OVERVIEW
We are seeking a high-caliber Infrastructure Engineer to join our Security & DevSecOps squad. In this role, you will translate architectural visions into robust, executable designs for on-premises OpenShift clusters and underlying hardware abstractions. We are looking for a systems expert who can work independently to manage the complexity of bare-metal OpenShift deployments and mission-critical storage.
OUR CORE INFRASTRUCTURE STACK
OpenShift Platform & Virtualization
- OpenShift Container Platform (OCP) administration on bare-metal/on-prem environments
- ·OpenShift Virtualization for managing VM-based workloads alongside containers
- ·RHEL (Red Hat Enterprise Linux) advanced system administration and performance tuning
Networking & Storage
- · OpenShift Networking (Software Defined Networking / OVN-Kubernetes)
- · OpenShift Data Foundation (ODF) for persistent, software-defined storage
- · Load balancing, ingress controllers, and DNS management within a restricted network
Security & Observability
- · Cluster Security (Security Context Constraints (SCC), RBAC, Network Policies)
- · Monitoring & Alerting (Prometheus, Grafana, and Alertmanager)
- · Disaster Recovery (DR) and high-availability (HA) planning for stateful workloads
- Knowledge of Infrastructure as Code (Ansible/OpenTofu) for cluster day-2 operations.
KEY RESPONSIBILITIES
- Convert high-level blueprints into detailed cluster specs, including IP address management (IPAM), storage topology, and VLAN tagging for bare-metal OCP.
- Bare-Metal Administration: Independently lead the installation, scaling, and lifecycle management of OpenShift on physical hardware, including firmware updates and node provisioning.
- Storage Orchestration: Architect and manage OpenShift Data Foundation (ODF), ensuring persistent storage is highly available and performant for simulation databases.
- Network Engineering: Design and troubleshoot complex OVN-Kubernetes network patterns, ensuring secure and low-latency communication between simulation services.
- OpenShift Virtualization: Lead the migration and management of legacy VM workloads into OpenShift, providing a unified control plane for the digital twin ecosystem.
- Cluster Security Hardening: Implement and enforce strict SCC and RBAC policies, ensuring the platform complies with global security benchmarks and the squad's DevSecOps standards.
- Monitoring & DR: Establish comprehensive monitoring with Prometheus/Grafana and independently design and test Disaster Recovery scenarios to ensure zero-data-loss targets.
- Autonomous Troubleshooting: Act as the final escalation point for cluster-level performance issues, networking bottlenecks, or storage failures, resolving them without external guidance.
PREFERRED QUALIFICATIONS
- ·6 to 8 years of experience in Infrastructure Engineering or Systems Administration.
- Expert-level mastery of Red Hat OpenShift (OCP); Red Hat Certified Specialist in OpenShift Administration/Automation is highly preferred.
- Deep experience in Bare-Metal deployments and RHEL administration.
- Hands-on proficiency with OpenShift Data Foundation (ODF) and OpenShift Virtualization.
- Strong understanding of Kubernetes Networking (SDN/OVN) and security constructs (Network Policies).
- Demonstrated ability to work independently on complex hardware-to-software integration projects.
HIGHLY DESIRABLE
- Experience supporting high-compute Digital Twin or Simulation environments.
- Experience with backup solutions for OpenShift (Velero or OADP).
- Experience in managing on-premises infrastructure for global product engineering hubs.
- Exposure to industrial domains such as Manufacturing, Logistics, or Transportation is a plus.
- Exposure to CI/CD and platform automation tools such as GitHub Actions, Jenkins, or GitOps practices to better align with DevSecOps operating models.
- Hybrid-cloud exposure (AWS, Azure, or GCP) as a preferred qualification