Senior Platform Engineer II

Accountabilities

Design, build, operate, and troubleshoot enterprise UNIX/Linux platforms throughout their lifecycle, from server provisioning and configuration to production readiness, maintenance, and retirement.
Lead Linux vulnerability remediation, security hardening, compliance validation, and audit readiness across large-scale enterprise environments.
Plan and execute operating system patching, kernel updates, platform upgrades, and fleet maintenance, using controlled rollouts, canary deployments, and reliable rollback procedures.
Develop and maintain infrastructure automation using Ansible, Python, Shell scripting, APIs, and infrastructure-as-code tools to improve operational efficiency and consistency.
Manage Linux workloads across AWS, Microsoft Azure, and Google Cloud, including server provisioning, bootstrap processes, platform images, private repositories, and lifecycle management.
Build and maintain standardized, secure Linux images using Packer or AWS Image Builder, integrating security controls and automated configuration management into golden-image workflows.
Design, implement, and maintain CI/CD pipelines, primarily with GitHub Actions or equivalent platforms, to automate patching, security hardening, compliance checks, and governed operational procedures.
Implement and maintain CIS benchmark compliance using Ansible Lockdown, investigate failed controls, remediate configuration gaps, and manage documented policy waivers with appropriate business justification and variable mapping.
Identify and remediate security vulnerabilities, including Qualys vulnerability QIDs associated with CVEs and packages, as well as CIS compliance CIDs.
Integrate security scanning tools such as SonarQube, Veracode, Snyk, and StackHawk into CI/CD workflows where applicable.
Improve platform reliability through monitoring, diagnostics, automated remediation, self-healing capabilities, and observability enhancements.
Investigate and resolve complex operating system, networking, storage, authentication, and performance issues, leading root-cause analysis and implementing preventive measures.
Manage secure access mechanisms, including SSH, sudo, Pluggable Authentication Modules (PAM), certificates, and privileged access controls.
Support incident, problem, and change management processes, production operations, and on-call response to maintain service availability and operational stability.
Use AI-assisted engineering tools to accelerate troubleshooting, log analysis, scripting, root-cause investigations, documentation, and automation development.
Maintain platform standards, technical documentation, operational runbooks, and reusable automation patterns while collaborating with security, infrastructure, and application teams to continuously improve platform services.
Requirements
At least 7 years of hands-on experience in platform engineering, including substantial experience administering and operating enterprise Linux environments.
Expert-level Linux administration skills across RHEL 8/9, Ubuntu 22.04/24.04, and Amazon Linux 2/2023, including kernel and security patching, package management, service administration, user and permission management, SSH configuration, logging, and production troubleshooting.
Practical experience with controlled patch deployments, canary rollouts, rollback procedures, and Linux lifecycle management, including tools such as dnf history.
Strong knowledge of CIS security benchmarks and experience applying them through Ansible Lockdown, remediating failed controls, and managing documented policy exceptions with business justification and corresponding Ansible variable mappings.
Advanced Ansible skills for configuration management, automated patching, security hardening, and platform provisioning.
Experience integrating security hardening into golden images and onboarding third-party Amazon Machine Images (AMIs), including bootstrap configuration, automation keys, domain joining, and agent installation.
Advanced hands-on experience managing Linux workloads across AWS, Azure, and Google Cloud, including EC2, user data, bootstrap automation, and private package repositories.
Strong Terraform and Ansible expertise, along with practical experience building standardized Linux images using Packer or AWS Image Builder.
Experience designing and maintaining CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, or comparable tools, including workflows for patching, compliance validation, and controlled operational execution.
Proven ability to remediate Qualys vulnerability QIDs involving CVEs and packages, address CIS compliance CIDs, and work with security scanning tools such as SonarQube, Veracode, Snyk, and StackHawk.
Demonstrated experience delivering automated platform solutions, including large-scale vulnerability remediation, compliance diagnostics, policy-waiver registers, and repository or mirror troubleshooting.
Strong troubleshooting and analytical skills, with the ability to diagnose complex operating system, networking, storage, authentication, and performance issues and lead effective root-cause analysis.
Solid understanding of secure access management, including SSH, sudo, PAM, certificates, and privileged access controls.
Familiarity with incident management, problem management, change management, production support, and on-call operational practices.
Experience using AI-assisted engineering tools to improve troubleshooting, scripting, log analysis, documentation, root-cause analysis, and automation workflows.
Strong communication, documentation, and collaboration skills, with the ability to coordinate across infrastructure, security, and application engineering teams.
AWS certifications or additional working knowledge of Azure and Google Cloud are advantageous.
Experience with immutable infrastructure, autoscaling, observability, monitoring, GitOps, and progressive delivery is desirable.
Familiarity with mixed Windows/Linux environments and IT operations, including DNS, load balancers, reverse proxies, Microsoft Active Directory, and Active Directory Federation Services (ADFS), is a plus.
Benefits
Remote working: Opportunity to work remotely from India, subject to the applicable working arrangements.
Full-time employment: A full-time opportunity to contribute to enterprise platform engineering initiatives.
Competitive compensation: Salary aligned with experience, technical expertise, and the overall employment package.
Professional development: Opportunities to deepen expertise in Linux infrastructure, cloud engineering, security automation, and platform reliability.
Modern technology stack: Hands-on exposure to AWS, Azure, Google Cloud, Terraform, Ansible, CI/CD, security tooling, and AI-assisted engineering.
Technical ownership: Lead impactful platform improvements and influence infrastructure standards, automation strategies, and security practices.
Cross-functional collaboration: Work with infrastructure, security, and application engineering teams on complex enterprise challenges.
Continuous learning: Develop skills in cloud platforms, compliance automation, immutable infrastructure, observability, and progressive delivery.
Inclusive work environment: Join a workplace that values respect, diversity, collaboration, and equal employment opportunities.
Healthcare and additional benefits: Healthcare coverage, paid leave, retirement benefits, and other employment perks are subject to the partner company's policies and employment package.