08 - Specialist, IT Infrastructure

Celestica International LP • Toronto, ON

1d • Hybrid

About The Position

The Linux Desktop Engineer will own the design, deployment, configuration, and structural maintenance of Celestica's high-performance Linux computing platform. This role directly supports the Hardware Platform Solutions (HPS) engineering group by managing a fleet of approximately 50 HP ZBook Mobile Workstations preinstalled with Ubuntu and optimized for advanced AI-based software development. Operating at the intersection of enterprise endpoint compliance and agile engineering infrastructure, the successful candidate will use HCL BigFix as the primary Endpoint Management framework. Responsibilities include developing deployment packages for core endpoint security software, managing monthly patching cycles, and troubleshooting highly specialized developer toolchains to maximize engineering velocity.

Requirements

• Expert-level administration of native Ubuntu Linux (specifically 22.04 LTS and 24.04 LTS Desktop environments).
• Deep technical expertise using HCL BigFix for software asset tracking, package packaging, enterprise scripting, and automated deployment.
• Direct experience administering patches and Fixlets for enterprise security suites: CrowdStrike Falcon, ThreatLocker (including allowlisting/ringfencing policy adjustments), and Zscaler ZPA.
• Familiarity supporting low-level compilation workflows and toolchains: build essentials (GCC, Clang, CMake, Rust/cargo), Python 3.10+, Docker CE, MicroK8s/Kind, and VS Code.
• Advanced proficiency in Bash or Python scripting to automate workstation configuration, environment provisioning, and repetitive IT administrative tasks.
• Experience configuring high-density workstations (such as the HP ZBook Fury series), including managing system BIOS updates and optimizing dedicated NVIDIA hardware driver profiles.
• Possesses an intense focus on minimizing developer friction, reducing environment downtime, and protecting the engineer's flow state.
• Exceptional diplomatic and relationship-building skills to successfully co-develop frameworks with Global Information Security and remote site infrastructure divisions.
• Proven ability to troubleshoot unique, non-standard software-hardware boundary failures that fall outside typical corporate enterprise IT ticketing scripts.
• Bachelor’s degree in Computer Science, Computer Engineering, or Information Systems, with a minimum of 3 years of hands-on experience supporting specialized R&D or engineering IT environments.

Responsibilities

• Own the baseline golden imaging, mass deployment, and configuration maintenance of the HP ZBook workstation fleet utilizing HCL BigFix.
• Architect and deploy automated, silent installation packages for all enterprise and custom engineering endpoint software via BigFix fixlets.
• Install and administer Celestica’s standard security applications, including CrowdStrike Falcon, ThreatLocker, and Zscaler ZPA.
• Configure application controls specifically for the engineering developer workspace. This involves deploying ThreatLocker in a persistent Learning Mode with dedicated sandbox path exceptions (such as ~/Workspace) to prevent process blocks during source compilation.
• Implement and maintain required anti-malware scan exclusions across engineering build paths (e.g., /home//src/, make, gcc, cargo) to ensure frictionless local compilation.
• Support and execute monthly operating system and application patching cycles. Ensure critical security patches are vetted and pushed to engineering systems within a mandatory 24-hour window when required.
• Administer scoped sudo access on developer workstations using secure alternative authentication models (such as SSH agent-based PAM) and manage compliance audits via session recording tools like tlog.
• Act as the primary technical interface for HPS Software Engineers, ensuring local access to build essentials, containerization software, and integrated development environments.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level