Overview
We are seeking a high-caliber Infrastructure Engineer to join our Security & DevSecOps squad. In this role, you will translate architectural visions into robust, executable designs for on-premises OpenShift clusters and underlying hardware abstractions. We are looking for a systems expert who can work independently to manage the complexity of bare-metal OpenShift deployments and mission-critical storage.
Our Core Infrastructure Stack
OpenShift Platform & Virtualization
OpenShift Container Platform (OCP) administration on bare-metal/on-prem environments
· OpenShift Virtualization for managing VM-based workloads alongside containers
· RHEL (Red Hat Enterprise Linux) advanced system administration and performance tuning
Networking & Storage
· OpenShift Networking (Software Defined Networking / OVN-Kubernetes)
· OpenShift Data Foundation (ODF) for persistent, software-defined storage
· Load balancing, ingress controllers, and DNS management within a restricted network
Security & Observability
· Cluster Security (Security Context Constraints (SCC), RBAC, Network Policies)
· Monitoring & Alerting (Prometheus, Grafana, and Alertmanager)
· Disaster Recovery (DR) and high-availability (HA) planning for stateful workloads
Knowledge of Infrastructure as Code (Ansible/OpenTofu) for cluster day-2 operations.
Key Responsibilities
Convert high-level blueprints into detailed cluster specs, including IP address management (IPAM), storage topology, and VLAN tagging for bare-metal OCP.
Bare-Metal Administration: Independently lead the installation, scaling, and lifecycle management of OpenShift on physical hardware, including firmware updates and node provisioning.
Storage Orchestration: Architect and manage OpenShift Data Foundation (ODF) , ensuring persistent storage is highly available and performant for simulation databases.
Network Engineering: Design and troubleshoot complex OVN-Kubernetes network patterns, ensuring secure and low-latency communication between simulation services.
OpenShift Virtualization: Lead the migration and management of legacy VM workloads into OpenShift, providing a unified control plane for the digital twin ecosystem.
Cluster Security Hardening: Implement and enforce strict SCC and RBAC policies, ensuring the platform complies with global security benchmarks and the squad's DevSecOps standards.
Monitoring & DR: Establish comprehensive monitoring with Prometheus/Grafana and independently design and test Disaster Recovery scenarios to ensure zero-data-loss targets.
Autonomous Troubleshooting: Act as the final escalation point for cluster-level performance issues, networking bottlenecks, or storage failures, resolving them without external guidance.
Preferred Qualifications
· 6 to 8 years of experience in Infrastructure Engineering or Systems Administration.
Expert-level mastery of Red Hat OpenShift (OCP) ; Red Hat Certified Specialist in OpenShift Administration/Automation is highly preferred.
Deep experience in Bare-Metal deployments and RHEL administration.
Hands-on proficiency with OpenShift Data Foundation (ODF) and OpenShift Virtualization .
Strong understanding of Kubernetes Networking (SDN/OVN) and security constructs (Network Policies).
Demonstrated ability to work independently on complex hardware-to-software integration projects.
Highly Desirable
Experience supporting high-compute Digital Twin or Simulation environments.
Experience with backup solutions for OpenShift (Velero or OADP).
Experience in managing on-premises infrastructure for global product engineering hubs.
Exposure to industrial domains such as Manufacturing, Logistics, or Transportation is a plus.
Exposure to CI/CD and platform automation tools such as GitHub Actions, Jenkins, or GitOps practices to better align with DevSecOps operating models.
Hybrid-cloud exposure (AWS, Azure, or GCP) as a preferred qualification