Linux Desktop Engineer

Celestica; Toronto; Hybrid; CAD 89,000 - 125,000; Full time

Job summary

Celestica is seeking a Linux Desktop Engineer to own the design, deployment, and maintenance of a high-performance Linux computing platform for HPS engineering. You will manage about 50 HP ZBook workstations preinstalled with Ubuntu, optimized for AI development.

Responsibilities include maintaining baseline imaging, packaging, patch cycles, and security tooling across a hybrid work environment in Canada. You will collaborate with Global IS and remote infrastructure teams to maximize engineering

Qualifications

• Expert-level administration of Ubuntu Linux (22.04 LTS and 24.04 LTS).
• Deep BigFix experience for software asset tracking, packaging, scripting, and automated deployment.
• Experience deploying and managing enterprise security suites (CrowdStrike Falcon, ThreatLocker, Zscaler ZPA).
• Familiarity with build toolchains (GCC, Clang, CMake, Rust/cargo), Python 3.10+, Docker CE, MicroK8s/Kind, VS Code.
• Advanced Bash or Python scripting for workstation automation and provisioning.
• Experience configuring high-density workstations (HP ZBook Fury) and BIOS updates.

Responsibilities

• Own the baseline golden imaging, mass deployment, and configuration maintenance of the HP ZBook workstation fleet using BigFix.
• Architect and deploy automated silent installation packages for all enterprise and custom engineering software via BigFix fixlets.
• Install and administer security applications (CrowdStrike Falcon, ThreatLocker, Zscaler ZPA) and manage patch cycles.
• Configure developer workspace controls, including ThreatLocker Sandbox paths to avoid blocks during source compilation.
• Implement anti-malware scan exclusions across build paths to ensure frictionless local compilation.
• Support monthly OS and application patching and push critical patches within a 24-hour window when required.
• Manage scoped sudo access via secure authentication models and audit with tools like tlog.
• Interface with HPS Software Engineers to ensure access to build tools, containers, and IDEs.

Education

Bachelor's degree in Computer Science, Computer Engineering, or Information Systems

Tools

HP ZBook Fury series

Ubuntu Linux

HCL BigFix

CrowdStrike Falcon

ThreatLocker

Zscaler ZPA

GCC

Clang

CMake

Rust/cargo

Python 3.10+

Docker CE

MicroK8s

Kind

VS Code

SSH agent-based PAM

tlog

Job description

Summary The Linux Desktop Engineer will own the design, deployment, configuration, and structural maintenance of Celestica's high-performance Linux computing platform. This role directly supports the Hardware Platform Solutions (HPS) engineering group by managing a fleet of approximately 50 HP ZBook Mobile Workstations preinstalled with Ubuntu and optimized for advanced AI-based software development.

08 - Specialist, IT Infrastructure

Req ID: 137435

Remote Position: Hybrid

Region: Americas

Country: Canada

State/Province: Ontario

City: Toronto

Summary The Linux Desktop Engineer will own the design, deployment, configuration, and structural maintenance of Celestica's high-performance Linux computing platform. This role directly supports the Hardware Platform Solutions (HPS) engineering group by managing a fleet of approximately 50 HP ZBook Mobile Workstations preinstalled with Ubuntu and optimized for advanced AI-based software development.

Operating at the intersection of enterprise endpoint compliance and agile engineering infrastructure , the successful candidate will use HCL BigFix as the primary Endpoint Management framework. Responsibilities include developing deployment packages for core endpoint security software , managing monthly patching cycles , and troubleshooting highly specialized developer toolchains to maximize engineering velocity.

Key Responsibilities

• Fleet Configuration & Baseline Optimization: Own the baseline golden imaging, mass deployment, and configuration maintenance of the HP ZBook workstation fleet utilizing HCL BigFix.
• Silent Software Packaging: Architect and deploy automated, silent installation packages for all enterprise and custom engineering endpoint software via BigFix fixlets.
• Endpoint Security Management: Install and administer Celestica’s standard security applications, including CrowdStrike Falcon, ThreatLocker, and Zscaler ZPA.
• Developer Persona Customization: Configure application controls specifically for the engineering developer workspace. This involves deploying ThreatLocker in a persistent Learning Mode with dedicated sandbox path exceptions (such as ~/Workspace) to prevent process blocks during source compilation.
• Exclusion Path Auditing: Implement and maintain required anti-malware scan exclusions across engineering build paths (e.g., /home/*/src/, make, gcc, cargo) to ensure frictionless local compilation.
• Patching & Vulnerability Remediation: Support and execute monthly operating system and application patching cycles. Ensure critical security patches are vetted and pushed to engineering systems within a mandatory 24-hour window when required.
• Privileged Access Governance: Administer scoped sudo access on developer workstations using secure alternative authentication models (such as SSH agent-based PAM) and manage compliance audits via session recording tools like tlog.
• Engineering Toolchain Support: Act as the primary technical interface for HPS Software Engineers, ensuring local access to build essentials, containerization software, and integrated development environments.

Qualifications/Skills/Competencies

Preferred Technical Qualifications:

• Operating Systems: Expert-level administration of native Ubuntu Linux (specifically 22.04 LTS and 24.04 LTS Desktop environments).
• Endpoint Management: Deep technical expertise using HCL BigFix for software asset tracking, package packaging, enterprise scripting, and automated deployment.
• Endpoint Security: Direct experience administering patches and Fixlets for enterprise security suites: CrowdStrike Falcon, ThreatLocker (including allowlisting/ringfencing policy adjustments), and Zscaler ZPA.
• Developer Environments: Familiarity supporting low-level compilation workflows and toolchains: build essentials (GCC, Clang, CMake, Rust/cargo), Python 3.10+, Docker CE, MicroK8s/Kind, and VS Code.
• Scripting & Automation: Advanced proficiency in Bash or Python scripting to automate workstation configuration, environment provisioning, and repetitive IT administrative tasks.
• Workstation Hardware: Experience configuring high-density workstations (such as the HP ZBook Fury series), including managing system BIOS updates and optimizing dedicated NVIDIA hardware driver profiles.

Core Competencies

• Developer Velocity Orientation: Possesses an intense focus on minimizing developer friction, reducing environment downtime, and protecting the engineer's flow state.
• Matrix Collaboration: Exceptional diplomatic and relationship-building skills to successfully co-develop frameworks with Global Information Security and remote site infrastructure divisions.
• Advanced Technical Problem Solving: Proven ability to troubleshoot unique, non-standard software-hardware boundary failures that fall outside typical corporate enterprise IT ticketing scripts.

Physical Demands

• Duties of this position are performed in a normal office environment.
• Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Salary

Salary

The stated range includes Base Salary and target Short-Term Incentive (STI) compensation only. A comprehensive benefits package is offered in addition to this range.

The range described in this posting is an estimate by the Company, and may change based on several factors, including but not limited to a change in the duties covered by the job posting, or the credentials, experience or geographic jurisdiction of the successful candidate.

Salary Range: $89,355-124,779 CAD/year

Education & Experience

• Bachelor’s degree in Computer Science, Computer Engineering, or Information Systems, with a minimum of 3 years of hands‑on experience supporting specialized R&D or engineering IT environments.

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.

Celestica is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.

At Celestica we are committed to fostering an inclusive, accessible environment, where all employees and customers feel valued, respected and supported. Special arrangements can be made for candidates who need it throughout the hiring process. Please indicate your needs and we will work with you to meet them.