Linux Engineer

As a Senior Linux Systems Engineer where you will have the opportunity to work with and across multiple technology platforms leveraging the latest technologies to ensure the ongoing maintenance that make trading infrastructure run reliably and performing as optimally as possible. Additionally, you will play a critical role in continuing to upgrade the data center. 

Responsibilities

Engineer, implement, and operate network and systems elements.

Manage operating systems, software and hardware lifecycle, storage systems, data backup, and data centers.

Ensure the security of the infrastructure and remediation of vulnerabilities.

Maintain systems, network, and facilities documentation.

Contribute to engineering methods, policies, and development projects.

Resolve network and systems trouble and handle trouble escalations.

Contribute to maximum performance, stability, security, and efficiency in the environment.

Produce robust and sustainable works, support and strengthen the team through education and knowledge sharing.

Preferred Experience 

Senior-level systems administration skills with Linux (RHEL, Centos) and UNIX-like systems.

System provisioning and configuration systems (Cobbler, Foreman, Puppet, Chef, Ansible, Salt, Kickstart), automation, performance tuning, software installation, patching.

Storage systems (EMC, Netapp, NFS, CIFS, IP-based, SAN), volume managers and file systems (LVM, Ext3/4, XFS, ZFS, md), data backup systems (Netbackup, Amanda, Bacula), host-based storage systems (RAID, JBOD, HBA); scale-out storage, file systems, and object systems (Ceph, Gluster, Swift, S3, GPFS, Lustre).

Low-latency OS and networking, OS kernel bypass, low-latency server networking (Solarflare, Mellanox, Exablaze), resource isolation, hardware layout and locality.

System and application troubleshooting, application <-> OS interaction, debug info collection, use of OS tracing and profiling tools (Systemtap, dtrace, truss, strace, ftrace, perf), debugger usage.

Understanding of Linux kernel fundamentals, Linux kernel customization for low-latency and RT systems, Linux kernel tuning, Linux kernel debugging.

Cluster / Grid and scale-out computing (Hadoop), HA / clustering (VCS, RedHat Cluster).

Server virtualization (Linux KVM, libvirt, QEMU, Vmware, oVirt/RHEV), IaaS/"Cloud" computing (OpenStack, AWS), virtualization networking (Linux bridge, Open vSwitch, VXLAN, SDN).

Capacity planning, load testing, micro benchmarking, requirements determination, budgeting.

Systems programming in shell script (Bourne), Perl, Python, C, Java; APIs; development tools (Make, autoconf, Ant, compilers), version control (Subversion, Git), and practices.

Database use and administration experience: SQL, Postgres, MySQL, Mongodb

LDAP directories (OpenLDAP, RedHat Directory), centralized authentication, authorization, and accounting (IPA, Kerberos, Radius, TACACS, PAM), two-factor authentication (RSA SecurID).

DNS (Bind), IP address management systems, and DHCP.

Logging and audit systems (Syslog, rsyslog, syslog-ng, logwatch, swatch, SEC, logstash, ELK, Splunk).

Distributed timekeeping systems (GPS, NTP, PTP/IEEE1588, PPS, IRIG) and hardware (EndRun, Meinberg, Symmetricom, Spectracom).

Monitoring infrastructure and monitoring systems (Nagios, Icinga, OpenNMS, BMC, RRD, StatsD, Graphite, Grafana, collectd, collectl, Sar).

Use of ticket/issue systems and wikis; writing documentation for systems and network infrastructure, procedures, and tooling.

TCP/IP suite, Ethernet networking (VLAN, STP, 802.1q, QoS, IGMP), IP routing (OSPF, BGP) and internetworking, IP multicast and multicast routing (PIM), network access-control, NAT, tunneling.

Information security practices, policies, least privilege, RBAC, encryption (GPG, SSL/TLS, PKI).

System security practices and tools (Tripwire, Samhain, AIDE), OS firewalls (iptables, ipfw, pf).

Network security practices and devices (Cisco, Palo Alto, Checkpoint).

Data center and low-latency network infrastructure (Cisco, Arista, Juniper).

Packet sniffer operation and packet dissection (Sniffer, Ethereal, tcpdump, libpcap)

Operating controls, change management, failure analysis, vendor interaction.

Data center facilities management, equipment racking and cabinets, network cabling (structured, patching, metallic, optical), equipment identification, inventory, equipment power and cooling.

Commodity x86 server hardware (HP, Dell, Supermicro).

Troubleshooting of hardware problems, server disassembly and assembly, capable with fixed-config and modular network equipment, swapping components (CPU, RAM, hard drives, peripheral cards, etc..)

All your information will be kept confidential according to EEO guidelines.