OS Build n Hardening

About LTIMindtree

About Client:

Our client is a global digital solutions and technology consulting company headquartered in Mumbai, India. The company generates annual revenue of over $4.29 billion (₹35,517 crore), reflecting a 4.4% year-over-year growth in USD terms. It has a workforce of around 86,000 professionals operating in more than 40 countries and serves a global client base of over 700 organizations.

Our client operates across several major industry sectors, including Banking, Financial Services & Insurance (BFSI), Technology, Media & Telecommunications (TMT), Healthcare & Life Sciences, and Manufacturing & Consumer. In the past year, the company achieved a net profit of $553.4 million (₹4,584.6 crore), marking a 1.4% increase from the previous year. It also recorded a strong order inflow of $5.6 billion, up 15.7% year-over-year, highlighting growing demand across its service lines.

Key focus areas include Digital Transformation, Enterprise AI, Data & Analytics, and Product Engineering—reflecting its strategic commitment to driving innovation and value for clients across industries.

Job Description:

Senior Infrastructure Automation Engineer (Zero-Touch GPU Cloud Stack – Linux Image Lifecycle)

We are seeking a Senior Infrastructure Automation Engineer with 10+ years of experience to lead the design and implementation of a Zero-Touch Build, Upgrade, and Certification pipeline for our on-prem GPU cloud infrastructure. This role focuses on automating the full stack—from hardware provisioning through OS and Kubernetes deployment—leveraging 100% GitOps workflows . The candidate will bring deep expertise in Linux systems automation, image management, and compliance hardening, with a strong foundation in infrastructure engineering.

Key Responsibilities

• Architect and implement a fully automated, GitOps-based pipeline for building, upgrading, and certifying the Linux operating system layer in the GPU cloud stack (hardware → OS → Kubernetes → platform).
• Design and automate Linux image builds using Packer , Kickstart , and Ansible .
• Integrate CIS/STIG compliance hardening and OpenSCAP scanning directly into the image lifecycle and validation workflows.
• Own and manage kernel module/driver automation , ensuring version compatibility and hardware enablement for GPU nodes.
• Collaborate with platform, SRE, and security teams to standardize image build and deployment practices across the stack.
• Maintain GitOps-compliant infrastructure-as-code repositories, ensuring traceability and reproducibility of all automation logic.
• Build self-service capabilities and frameworks for zero-touch provisioning, image certification, and drift detection.
• Mentor junior engineers and contribute to strategic automation roadmap initiatives.

Required Skills & Experience

• 10+ years of hands-on experience in Linux infrastructure engineering, system automation, and OS lifecycle management.
• Primary key skills required are Ansible, Python, Packer, Kickstart, OpenSCAP
• Deep expertise with:
• Packer for automated image builds
• Kickstart for unattended OS provisioning
• OpenSCAP for security compliance and policy enforcement
• Ansible for configuration management and post-build customization
• Strong understanding of CIS/STIG hardening standards and their application in automated pipelines.
• Experience with kernel and driver management , particularly in hardware-accelerated (GPU) environments.
• Proven ability to implement GitOps workflows for infrastructure automation (e.g., Git-backed pipelines for image release and validation).
• Solid knowledge of Linux internals , bootloaders, and provisioning mechanisms in bare-metal environments.
• Exposure to Kubernetes , particularly in the context of OS-level customization and compliance.
• Strong collaboration skills across teams including security, SRE, platform, and hardware engineering.
• Bonus:
• Familiarity with image signing, SBOM generation, or secure boot workflows
• Experience working in regulated or compliance-heavy environments (e.g., FedRAMP, PCI-DSS)
• Contributions to infrastructure automation frameworks or open-source tools