In this role, you will design, build, secure, and operate enterprise-grade Linux platforms that enable engineering teams to deliver reliable software efficiently. You will lead platform engineering initiatives spanning infrastructure automation, vulnerability management, compliance, and cloud operations across AWS, Azure, and Google Cloud. Leveraging advanced Linux administration, Ansible, Terraform, and CI/CD practices, you will improve platform consistency, operational resilience, and security at scale. You will also drive automation initiatives that streamline patching, standardize system configurations, and strengthen production readiness across complex environments. Working closely with security, infrastructure, and application teams, you will troubleshoot critical issues, lead root-cause analysis, and implement sustainable solutions. This opportunity is ideal for an experienced platform engineer who enjoys solving complex infrastructure challenges, modernizing operational practices, and building secure, scalable systems in an enterprise environment.
Design, build, operate, and troubleshoot enterprise UNIX/Linux platforms throughout their lifecycle, from server provisioning and configuration to production readiness, maintenance, and retirement.
Lead Linux vulnerability remediation, security hardening, compliance validation, and audit readiness across large-scale enterprise environments.
Plan and execute operating system patching, kernel updates, platform upgrades, and fleet maintenance, using controlled rollouts, canary deployments, and reliable rollback procedures.
Develop and maintain infrastructure automation using Ansible, Python, Shell scripting, APIs, and infrastructure-as-code tools to improve operational efficiency and consistency.
Manage Linux workloads across AWS, Microsoft Azure, and Google Cloud, including server provisioning, bootstrap processes, platform images, private repositories, and lifecycle management.
Build and maintain standardized, secure Linux images using Packer or AWS Image Builder, integrating security controls and automated configuration management into golden-image workflows.
Design, implement, and maintain CI/CD pipelines, primarily with GitHub Actions or equivalent platforms, to automate patching, security hardening, compliance checks, and governed operational procedures.
Implement and maintain CIS benchmark compliance using Ansible Lockdown, investigate failed controls, remediate configuration gaps, and manage documented policy waivers with appropriate business justification and variable mapping.
Identify and remediate security vulnerabilities, including Qualys vulnerability QIDs associated with CVEs and packages, as well as CIS compliance CIDs.
Integrate security scanning tools such as SonarQube, Veracode, Snyk, and StackHawk into CI/CD workflows where applicable.
Improve platform reliability through monitoring, diagnostics, automated remediation, self-healing capabilities, and observability enhancements.
Investigate and resolve complex operating system, networking, storage, authentication, and performance issues, leading root-cause analysis and implementing preventive measures.
Manage secure access mechanisms, including SSH, sudo, Pluggable Authentication Modules (PAM), certificates, and privileged access controls.
Support incident, problem, and change management processes, production operations, and on-call response to maintain service availability and operational stability.
Use AI-assisted engineering tools to accelerate troubleshooting, log analysis, scripting, root-cause investigations, documentation, and automation development.
Maintain platform standards, technical documentation, operational runbooks, and reusable automation patterns while collaborating with security, infrastructure, and application teams to continuously improve platform services.