Job Description

Rate: - 160K/M

exp: - 10+ years

Location: Gurugram only

Keywords: -

Puppet Enterprise

Puppet Manifests

Puppet Modules

Hiera

Gerrit/Github

Author of Modules(not only that he deployed)

Job Title: Senior Linux Systems Engineer (Core Infrastructure & Automation)

This role requires an experienced and expert-level engineer to take ownership of mission-critical Linux infrastructure, driving efficiency through advanced automation, rigorous security hardening, and proactive system lifecycle management.

Linux Core OS Engineering & Enterprise Administration

• System Internals & Performance Mastery: Possess expert-level proficiency in Red Hat Enterprise Linux (RHEL) and its derivatives (CentOS/Rocky Linux). Deep understanding of the Linux kernel, boot architecture (GRUB2/Systemd), and advanced performance tuning/troubleshooting utilizing tools like strace,tcpdump,sar, and journalctl.

• Robust Network & Security Configuration: Design and manage complex networking configurations including persistent static routing, IP aliasing, high-availability bonding/teaming, and VLAN tagging. Implement and enforce Least Privilege models via sophisticated sudoers management and Role-Based Access Control (RBAC).

• Centralized Identity Management: Architect, deploy, and maintain centralized authentication solutions (SSSD, LDAP, or Active Directory integration) to ensure consistent, secure access across the fleet.

• Security Hardening & Compliance: Proactively implement and audit OS-level security benchmarks (e.g.,CIS, STIG) to minimize the attack surface and maintain compliance in regulated environments.

• Package & Lifecycle Management: Expertly manage the software lifecycle using dnf/yum/rpm, including the synchronization and maintenance of local repositories.

• Advanced Tooling Expertise: Configuration Management (Puppet)

• Declarative State Enforcement: Architect and maintain the system state using Puppet to ensure 100% configuration consistency and zero drift.

• Scalable Puppet Architecture: Architect and develop high-quality, reusable Puppet code utilizing the Roles and Profiles pattern, ensuring all modules are idempotent, pluggable, and maintainable at scale.

• Modular Code Execution: Expertly craft clean manifests using Classes, Defined Types, and dynamic Templates (ERB/EPP) to deliver consistent system states across diverse environments while eliminating configuration drift.

• Facter & Custom Facts: Proficiency in using built-in facts for logic and writing Custom Facts in Ruby to gather unique system data.

• Hiera (Data Separation): Expert ability to separate logic from data using Hiera (YAML/EYAML) to manage environment-specific configurations (Dev vs. Prod).

• Secret Management: Securely manage sensitive data within Hiera using EYAML or Hashi Corp Vault integrations.

• CI/CD for IaC: Automate the testing and deployment of Puppet code using Git-based workflows.

• Troubleshooting: Diagnose agent-side failures, SSL certificate issues, and Hiera lookup conflicts.

͏

Infrastructure Automation & Orchestration

• Major Version Lifecycle Management: Lead the planning and execution of significant, complex in-place OS version transitions (RHEL 7 → 8 and 8 → 9) using enterprise tooling like the Leapp framework to ensure minimal service disruption.

• Zero-Touch Patching & Critical Response: Architect and manage enterprise-wide patching and vulnerability remediation, including Zero-Day response, utilizing configuration management systems (Ansible or Puppet). Implement advanced techniques such as Kernel Live Patching (kpatch) to secure critical systems without requiring reboots.

• Infrastructure as Code (IaC) & Provisioning: Standardize the "Golden Image" server build process via PXE/Kickstart and manage all post-build configurations and state enforcement using automated code

Virtualization, Compute, and Platform Management

• VMware v Sphere Enterprise Administration: Expertly provision, maintain, and optimize Linux guest operating systems within large-scale ESXi clusters. Manage resource allocation, critical upgrades utilizing Snapshots, and ensure system availability through v Motion and DRS functionality.

• Cisco UCS Hardware Management: Administer and troubleshoot Cisco UCS B-Series blade infrastructure and Fabric Interconnects. Configure, maintain, and enforce hardware consistency via Service Profiles that underpin the Linux compute environment.

• Hypervisor and Guest OS Interoperability: Diagnose and resolve complex connectivity and performance issues spanning the physical hardware, the hypervisor layer, and the Linux Guest OS.

͏

Team Management Resourcing
- Forecast talent requirements as per the current and future business needs

	- Hire adequate and right resources for the team

	- Train direct reportees to make right recruitment and selection decisions

**Talent Management**
	- Ensure 100% compliance to Wipro’s standards of adequate onboarding and training for team members to enhance capability & effectiveness

	- Build an internal talent pool of Hi Pos and ensure their career progression within the organization

	- Promote diversity in leadership positions

**Performance Management**
	- Set goals for direct reportees, conduct timely performance reviews and appraisals, and give constructive feedback to direct reports.

	- Ensure that organizational programs like Performance Nxt are well understood and that the team is taking the opportunities presented by such programs to their and their levels below

**Employee Satisfaction and Engagement**
	- Lead and drive engagement initiatives for the team

	- Track team satisfaction scores and identify initiatives to build engagement within the team

	- Proactively challenge the team with larger and enriching projects/ initiatives for the organization or team

	- Exercise employee recognition and appreciation

͏

Deliver

		No
		Performance Parameter
		Measure
		1
		Operations of the tower
		SLA adherence

		Knowledge management

		CSAT/ Customer Experience

		Identification of risk issues and mitigation plans

		Knowledge management
		2
		New projects
		Timely delivery

		Avoid unauthorised changes

		No formal escalations

͏