Platform Engineer

ARISTON SERVICES PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ARISTON SERVICES PTE. LTD. is seeking an experienced platform engineer to own the RHEL OS fleet underlying OCP worker and control-plane nodes, as well as non-containerised applications. You will drive patch cycles, OS hardening, and security governance across multi-namespace environments.

The role covers OpenShift cluster deployment and upgrades, MCO-driven node customization, and container image lifecycle management, with emphasis on reliability and automation.

Qualifications

• Hands-on experience managing RHEL OS fleets and patch cycles.
• Experience deploying/upgrading OpenShift 4.x clusters.
• Knowledge of OS hardening (SELinux, firewalld, auditd).
• Familiarity with RBAC, SCCs, network policies, quotas in multi-namespace environments.
• Experience provisioning containers and managing image lifecycles.

Responsibilities

• Own and maintain the RHEL OS fleet underpinning OCP worker/control-plane nodes and non-containerised application servers.
• Plan and execute RHEL OS patching cycles with minimal service disruption.
• Implement and validate OS hardening benchmarks (SELinux, firewalld, auditd, cryptographic policies).
• Troubleshoot system-level issues (kernel parameters, ulimits, cgroups, storage mounts).
• Manage RHEL subscriptions, entitlements, and satellite/image registries.
• Deploy, upgrade, and maintain OCP 4.x clusters (control plane, etcd health, worker lifecycle).
• Configure MCO for node OS customization (chrony, SSH hardening, kernel args).
• Manage cluster certificates, ingress, and HAProxy tuning for long-running workloads.
• Administer Quay mirror registry and perform remediation for bundled components.
• Implement OCP RBAC, SCCs, network policies, and quotas across namespaces.
• Support JVM and container resource tuning for Java workloads.

Skills

RHEL System Administration

OCP OpenShift Administration

OS Hardening & Security

Cluster & Container Tuning

DevSecOps & Automation

Tools

Quay Mirror Registry

Nessus/Vulnerability Scanning

VAPT Remediation

Job description

Main Role and Responsibilities

RHEL Platform Management (Primary Focus)

• Own and maintain the RHEL OS fleet underpinning OCP worker/control-plane nodes and non-containerised application servers
• Plan and execute RHEL OS patching cycles (EUS channel management, kernel upgrades, reboot sequencing) with minimal service disruption
• Implement and validate OS hardening benchmarks — SELinux policies, firewalld rules, auditd configuration, and cryptographic policy settings
• Troubleshoot system-level issues: kernel parameters, resource limits (ulimits, cgroups), storage mounts (NFS, iSCSI, SMB/CIFS PVs on OCP)
• Manage RHEL subscriptions, entitlements, and satellite/image registries

OCP Cluster Administration (Primary Focus)

• Deploy, upgrade, and maintain OCP 4.x clusters — including control plane, etcd health, and worker node lifecycle
• Configure and manage OCP Machine Config Operator (MCO) for node-level OS customisation: chrony NTP, SSH hardening, kernel arguments, and custom MachineConfigs
• Manage cluster certificates, ingress/route configurations, HAProxy timeout tuning for long-running enterprise workloads (e.g., Pega BIX, batch jobs)
• Administer Quay mirror registry — image mirroring, vulnerability scanning results, VAPT remediation for bundled components (e.g., jQuery CVEs)
• Implement OCP RBAC, SCCs, network policies, and resource quotas across multiple namespaces and project environments
• Support JVM and container resource tuning for Java workloads on OCP (heap sizing, Metaspace limits, G1GC flags, container memory budgeting)

Application Platform & Integration Support

• Take ownership of one or more application platforms (e.g., Pega Infinity, WebSphere, IBM MQ) — covering setup in HA mode, application patching, and ongoing operational support
• Participate in architecture sessions with build teams, advising on integration points (web services, MQ, SFTP, API gateway)
• Support container provisioning, image lifecycle, and deployment of containerised services across DEV / SIT / UAT / PROD environments

Operational Governance & Security

• Define and execute operational processes: OS patching, application-level patching, performance monitoring, housekeeping, backup and recovery
• Support VAPT engagements — assess Nessus/vulnerability findings, coordinate remediation, and produce risk acceptance or remediation reports
• Apply government-grade security hardening principles (IM8 compliance, SSCT framework, CIS benchmarks) across RHEL and OCP layers
• Contribute to DevSecOps tooling and automation concepts — CI/CD pipelines, IaC, and operational runbooks
• Support AWS administration tasks where applicable (CloudWatch monitoring, IAM, S3, hybrid integration)

Top 4 Must-Have Skills

RHEL System Administration (Required — Primary Differentiator)

• Hands‑shakav? Wait line: 2? Actually: