Infrastructure Engineer

### **Overview**

We are seeking a high\-caliber **Infrastructure Engineer** to join our Security \& DevSecOps squad. In this role, you will translate architectural visions into robust, executable **designs for** on\-premises OpenShift clusters and underlying hardware abstractions. We are looking for a systems expert who can work **independently** to manage the complexity of bare\-metal OpenShift deployments and mission\-critical storage.

• *Our Core Infrastructure Stack**
• --------------------------------

• *OpenShift Platform \& Virtualization**

• **OpenShift Container Platform (OCP)** administration on **bare\-metal/on\-prem** environments
• + **OpenShift Virtualization** for managing VM\-based workloads alongside containers
• + **RHEL (Red Hat Enterprise Linux)** advanced system administration and performance tuning**Networking \& Storage**
• + **OpenShift Networking** (Software Defined Networking / OVN\-Kubernetes)
• + **OpenShift Data Foundation (ODF)** for persistent, software\-defined storage
• + Load balancing, ingress controllers, and DNS management within a restricted network**Security \& Observability**
• + **Cluster Security** (Security Context Constraints (SCC), RBAC, Network Policies)
• + **Monitoring \& Alerting** (Prometheus, Grafana, and Alertmanager)
• + **Disaster Recovery (DR)** and high\-availability (HA) planning for stateful workloads
• Knowledge of **Infrastructure as Code (Ansible/OpenTofu)** for cluster day\-2 operations.

• *Key Responsibilities**
• -----------------------

• Convert high\-level blueprints into detailed cluster specs, including IP address management (IPAM), storage topology, and VLAN tagging for bare\-metal OCP.
• **Bare\-Metal Administration:** Independently lead the installation, scaling, and lifecycle management of OpenShift on physical hardware, including firmware updates and node provisioning.
• **Storage Orchestration:** Architect and manage **OpenShift Data Foundation (ODF)**, ensuring persistent storage is highly available and performant for simulation databases.
• **Network Engineering:** Design and troubleshoot complex **OVN\-Kubernetes** network patterns, ensuring secure and low\-latency communication between simulation services.
• **OpenShift Virtualization:** Lead the migration and management of legacy VM workloads into OpenShift, providing a unified control plane for the digital twin ecosystem.
• **Cluster Security Hardening:** Implement and enforce strict **SCC and RBAC** policies, ensuring the platform complies with global security benchmarks and the squad's DevSecOps standards.
• **Monitoring \& DR:** Establish comprehensive monitoring with **Prometheus/Grafana** and independently design and test **Disaster Recovery** scenarios to ensure zero\-data\-loss targets.
• **Autonomous Troubleshooting:** Act as the final escalation point for cluster\-level performance issues, networking bottlenecks, or storage failures, resolving them without external guidance.

• *Preferred Qualifications**
• ---------------------------

• + **6 to 8 years** of experience in Infrastructure Engineering or Systems Administration.
• Expert\-level mastery of **Red Hat OpenShift (OCP)**; Red Hat Certified Specialist in OpenShift Administration/Automation is highly preferred.
• Deep experience in **Bare\-Metal** deployments and **RHEL** administration.
• Hands\-on proficiency with **OpenShift Data Foundation (ODF)** and **OpenShift Virtualization**.
• Strong understanding of **Kubernetes Networking (SDN/OVN)** and security constructs (Network Policies).
• Demonstrated ability to work **independently** on complex hardware\-to\-software integration projects.

• *Highly Desirable**
• -------------------

• Experience supporting high\-compute **Digital Twin or Simulation** environments.
• Experience with backup solutions for OpenShift (Velero or OADP).
• Experience in managing on\-premises infrastructure for global product engineering hubs.
• Exposure to industrial domains such as **Manufacturing, Logistics, or Transportation** is a plus.
• Exposure to CI/CD and platform automation tools such as GitHub Actions, Jenkins, or GitOps practices to better align with DevSecOps operating models.
• Hybrid\-cloud exposure (AWS, Azure, or GCP) as a preferred qualification