RHEL Platform Engineer

ENGGSOL PTE. LTD.; Singapore; On-site; SGD 100,000 - 167,000; Full time

Job summary

ENGGSOL PTE. LTD. is seeking a Senior Linux/Platform Engineer to manage RHEL patching, OS hardening, and golden image maintenance.

You will implement Chef cookbook automation for provisioning, IPUG, and CIS-based hardening, and support enterprise Linux environments with CIS-aligned security practices. The role covers patching across SIT/UAT/DR/Production, annual golden-image maintenance, and ongoing system-wide upgrades, with a focus on reliability and audit readiness.

Qualifications

• Strong hands-on experience with Red Hat Enterprise Linux (RHEL) administration.
• Hands-on experience with Linux OS patching, upgrades and troubleshooting.
• Experience with RHEL in-place upgrades (IPUG).
• Strong understanding of Linux security hardening and CIS benchmarks.
• Experience building and maintaining enterprise Linux golden images.
• Experience developing Chef cookbook automation for server provisioning, OS hardening and operating system upgrades.
• Strong automation and scripting skills using Chef, Ansible, Shell/Bash and/or Python.

Responsibilities

• Plan and execute scheduled RHEL OS patching and hardening activities.
• Support patch cycles across SIT, UAT, DR and Production environments.
• Provide system administration support during daytime, nighttime and weekend maintenance windows.
• Perform pre-patching validation, patch deployment, troubleshooting and post-patching verification.
• Conduct post-cycle gap assessments and follow up on issues.
• Prepare post-patching management and technical reports.
• Ensure systems remain compliant with security standards and audit requirements.
• Build and configure standardized RHEL golden images.
• Maintain Chef cookbook automation for provisioning, IPUG and OS hardening.
• Review and update platform architecture documentation annually.
• Perform software patching and upgrades of platform/software.

Skills

RHEL administration

Linux patching

Automation with Chef

Ansible

Python/Shell scripting

Security hardening CIS

Education

Bachelor's Degree in Computer Science or related

Tools

Chef

Ansible

Shell/Bash

Python

Job description

Operating System Patching and Maintenance

• Plan and execute scheduled RHEL OS patching and hardening activities.
• Support approximately 6 patching cycles per year, including activities across SIT, UAT, DR and Production environments.
• Provide system administration support during daytime, nighttime and weekend maintenance windows.
• Perform pre-patching validation, patch deployment, troubleshooting and post-patching verification.
• Conduct post-cycle gap assessments and follow up on identified issues.
• Prepare post-patching management and technical reports.
• Ensure systems remain compliant with organizational security standards and minimize major audit findings.

RHEL Golden Image Engineering

• Build and configure standardized RHEL golden images.
• Install and configure new operating system versions according to enterprise standards.
• Support installation and integration of infrastructure and security agents into golden images.
• Develop and Implement Chef Cookbook automation for the following
  • New server provisioning
  • In-place OS upgrades (IPUG)
  • OS hardening based on CIS standards
• Maintain platform architecture and technical documentation.

Golden Image & Automation Maintenance

• Perform annual maintenance of golden images for supported RHEL versions.
• Support environments covering RHEL 7 (partial), RHEL 8, RHEL 9 and RHEL 10.
• Patch and harden existing OS images.
• Maintain Chef cookbook automation for:
  • New server provisioning
  • In-place OS upgrades (IPUG)
  • OS hardening based on CIS standards
• Review and update platform architecture documentation annually

System Software Patching & Upgrades

• Perform scheduled patching and upgrades of platform/system software.
• Support NPS patching activities approximately twice annually and platform upgrades as required.
• Support VCS patching activities approximately six times annually and platform upgrades as required.
• Perform compatibility assessment, implementation, validation and troubleshooting associated with upgrades.

Cybersecurity Alert & Vulnerability Assessment

• Review cybersecurity alerts received from regulatory, government and internal security teams.
• Research each alert to determine:
  • Scope
  • Platform impact
  • Vulnerability exposure
  • Required remediation actions
• Match vulnerability and security-alert profiles against managed Linux platforms.
• Prepare and submit technical assessment reports to the relevant compliance/security teams.
• Track remediation actions and implement required changes in SIT and UAT environments.
• Coordinate with system administration and production teams for Production implementation.

Requirements

• Strong hands-on experience with Red Hat Enterprise Linux (RHEL) administration.
• Hands-on experience with Linux OS patching, upgrades and troubleshooting.
• Experience with RHEL in-place upgrades (IPUG).
• Strong understanding of Linux security hardening and CIS benchmarks.
• Experience building and maintaining enterprise Linux golden images.
• Experience developing Chef cookbook automation for server provisioning, OS hardening and operating system upgrades.
• Strong automation and scripting skills using Chef, Ansible, Shell/Bash and/or Python.
• Experience supporting virtualized Linux server environments.
• Understanding of vulnerability management and cybersecurity remediation.
• Experience with high-availability or clustering technologies; Veritas Cluster Server (VCS) experience is preferred.
• Strong troubleshooting skills across OS, networking, storage, filesystem and system-service layers.
• Experience preparing architecture, operational and audit/compliance documentation.

Preferred Experience

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline.
• 5+ years of Linux/RHEL system administration or platform engineering experience.
• Experience supporting enterprise-scale or mission-critical environments.
• Banking or financial-services infrastructure experience is highly preferred.
• Experience working in environments with strict change-management, security and audit requirements.
• Experience supporting SIT, UAT, DR and Production environments.