Overview
We are seeking a high-caliber Infrastructure Engineer to join our Security & DevSecOps squad. In this role, you will translate architectural visions into robust, executable designs for on-premises OpenShift clusters and underlying hardware abstractions. We are looking for a systems expert who can work independently to manage the complexity of bare‑metal OpenShift deployments and mission‑critical storage.
Core Infrastructure Stack
OpenShift Platform & Virtualization
OpenShift Container Platform (OCP) administration on bare‑metal/on‑prem environments
- OpenShift Virtualization for managing VM‑based workloads alongside containers
- RHEL (Red Hat Enterprise Linux) advanced system administration and performance tuning
Networking & Storage
- OpenShift Networking (Software Defined Networking / OVN‑Kubernetes)
- OpenShift Data Foundation (ODF) for persistent, software‑defined storage
- Load balancing, ingress controllers, and DNS management within a restricted network
Security & Observability
- Cluster Security (Security Context Constraints (SCC), RBAC, Network Policies)
- Monitoring & Alerting (Prometheus, Grafana, and Alertmanager)
- Disaster Recovery (DR) and high‑availability (HA) planning for stateful workloads
Knowledge of Infrastructure as Code (Ansible/OpenTofu) for cluster day‑2 operations.
Key Responsibilities
- Convert high‑level blueprints into detailed cluster specs, including IP address management (IPAM), storage topology, and VLAN tagging for bare‑metal OCP.
- Bare‑Metal Administration: Independently lead the installation, scaling, and lifecycle management of OpenShift on physical hardware, including firmware updates and node provisioning.
- Storage Orchestration: Architect and manage OpenShift Data Foundation (ODF), ensuring persistent storage is highly available and performant for simulation databases.
- Network Engineering: Design and troubleshoot complex OVN‑Kubernetes network patterns, ensuring secure and low‑latency communication between simulation services.
- OpenShift Virtualization: Lead the migration and management of legacy VM workloads into OpenShift, providing a unified control plane for the digital twin ecosystem.
- Cluster Security Hardening: Implement and enforce strict SCC and RBAC policies, ensuring the platform complies with global security benchmarks and the squad’s DevSecOps standards.
- Monitoring & DR: Establish comprehensive monitoring with Prometheus/Grafana and independently design and test Disaster Recovery scenarios to ensure zero‑data‑loss targets.
- Autonomous Troubleshooting: Act as the final escalation point for cluster‑level performance issues, networking bottlenecks, or storage failures, resolving them without external guidance.
Preferred Qualifications
- 6 to 8 years of experience in Infrastructure Engineering or Systems Administration.
- Expert‑level mastery of Red Hat OpenShift (OCP); Red Hat Certified Specialist in OpenShift Administration/Automation is highly preferred.
- Deep experience in Bare‑Metal deployments and RHEL administration.
- Hands‑on proficiency with OpenShift Data Foundation (ODF) and OpenShift Virtualization.
- Strong understanding of Kubernetes Networking (SDN/OVN) and security constructs (Network Policies).
- Demonstrated ability to work independently on complex hardware‑to‑software integration projects.
Highly Desirable
- Experience supporting high‑compute Digital Twin or Simulation environments.
- Experience with backup solutions for OpenShift (Velero or OADP).
- Experience in managing on‑premises infrastructure for global product engineering hubs.
- Exposure to industrial domains such as Manufacturing, Logistics, or Transportation is a plus.
- Exposure to CI/CD and platform automation tools such as GitHub Actions, Jenkins, or GitOps practices to better align with DevSecOps operating models.
- Hybrid‑cloud exposure (AWS, Azure, or GCP) as a preferred qualification.