Job Description
The Infrastructure team leads the overall operational oversight and management for server operating systems, along with engineering and support of general Core Services. This person is responsible for all server infrastructure, server operating systems, dedicated servers, guest operating systems, and common services. Supported Services include, but are not limited to Active Directory, Redhat Identity Manager, InfoBlox, CyberArk, RSA, Citrix, antivirus (CLAMAV and SEP), and patching (Spacewalk, Satellite, SCCM and WSUS), along with general operating systems support for Linux (Redhat, AIX, and Solaris) and Windows Server (2008, 2012, 2016).
Significant experience with RedHat and Microsoft operating systems technologies is required, with good to very strong experience with vmWare strongly preferred.
Engineers will have a primary role supporting the virtual server enterprise, with a principal focus on the Windows Server and Linux server systems. The successful Engineer provides expertise in managing, operating systems patching, and supporting cloud environments. The position requires a deep technical knowledge of Redhat Enterprise Linux (v5/6/7), Solaris, and AIX, along with Microsoft Windows Server (2008, 2012, 2016). Additionally, a successful Engineer in the Cloud Server team requires hands-on experience with VMware virtualization.
This position requires an experienced engineer who is goal-oriented, able to multitask, and is someone who has the ability to work independently and in a small group.
· Maintain and deploy systems and services within our virtual and cloud enterprise
· Design, develop, and deploy automation/script processes to streamline team workflows
· Maintain and utilize server patching systems, both in Linux & Windows (Ex. Spacewalk,SCCM, Satellite, WSUS)
· Manage server security remediation activities including vulnerability scans using Qualys
· Manage server operating systems patching using SCCM 2012 and Spacewalk (moving to Satellite)
· Manage server hardening, including scanning for policy compliance, using Qualys and remediation using Puppet
· Maintain connectivity to host-based intrusion detection, using OSSEC and Alien Vault.
· Compliance and internal audit responsibilities, providing evidence requests as required
· Mentor junior engineers and act as a local escalation for operating systems and core services support within the Production Operations environments.
· Create policy, process and procedure documentation to support systems implementations, projects, and routine operational tasks
EDUCATION and/or CERTIFICATIONS
· Bachelor's degree in Computer Science, Computer Engineering or Information Technology
· Red Hat certification – Red Hat Certified Systems Administrator preferred
· Microsoft Server Certification – Microsoft Certified Systems Expert preferred
· VMWare certification – VMware Certified Associate preferred
· ITIL V3/2007 Edition or ITIL 2011 Edition certification preferred
· CISSP preferred
REQUIRED EXPERIENCE
- 10-15 years of experience as a Lead or Senior Systems Engineer, with concentrated experience with server operating systems and servers, and demonstrated experience with virtualization, storage, and networking.
- Experience with support of service request, incident resolution, and change management processes within a Production Operations environment
- Senior level technical infrastructure and architectural knowledge, including design of production, staging, QA and development infrastructures running in 24x7 environments.
- Hands-on administrative management experience supporting Linux systems; Red Hat Enterprise, Sun Solaris, and IBM AIX
- Hands-on administrative management experience supporting Microsoft server operating systems, including Windows Server 2003, 2008, and 2012.
· Hands-on administrative management experience supporting VMware hypervisor systems; ESXi, vCenter, vSphere, Site Recovery Manager, etc
· Demonstrated experience with enterprise-level virtualization software maintenance using VMware vSphere 5.x servers and clusters.
· Knowledge of one or more scripting languages – Shell, Perl, Python, Ruby, etc.
· Proven history of incident response, diagnostic activities, Root Cause Analysis (RCA), Corrective Action Plans, and advanced troubleshooting
· Has helped to develop documentation of technical processes and workflows; policy, process, procedures, run-books
· Experience with coordination of technical support with vendors, when necessary
· Proven ability to strategically analyze the risks, benefits, and opportunities associated with a solution.
· Knowledge of industry security principles and server vulnerability remediation practices
· Hands on experience using Satellite and/or Spacewalk to develop and manage server patching and vulnerability response
· Hands on experience with Microsoft SCCM 2102 to develop and manage server patching and vulnerability response
· Strong familiarity with vulnerability scanning and remediation, preferably using Qualys
· Strong familiarity with configuration assessment scanning and remediation, preferably using Qualys
· Familiarity with configuration host-based intrusion detection, preferably using OSSEC and Alien Vault
· Strong familiarity with at least two of the following audit standards; SSAE16-SOC2, PCI DSS, HIPAA, SOX
· Proven recent experience with Change Management within a 24/7 technology operations environment
· Recent experience with Configuration Management within a 24/7 technology operations environment
Non-technical Skills
· Provides technical leadership on small projects from inception to deployment
· Experience providing technical leadership to junior engineers
· Multi-task multiple projects at one time as well as work in a high-pressured, unstructured, and yet customer-oriented environment.
· Experience in a 24/7 Technology Operations environment; technology is part of the product
· Ability to think on an enterprise level
· Ensures technology and procedures remain current and compliant with GTS standards and policies
· Develops and monitors statistics and metrics to measure operational efficiencies and utilization trends of data center operations