Job Description

Rate:- 160K/M

exp:- 10+ years

Location: Gurugram only

Keywords:-

Puppet Enterprise

Puppet Manifests

Puppet Modules

Hiera

Gerrit/Github

Author of Modules(not only that he deployed)

Job Title: Senior Linux Systems Engineer (Core Infrastructure & Automation)

     This role requires an experienced and expert-level engineer to take ownership of mission-critical Linux infrastructure, driving efficiency through advanced automation, rigorous security hardening, and proactive system lifecycle management.

      Linux Core OS Engineering & Enterprise Administration

• System Internals & Performance Mastery: Possess expert-level proficiency in Red Hat Enterprise Linux (RHEL) and its derivatives (CentOS/Rocky Linux). Deep understanding of the Linux kernel, boot architecture (GRUB2/Systemd), and advanced performance tuning/troubleshooting utilizing tools like strace, tcpdump, sar, and journalctl.
• Robust Network & Security Configuration: Design and manage complex networking configurations including persistent static routing, IP aliasing, high-availability bonding/teaming, and VLAN tagging. Implement and enforce Least Privilege models via sophisticated sudoers management and Role-Based Access Control (RBAC).
• Centralized Identity Management: Architect, deploy, and maintain centralized authentication solutions (SSSD, LDAP, or Active Directory integration) to ensure consistent, secure access across the fleet.
• Security Hardening & Compliance: Proactively implement and audit OS-level security benchmarks (e.g., CIS, STIG) to minimize the attack surface and maintain compliance in regulated environments.
• Package & Lifecycle Management: Expertly manage the software lifecycle using dnf/yum/rpm, including the synchronization and maintenance of local repositories.
•  Advanced Tooling Expertise: Configuration Management (Puppet)

• Declarative State Enforcement: Architect and maintain the system state using Puppet to ensure 100% configuration consistency and zero drift.
• Scalable Puppet Architecture: Architect and develop high-quality, reusable Puppet code utilizing the Roles and Profiles pattern, ensuring all modules are idempotent, pluggable, and maintainable at scale.
• Modular Code Execution: Expertly craft clean manifests using Classes, Defined Types, and dynamic Templates (ERB/EPP) to deliver consistent system states across diverse environments while eliminating configuration drift.
• Facter & Custom Facts: Proficiency in using built-in facts for logic and writing Custom Facts in Ruby to gather unique system data.
• Hiera (Data Separation): Expert ability to separate logic from data using Hiera (YAML/EYAML) to manage environment-specific configurations (Dev vs. Prod).
• Secret Management: Securely manage sensitive data within Hiera using EYAML or HashiCorp Vault integrations.
• CI/CD for IaC: Automate the testing and deployment of Puppet code using Git-based workflows.
• Troubleshooting: Diagnose agent-side failures, SSL certificate issues, and Hiera lookup conflicts.

͏

Infrastructure Automation & Orchestration

• Major Version Lifecycle Management: Lead the planning and execution of significant, complex in-place OS version transitions (RHEL 7 → 8 and 8 → 9) using enterprise tooling like the Leapp framework to ensure minimal service disruption.
• Zero-Touch Patching & Critical Response: Architect and manage enterprise-wide patching and vulnerability remediation, including Zero-Day response, utilizing configuration management systems (Ansible or Puppet). Implement advanced techniques such as Kernel Live Patching (kpatch) to secure critical systems without requiring reboots.
• Infrastructure as Code (IaC) & Provisioning: Standardize the "Golden Image" server build process via PXE/Kickstart and manage all post-build configurations and state enforcement using automated code

 Virtualization, Compute, and Platform Management

• VMware vSphere Enterprise Administration: Expertly provision, maintain, and optimize Linux guest operating systems within large-scale ESXi clusters. Manage resource allocation, critical upgrades utilizing Snapshots, and ensure system availability through vMotion and DRS functionality.
• Cisco UCS Hardware Management: Administer and troubleshoot Cisco UCS B-Series blade infrastructure and Fabric Interconnects. Configure, maintain, and enforce hardware consistency via Service Profiles that underpin the Linux compute environment.
• Hypervisor and Guest OS Interoperability: Diagnose and resolve complex connectivity and performance issues spanning the physical hardware, the hypervisor layer, and the Linux Guest OS.

͏

Team Management

• Resourcing
  • Forecast talent requirements as per the current and future business needs
  • Hire adequate and right resources for the team 
  • Train direct reportees to make right recruitment and selection decisions 
• Talent Management
  • Ensure 100% compliance to Wipro’s standards of adequate onboarding and training for team members to enhance capability & effectiveness
  • Build an internal talent pool of HiPos and ensure their career progression within the organization
  • Promote diversity in leadership positions
• Performance Management
  • Set goals for direct reportees, conduct timely performance reviews and appraisals, and give constructive feedback to direct reports.
  • Ensure that organizational programs like Performance Nxt are well understood and that the team is taking the opportunities presented by such programs to their and their levels below
• Employee Satisfaction and Engagement
  • Lead and drive engagement initiatives for the team
  • Track team satisfaction scores and identify initiatives to build engagement within the team
  • Proactively challenge the team with larger and enriching projects/ initiatives for the organization or team 
  • Exercise employee recognition and appreciation 

͏

Deliver

͏