Linux Infrastructure Engineer / Hardening & Automation Expert

Project overview

Start Date: By early December 2026 at the latest

Project details

To be specified

Availability: Confirmed profile, must be available for a quick start, by early December at the latest.

Mission Context

As part of taking over and securing Linux administration activities, we are seeking an experienced Linux Infrastructure Engineer with solid expertise in system hardening and automation. The consultant will be involved in the maintenance, evolution, and security of Linux models, with a priority on compliance with ANSSI and CIS security frameworks. A two-day skills transfer is planned during the first half of November. The consultant must therefore be operational and autonomous from the start.

Main Missions

Technical Skills Required

Essential:

Complementary Environments:

Profile Sought

Key Point: We are primarily looking for a Linux expert with real operational experience in hardening and CIS / ANSSI / OpenSCAP compliance. Knowledge of virtualization, storage, and backup is an appreciated bonus.

Imperative Availability: Start by early December 2026 at the latest

• Linux Administration and Automation
• Creation and monthly updates of RHEL 8 to 10 and Ubuntu 22 to 26 models.
• Management of models in VMware and Nutanix environments.
• Automation of operations using Ansible and AWX.
• Construction and maintenance of system images (Kickstart, cloud-init).
• Management of version upgrades, particularly with Leapp.
• System Hardening and Compliance – PRIORITY
• Hardening of Linux images and models according to security frameworks.
• Implementation and operation of OpenSCAP.
• Application of ANSSI and CIS recommendations.
• Integration of CIS rules defined by the security team.
• Validation of rule compliance on existing virtual machines.
• Analysis of compliance deviations and implementation of necessary corrections.
• Red Hat Ecosystem
• Management of Red Hat subscriptions and repositories.
• Generalization of AWX job templates for subscription and repository management, including on RHEL 7 and earlier versions.
• Management of technical relationships with Red Hat support.
• Automation of Physical Server Deployment
• Administration and evolution of the physical server deployment factory.
• Management of PXE and iLO mechanisms.
• Implementation of secure boot.
• Use of HPE OneView.
• RUN / MCO Infrastructure Support
• Contribution to RUN and operational maintenance activities.
• Support for virtualization, storage, and backup environments.
• Intervention in coordination with other technical teams.
• Expertise in Linux administration: Red Hat Enterprise Linux (RHEL) and Ubuntu.
• Significant experience in Linux hardening and system security.
• Mastery of OpenSCAP and ANSSI and CIS frameworks.
• Mastery of Ansible: roles, playbooks, and automation.
• Practice with AWX or Ansible Automation Platform.
• Linux image construction: Kickstart, cloud-init.
• Management of RHEL version upgrades with Leapp.
• Good knowledge of the Red Hat ecosystem: subscriptions, repositories, and support.
• Virtualization: VMware and Nutanix AHV.
• HPE Physical Servers: iLO, PXE, OneView.
• Storage: NetApp and Hitachi.
• Backup: Veeam.
• Experienced Linux Infrastructure Engineer.
• High technical autonomy and ability to quickly take charge of an existing scope.
• Rigor in production deployment procedures (DEV, testing, PROD).
• Ability to document operations and work in coordination with security and infrastructure teams.
• Start: ASAP
• Duration: 1 an renouvelable
• Remote: hybrid
• Location: Paris, Île-de-France, FR
• Languages: French