RHEL Platform Engineer
1. Operating System Patching and Maintenance
- Plan and execute scheduled RHEL OS patching and hardening activities.
- Support approximately 6 patching cycles per year, including activities across SIT, UAT, DR and Production environments.
- Provide system administration support during daytime, nighttime and weekend maintenance windows.
- Perform pre-patching validation, patch deployment, troubleshooting and post-patching verification.
- Conduct post-cycle gap assessments and follow up on identified issues.
- Prepare post-patching management and technical reports.
- Ensure systems remain compliant with organizational security standards and minimize major audit findings.
2. RHEL Golden Image Engineering
- Build and configure standardized RHEL golden images.
- Install and configure new operating system versions according to enterprise standards.
- Support installation and integration of infrastructure and security agents into golden images.
- Develop and Implement Chef Cookbook automation for the following
o New server provisioning
o In-place OS upgrades (IPUG)
o OS hardening based on CIS standards - Maintain platform architecture and technical documentation.
3. Golden Image & Automation Maintenance
- Perform annual maintenance of golden images for supported RHEL versions.
- Support environments covering RHEL 7 (partial), RHEL 8, RHEL 9 and RHEL 10.
- Patch and harden existing OS images.
- Maintain Chef cookbook automation for:
o New server provisioning o In-place OS upgrades (IPUG)
o OS hardening based on CIS standards - Review and update platform architecture documentation annually
4. System Software Patching & Upgrades
- Perform scheduled patching and upgrades of platform/system software.
- Support NPS patching activities approximately twice annually and platform upgrades as required.
- Support VCS patching activities approximately six times annually and platform upgrades as required.
- Perform compatibility assessment, implementation, validation and troubleshooting associated with upgrades.
5. Cybersecurity Alert & Vulnerability Assessment
- Review cybersecurity alerts received from regulatory, government and internal security teams.
- Research each alert to determine:
o Scope
o Platform impact
o Vulnerability exposure
o Required remediation actions - Match vulnerability and security-alert profiles against managed Linux platforms.
- Prepare and submit technical assessment reports to the relevant compliance/security teams.
- Track remediation actions and implement required changes in SIT and UAT environments.
- Coordinate with system administration and production teams for Production implementation.
Requirements:
- Strong hands-on experience with Red Hat Enterprise Linux (RHEL) administration.
- Hands-on experience with Linux OS patching, upgrades and troubleshooting.
- Experience with RHEL in-place upgrades (IPUG).
- Strong understanding of Linux security hardening and CIS benchmarks.
- Experience building and maintaining enterprise Linux golden images.
- Experience developing Chef cookbook automation for server provisioning, OS hardening and operating system upgrades.
- Strong automation and scripting skills using Chef, Ansible, Shell/Bash and/or Python.
- Experience supporting virtualized Linux server environments.
- Understanding of vulnerability management and cybersecurity remediation.
- Experience with high-availability or clustering technologies; Veritas Cluster Server (VCS) experience is preferred.
- Strong troubleshooting skills across OS, networking, storage, filesystem and system-service layers.
- Experience preparing architecture, operational and audit/compliance documentation.
Preferred Experience
- Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline.
- 5+ years of Linux/RHEL system administration or platform engineering experience.
- Experience supporting enterprise-scale or mission-critical environments.
- Banking or financial-services infrastructure experience is highly preferred.
- Experience working in environments with strict change-management, security and audit requirements.
- Experience supporting SIT, UAT, DR and Production environments.