2 days ago
Remote, IndiaSenior

Responsibilities

  • Build, operate, troubleshoot, patch, upgrade, harden, and maintain enterprise UNIX/Linux platforms across their full lifecycle.
  • Lead Linux vulnerability remediation, CIS benchmark implementation, security hardening, compliance validation, audit readiness, and documented policy waivers.
  • Automate platform operations using Ansible, Python, Shell, APIs, infrastructure as code, Git workflows, and CI/CD pipelines.
  • Manage Linux workloads and image lifecycles across AWS, Azure, and Google Cloud.
  • Build monitoring, diagnostics, auto-remediation, self-healing, and availability improvements.
  • Resolve operating system, network, storage, authentication, and performance issues and lead root-cause analysis and preventive actions.
  • Manage secure access controls including SSH, sudo, PAM, certificates, and privileged access.
  • Support incident, problem, change, production operations, and on-call response while maintaining platform standards, runbooks, procedures, and documentation.

Requirements

  • 7+ years of hands-on Platform Engineering experience, including substantial enterprise Linux operations.
  • Expert administration of RHEL 8/9, Ubuntu 22.04/24.04, and Amazon Linux 2/2023, including security and kernel patching, canary rollouts, rollback, users and sudo, SSH configuration, services, permissions, logging, and production troubleshooting.
  • Experience applying CIS benchmarks with Ansible Lockdown, remediating failed controls, and managing documented policy waivers with business justification and Ansible variable mapping.
  • Strong Ansible experience for configuration management, patching, hardening, golden images, and third-party AMI onboarding.
  • Advanced AWS, Azure, and Google Cloud experience for Linux workloads, including EC2, user data/bootstrap, and private repositories.
  • Advanced Terraform experience and hands-on standard Linux image development with Packer or AWS Image Builder.
  • Experience designing CI/CD pipelines with GitHub Actions, Azure DevOps, Jenkins, or similar tools for patching, CIS workflows, and governed operational runbooks.
  • Experience remediating Qualys vulnerability QIDs and CIS compliance CIDs and integrating SonarQube, Veracode, Snyk, and StackHawk into CI/CD where applicable.
  • Experience delivering automated platform solutions such as large-scale vulnerability remediation, waiver registers, and mirror or compliance diagnostics.
  • Preferred qualifications include AWS certifications or working knowledge of Azure and Google Cloud, plus experience with immutable infrastructure, autoscaling, observability, monitoring, GitOps, progressive delivery, mixed Windows/Linux environments, DNS, load balancers, reverse proxies, Microsoft Active Directory, and ADFS.

Tech Stack

AnsibleAWSAzureGitGitHub ActionsGoogle CloudJenkinsLinuxPythonSonarQubeTerraform

Categories

First American Financial Corporation

About First American Financial Corporation

10,000+ employees

First American Financial Corporation provides title insurance, closing/settlement services, and real-estate risk and property data products to lenders, agents, homebuyers/sellers, and commercial property firms. It also offers valuation services, mortgage subservicing, and home warranties, monetizing through insurance premiums and fee-based transactions and data licensing. Founded in 1889 and headquartered in Santa Ana, California, First American is a Fortune 500 public company trading on the NYSE under the ticker FAF.

Contact me