Senior Security Analyst Jobs in Rochester, NY (NOW HIRING)

L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers' mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.

L3Harris is the Trusted Disruptor in defense tech. With customers' mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security.

Job Title: Senior Specialist, Systems Administrator

Job Code: 39845

Job Location: Melbourne, FL; Rochester, NY; or Salt Lake City, UT

Job Schedule:9/80: Employees work 9 out of every 14 days - totaling 80 hours worked - and have every other Friday off

Job Description:

We are seeking a highly skilled Linux Workstation/Endpoint Engineer to architect, secure, maintain, and continuously improve our enterprise Linux desktop platform. This role serves as the technical owner and design authority for Linux endpoint engineering, managing the platform as a product with defined lifecycle, service levels, and measurable outcomes. This role will partner with Infrastructure, Security, Identity, Networking, and End-User Support teams to deliver a secure, reliable, supportable, and user-centered Linux endpoint experience at enterprise scale.

Essential Functions:

• Serve as design authority and primary technical owner for enterprise Linux workstation architecture and standards.
• Define and maintain supported Linux distributions, kernel lifecycle strategy, and graphics stack (Wayland/Xorg), including compatibility guardrails.
• Build and maintain hardened OS images and zero-touch provisioning/enrollment workflows (Kickstart, preseed, image pipelines, first-boot automation).
• Own upgrade strategy, including in-place upgrade policy, rebuild criteria, pilot rings, and rollback plans
• Qualify and sustain hardware compatibility across laptops, GPUs, wireless chipsets, docks, and multi-monitor configurations.
• Track firmware, kernel regressions, suspend/resume behavior, and performance and stability trends with corrective action plans.
• Design and maintain enterprise identity integration (AD/LDAP, Kerberos, SSSD, offline authentication, MFA and conditional access patterns).
• Own endpoint security architecture, including full-disk encryption, Secure Boot, TPM-backed controls, key management, and boot-chain trust.
• Integrate and sustain endpoint security tooling (EDR, vulnerability scanning, compliance agents, logging, and telemetry).
• Define lifecycle governance: release cadence, support windows, deprecation timelines, and exception management.
• Maintain architecture documentation, runbooks, disaster recovery procedures, and break-glass access controls.
• Lead change and risk management for kernel, desktop environment, and major OS releases through formal CAB/change controls.
• Plan phased rollouts, risk assessments, rollback procedures, and post-implementation validation.
• Own Linux endpoint patching, repository management, package governance, and software distribution standards.
• Build automation and CI/CD workflows for image validation, policy testing, and deployment quality gates.
• Define SLIs/SLOs and operational metrics (build success, deployment success, incident volume, MTTR, compliance posture).
• Provide L3/L4 escalation support for complex endpoint incidents and lead root-cause analysis/problem management.
• Partner with Service Desk and Field Services to improve knowledge articles, handoff quality, and support readiness.

Qualifications:

• Bachelor's Degree and minimum 6 years of prior relevant experience. Graduate Degree and a minimum of 4 years of prior related experience. In lieu of a degree, minimum of 10 years of prior related experience.
• 4+ years administering and engineering Linux endpoints, preferably in enterprise RHEL/Ubuntu environments.

Preferred Additional Skills:

• Experience with Linux hardware enablement, qualification, and lifecycle certification.
• Experience with Linux image builds and provisioning via Red Hat Satellite
• Deep knowledge of Wayland/Xorg behavior, kernel strategy, firmware dependencies, and driver management.
• Advanced security background in Linux endpoint hardening, encryption, Secure Boot, TPM, and EDR integration.
• Experience implementing CIS/STIG controls, SELinux/AppArmor policy, and audit-ready baseline management.
• Working knowledge of DevOps/IaC and CI/CD practices for endpoint engineering pipelines.
• RHCSA/RHCE or equivalent Linux certifications strongly preferred.
• Strong analytical, organizational, stakeholder management, and documentation discipline.
• Proven ability to design practical, scalable solutions to complex endpoint challenges.
• Experience supporting GPU-enabled engineering/scientific workloads is a plus.
• Familiarity with ITIL incident/problem/change processes is a plus.
• Demonstrated experience designing, building, securing, and operating Linux workstation images and deployment workflows at scale.
• Strong automation/configuration management experience (Ansible, shell/Python automation, image pipeline tooling).
• Strong scripting and troubleshooting skills (Bash and/or Python) with emphasis on maintainability and reliability.
• Strong understanding of enterprise identity and authentication integration (AD/LDAP, Kerberos, SSSD, MFA patterns).

In compliance with pay transparency requirements, the salary range for this role in California, Massachusetts, New Jersey, Washington, and the Greater D.C, Denver, or NYC areas is $106,500-$197,500. The salary range for this role in Colorado state, Hawaii, Illinois, Maryland, Minnesota, New York state, and Vermont is $92,500-$171,500. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire, schedule type, and the applicability of collective bargaining agreements.

#LI-NR1

L3Harris Technologies is proud to be an Equal Opportunity Employer. L3Harris is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws. L3Harris maintains a drug-free workplace and performs pre-employment substance abuse testing and background checks, where permitted by law.

Please be aware many of our positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information.

By submitting your resume for this position, you understand and agree that L3Harris Technologies may share your resume, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions.

L3Harris Technologies is an E-Verify Employer. Please click here for the E-Verify Poster in English or Spanish. For information regarding your Right To Work, please click here for English or Spanish.