IT Infrastructure Specialist

​Specialist, IT Infrastructure
Req ID: 137476
Remote Position: Hybrid
Hiring Manager: Paul Stanners
Band: 08 
Region: Asia 
Country: India 
State/Province: Chennai
City:  Guindy, Chennai

General Overview

Functional Area:  Information Technology (ITM)
Career Stream:  IT Infrastructure (INFR)
Role:  Specialist (SPE)
Job Title: Specialist, IT Infrastructure    
Job Code:  SPE-ITM-INFR
Job Level:  Level 08    
Direct/Indirect Indicator:  Indirect

Summary

The Linux Desktop Engineer will own the design, deployment, configuration, and structural maintenance of Celestica's high-performance Linux computing platform. This role directly supports the Hardware Platform Solutions (HPS) engineering group by managing a fleet of approximately 50 HP ZBook Mobile Workstations preinstalled with Ubuntu and optimized for advanced AI-based software development.

Operating at the intersection of enterprise endpoint compliance and agile engineering infrastructure , the successful candidate will use HCL BigFix as the primary Endpoint Management framework. Responsibilities include developing deployment packages for core endpoint security software , managing monthly patching cycles , and troubleshooting highly specialized developer toolchains to maximize engineering velocity.

Key Responsibilities

• Fleet Configuration & Baseline Optimization: Own the baseline golden imaging, mass deployment, and configuration maintenance of the HP ZBook workstation fleet utilizing HCL BigFix.
• Silent Software Packaging: Architect and deploy automated, silent installation packages for all enterprise and custom engineering endpoint software via BigFix fixlets.
• Endpoint Security Management: Install and administer Celestica’s standard security applications, including CrowdStrike Falcon, ThreatLocker, and Zscaler ZPA.
• Developer Persona Customization: Configure application controls specifically for the engineering developer workspace. This involves deploying ThreatLocker in a persistent Learning Mode with dedicated sandbox path exceptions (such as ~/Workspace) to prevent process blocks during source compilation.
• Exclusion Path Auditing: Implement and maintain required anti-malware scan exclusions across engineering build paths (e.g., /home/*/src/, make, gcc, cargo) to ensure frictionless local compilation.
• Patching & Vulnerability Remediation: Support and execute monthly operating system and application patching cycles. Ensure critical security patches are vetted and pushed to engineering systems within a mandatory 24-hour window when required.