Linux Systems Engineer
Led Linux systems engineering for proprietary, regulated lottery systems supporting domestic and international deployments. Managed RHEL platform engineering, system hardening, deployment automation, production troubleshooting, backup and recovery, system imaging, and supporting infrastructure.
- Drove RHEL 9 standardization and hardening across globally deployed lottery systems and corporate environments, improving consistency, security posture, and deployment repeatability.
- Automated lottery system deployments using standardized base images, PXE/Kickstart provisioning, post-install scripts, tar-based backup and restore workflows, boot customization, and disk imaging procedures.
- Built and maintained KVM/libvirt and Podman environments supporting Linux and Windows workloads for rapid provisioning, testing, and production validation.
- Supported proprietary lottery platforms built on Apache/PHP, PostgreSQL, and Java, resolving complex production issues across OS, application, database, hardware, and network layers.
- Designed, installed, and configured a multi-server Windows Server and Active Directory environment, including domain controllers, DNS, Group Policy, file services, Samba integration, and user migration.
- Engineered custom SELinux policy modules and file-context rules using AVC analysis to maintain enforcing mode for production applications.
- Implemented PKI/TLS workflows, including internal certificate authority support, certificate lifecycle management, trust chain deployment, and secure service integration.
- Deployed and troubleshot centralized security monitoring using Wazuh, Suricata, Filebeat, and OpenSearch across Linux, Windows, and network devices.
- Supported high-availability services using HAProxy and Keepalived, ensuring backend availability and failover continuity.
- Designed, built, and documented development-lab network infrastructure, including VLANs, switch installation and configuration, network cabinets, patch panels, structured cabling, cable termination, and port labeling; also troubleshot routing, DNS/DHCP, firewall, VPN, and Linux connectivity across production and development environments.
- Administered and automated Bacula backup infrastructure with PostgreSQL catalog and LTO tape storage, including job scheduling, retention policies, and recovery validation.
- Diagnosed Java and device-integration issues involving sockets, dependencies, logging, serial communication, and PostgreSQL-backed workflows.
- Configured and supported PostgreSQL-backed services and Microsoft SQL Server integrations, including SQL queries, PostgreSQL schema deployment, ODBC connectivity, linked-server troubleshooting, permissions, and table/data validation.
- Resolved complex boot and imaging issues involving Secure Boot/SBAT, GRUB2, BLS, EFI, initramfs rebuilds, filesystem repair, and SELinux relabeling.
- Developed internal web UI and system-control components using PHP, JavaScript, and CSS for system management and automation.
- Created MOPs, system and network diagrams, deployment documentation, validation procedures, rollback plans, and rollout guides for infrastructure and production changes.
- Managed internal platforms and deployment workflows for Nextcloud, Mantis, osTicket, MediaWiki, and Snipe-IT, including SSL renewals, QC procedures, and operational support.