Bash, Http/Https, Tls, Cloud Security, Rate Limiting, Log Analysis, Traffic Analysis, Access Control, Bot Detection
Similar jobs
IT Support jobsProvides Level II internal IT helpdesk support, handling user administration, desktop troubleshooting, hardware and software requests, account audits, patching, and escalations. Requires three years of helpdesk experience, Okta and Google Workspace administration, and high school education.
Administers enterprise AI platforms, licenses, integrations, governance, and security controls while supporting employees and automating operational reporting. Requires at least three years of systems administration or AI operations experience, enterprise AI platform expertise, identity administration, Python scripting, and SOC 2 familiarity.
Build and scale Salesforce quote-to-cash infrastructure, including CPQ, pricing, approvals, order management, and integrations with billing and finance systems. The role requires strong Apex and Salesforce platform expertise, custom CPQ development, release discipline, and experience using AI-assisted development tools.
Manages the end-to-end IT service desk ticket lifecycle, SLA performance, escalations, reporting, and continuous process improvement. Requires 3–5+ years in ITSM or service desk leadership and advanced ITSM and analytics platform expertise.
Provides advanced technical support across infrastructure, networks, SaaS applications, and endpoint systems. The role administers identity, device-management, and security tools while owning complex issues and leading technology rollouts.