Role: Infrastructure Engineer
Location: Alameda, United States (Onsite)
Immigration status: USC, GC
Duration: 6 months
Delivery Role: Infrastructure Engineer
Job description:
Primary Skills: Wind River VxWorks, VMware Vsphere Hypervisor, firewalls, DNS, scripting
The Lab Operations team (LabOps) supports internal support to the engineering, sales engineering, and support teams inside Wind River. We provide reliable computer labs, networks, target devices and tools for engineers to develop, test and validate their software and solutions. We manage a variety of target hardware, from single board embedded targets to large scale distributed cloud solutions as well as all the infrastructure to rack and support these systems. Our team provides local and remote support to several global engineering development sites. Our target hardware and lab infrastructure must be available 24/7 to allow engineering to access the labs globally.
We are looking for a person to work in our new Bangalore lab who will help manage a secured VxWorks and Helix Hypervisor lab environment. You would be managing a variety of embedded targets and lab infrastructure by installing, cabling, configuring, hardening infrastructure, securing services, and collecting artifacts that comply with documentation requirements. This includes racking, cabling, configuration, firmware and BIOS changes/updates, target board research, data collection, and inventory capture of devices and infrastructure. Infrastructure includes PDUs, Racks, Terminal Servers, Networking, Servers and KVM devices. Data is captured in Netbox, and our Virtual Lab Management (VLM) tools and we use Visio to capture network architectures.
You would manage remote target access over serial, USB serial, KVM and network links. You would configure boot server(s) and targets to provide a network boot environment which may include uboot, redboot, PXE, gPXE, iPXE, UEFI, EFI, VxWorks and other boot loaders.
Any changes in the secured lab infrastructure will follow a tightly controlled change order process. As part of the secured lab, the infrastructure will require you to follow device hardening guidelines, install certificates, disable/configure services and firewalls, config users, capture passwords into a password vault, provide accurate systems configuration. Once hardened you will perform artifact collection for submission to the security teams to meet CISO, NIST and government requirements. We work with the security teams to resolve any detected issues.
Your primary focus will be the secured lab in Bangalore, with secondary focus on the main Bangalore engineering lab with Linux and cloud labs. Additionally, you may be asked to support our other global labs that support WR engineering. Remote debugging skills, creative solutions and resourcefulness are a must. You pay attention to detail and are thorough. (You are not expected to have experience with VxWorks or Hypervisor but would be expected to know how to get images to target, such that they could be booted and used remotely.)
You must be a team player, organized, love working with technology, seek to learn new things daily and like solving customer issues. You are accurate and take the time to do things right. You aren't afraid to raise concerns. You capture/update processes or methods that can help you and the team in the future. Teamwork is a must. You can count on your team, and the team can count on you.
Primary Responsibilities
- Build and create isolated VxWorks and Hypervisor test labs.
- Provide lab infrastructure and remote access to targets according to plans.
- Work securely, in a carefully secured environment to secure infrastructure according to guides and best practices.
- Create and maintain firewall rules of various infrastructure equipment.
- Capture proof of hardening work in artifact documents.
- Work with change order processes to affect any infrastructure changes.
- Install and support embedded targets with updated firmware, BIOS, configuration, and setups as required by engineering. Use datasheets and board guides as needed. Work carefully with ESD devices.
- Configure network switches and network booting for devices using a variety of protocols.
- Configure serial console USB serial, Serial-Over-LAN, IPMI, remote consoles, KVM, SSH or other methods of target access in targets and infrastructure. Capture info, label systems and cabling, and carefully document these in our tools.
- Update DNS records for infrastructure and targets as required.
- Provide secondary support to our other engineering labs which support other WR products including Linux and cloud labs.
- Provide great customer support and help others use the labs effectively.
- Use scripting and monitoring tools to identify lab issues, collect data and proactively fix issues. You can automate tedious tasks using tools like curl, Python, Bash, expect or other related tools.
- Use Jira to manage tickets and projects.
About You
Core Competencies & Demonstrated Success
- Strong understanding of electronics, networking, embedded hardware, desktop and server hardware, interfaces, drives, NICs, , cabling (power, serial, USB, network, video).
- Understand IPMI, ipmitool, serial redirection, SOL, RS232, USB serial, IPMI over SSH.
- Understand server and target hardware, CPU architectures, RAM types and speeds, SATA, SAS, NVMe. M.2, PCIe, PCI slots, BIOS settings, memory channels, and configuration for system performance. A+ cert is not required but certainly an asset.
- Update and configure various firmware of potentially any device on a system.
- Use dd/copy to write new software images onto USB/Flash/Disk/SD cards.
- Work with a wide variety of embedded systems such as ARM, Client, and PowerPC from vendors like NXP, Client, SiFive, Beagle Bone, Samsung, Texas Instruments and Xilinx.
- Have a strong understanding of network configuration in Linux and network routers via CLI e.g.: VLANs, VLAN tagging, L3 routing, OSPF, LACP, LLDP, storm control, ARP, ACLs.
- Manage PDUs, terminal servers and KVM connectivity.
- Strong proficiency in Linux. Be able to resolve network issues, collect system data, debug and configure services.
- Update and validate inventory using various tools like NetBox.
- Be skilled with vi/vim, emacs or another Linux editor. Understand the basics of vi for restricted systems.
- Understand SSL Certificates, SSH and key based authentication.
- Understand IP networking concepts like TCP, UDP, ICMP, unicast, multicast, broadcast LLDP, VLANs, LACP, L2, L3 etc. Dell OS10 knowledge is an asset.
- Must be a self-starter and have the research skills to find solutions to obscure problems but you can still reach out to the team as needed.
- Have good eye for visual design and can create/update network diagrams to convey network configurations clearly and professionally.
- Preferred: experience with Confluence, Jira (Kanban and sprint), SharePoint, Visio, Acrobat Pro, VxWorks, VxWorks bootloaders and/or our Helix hypervisor.
Qualifications
- Computer Science, Computer Networking, Electrical Eng., or IT degree/diploma
- Self-starter and commitment
- 6-10 years of relevant experience with computers, networking, lab infrastructure, racks and embedded systems.
- Strong networking background and able to work with various networking interfaces both copper and fiber.
- Be able to occasionally lift and install heavy servers, PDUs and other lab infrastructure. Physically move, and unbox systems and targets, install shelving and systems into racks with/without cage nuts.
- Work carefully on delicate embedded systems with ESD sensitive devices. Have hardware experience and/or electronics background.
- Have a positive attitude, be eager to share findings and work well with others.
- Provide great customer support to our internal engineering teams.
Security Clearance Requirements
Successful candidates must engage in a security clearance process in regard to their citizenship in order to perform fundamental job duties, as per applicable law. In particular, candidates with certain citizenship may not be able to perform such fundamental job duties. Currently, this includes citizens of the following countries: Belarus; Burma; China; Cuba; Iran; North Korea; Syria; Venezuela; Afghanistan; Cambodia; Central African Republic; Cyprus; Democratic Republic of Congo; Ethiopia; Eritrea; Haiti; Iraq; Lebanon; Libya; Russia; Somalia; South Sudan; Sudan; Zimbabwe. The security clearance process may take a significant amount of time to complete, and any offer of employment will be contingent on the candidate's legal ability to perform the fundamental job duties. Wind River is committed to meeting its obligations to candidates under applicable human rights law and privacy law in this regard.
