Linux Administration Engineer Jobs in Illinois (NOW HIRING)

Zachary Piper Solutions is seeking an experienced an Extended Expertise Engineer to support a leading enterprise cybersecurity platform known for next-generation firewalls, cloud security, zero trust, and AI-driven threat detection. This is an onsite position located at Scott Air Force Base in Illinois & requires an active Top Secret security clearance. The Extended Expertise Engineer is an integral part of our client's mission within their Professional Services team. As an Extended Expertise Engineer, you will work on-site/remote with the client's customer(s) supporting their mission to help them quickly and completely adopt their End Pointy Platform, leaving them more secure. This is a highly technical, hands-on role and you will develop and maintain expert-level skill sets on the products and solutions deployed within the customer's environment. Responsibilities of the Extended Expertise Engineer: * Serve as the primary technical advisor for customers, understanding their business requirements, security objectives, and industry-specific threat landscape to deliver effective security outcomes.
* Lead endpoint protection deployments, operationalization, troubleshooting, optimization, and end-user training to ensure successful adoption and long-term value.
* Drive customer success by providing deployment guidance, accelerating time-to-value, expanding product adoption through new features and innovative use cases, and serving as the product subject matter expert throughout the customer lifecycle.
* Partner with product and engineering teams to resolve technical issues, provide customer feedback, and maximize platform capabilities for customers and partners.
* Perform security operations activities including incident response, threat hunting, detection engineering, alert tuning, custom BIOC development, correlation rule creation, and onboarding new log sources into XDR platforms.
* Support log ingestion, parsing, and integration efforts while leveraging SIEM and XDR technologies to improve detection and response capabilities.
* Troubleshoot networking, endpoint, cloud, and operating system issues across enterprise environments, utilizing scripting and automation where appropriate. Qualifications for the Extended Expertise Engineer: * Experience deploying, operationalizing, troubleshooting, and training customers on endpoint protection solutions, with a background as a Security Incident Responder, SOC Analyst, or SOC Manager in customer-facing environments.
* Strong understanding of cloud technologies and security use cases across AWS, Azure, and Google Cloud Platform (GCP), as well as enterprise security products, IT infrastructure, networking fundamentals (TCP/IP, OSI Model), and basic Linux administration and troubleshooting.
* Hands-on experience with threat hunting, detection engineering, alert tuning, custom BIOC development, correlation rule creation, XDR log ingestion and parsing, SIEM platforms (e.g., Splunk), XDR APIs, and query languages such as XQL, SQL, or similar.
* Experience analyzing customer requirements, guiding technical deployments, accelerating product adoption, and serving as a trusted technical advisor throughout the customer lifecycle.
* Familiarity with machine learning applications in cybersecurity and experience developing or maintaining automation scripts in Python or PowerShell.
* Active Top Secret security clearance. * Ability and willingness to work onsite at Scott AFB, IL. Compensation for the Extended Expertise Engineer: * Salary Range: $150,000 - $170,000 *depending on experience* * Comprehensive Benefits: Medical, Dental, Vision, 401k Plan, PTO, Holidays, Sick Leave if required by law This job opens for applications on 08/6. Applications for this job will be accepted for at least 30 days from the posting date. #LI-MS1 #LI-ONSITE Keywords: Endpoint Protection, Endpoint Security, EDR, XDR, Cortex XDR, Security Incident Response, Incident Responder, SOC Analyst, SOC Manager, Threat Hunting, Detection Engineering, BIOCs, Behavioral Indicators of Compromise, Alert Tuning, Correlation Rules, Log Ingestion, Log Parsing, SIEM, Splunk, XQL, SQL, XDR APIs, Cloud Security, AWS, Azure, Google Cloud Platform, GCP, TCP/IP, OSI Model, Network Troubleshooting, Linux Administration, Python, PowerShell, Machine Learning, Customer Facing, Professional Services, Technical Consultant, Technical Advisor, Product SME, Product Adoption, Endpoint Deployment, Enterprise Security, Zero Trust, Next-Generation Firewall, NGFW, Palo Alto Networks, Cortex, Cybersecurity, Active TS/SCI, TS/SCI Clearance, Omaha, Nebraska