Platform Engineer - Open Shift Platform

Platform Engineer - Open Shift Platform

Job Description:

Job Description
Role: Platform Engineer - Open Shift Platform
Number of Positions: 1
Location: Bangalore, India

Description
Airbus Commercial Aircraft is looking for a “ Platform Engineer” to join our Aircraft Test and Delivery department based in Bangalore, India.
You will be part of a team developing applications in the scope of an initiative for a collaborative platform supporting “Customer Line” operations and Customer relationships all along the aircraft Acceptance & Delivery process.

This PSL embedding the products used for :
● The activities related to the technical progress of the Production Aircrafts for the activities managed in the delivery center, in the flight line for ALL programs and for ALL Sites:Toulouse / Tianjin / Mobile / Hamburg / Mirabel
● The products and means used to communicate with the customer during the delivery of the aircraft that he is purchasing: Invitations, Orientation during visits in Plant/FAL,Technical Status, Request of Rework, planning dates, ...relying on the data which are managed within other Business Products
● The product & tools used to measure & drumbeat the progress of the Aircraft from end of manufacturing to delivery of the Aircraft: prioritization of Aircraft, Live technical status, escalation of critical Items, allocation/management of teams, efficiency of Actors
● The preparation & execution of the tests of the aircrafts on production Aircrafts: Noise detection, scheduling of flights, preparation of flights

Within the Digital & IM organization, we are seeking a hands-on Lead Platform Engineer with 6 to 8 years of experience to join our team in Bangalore, India.
In this role, you will be responsible for orchestrating container platform operations (RedHat OpenShift / OCP 4), building resilient infrastructure-as-code, and embedding security deep into continuous integration and deployment pipelines. You will work closely with enterprise application developers and security stakeholders to deliver scalable, highly available, and compliant cloud-native platform infrastructure.

Required Skills & Qualifications
● Education: Bachelor’s or Master’s degree in Computer Science, Information Technology, or a related technical discipline.
● Experience: 6 to 8 years of core hands-on experience in IT infrastructure, platform engineering, and automated delivery pipelines.
● Platform & DevSecOps Expertise: Minimum 3–5 years of specialized experience in RedHat OpenShift/Kubernetes administration, Infrastructure as Code (IaC), and pipeline security automation.
● Agile Experience: 3–5 years working actively in cross-functional Agile, SAFe, or Kanban delivery teams.
● Language: Advanced proficiency in English (verbal and written).

Technical & Role-Specific Requirements
1. OpenShift & Container Platform Engineering
● RedHat OpenShift (OCP 4): Solid experience managing cluster namespaces, configuring Horizontal Pod Autoscalers (HPA), and defining Pod Disruption Budgets (PDB) to maintain platform availability and operational scaling.
● Container Builds & Baselines: Managing production build flows using RedHat Source-to-Image (S2I) and hardened RedHat Universal Base Images (UBI9).
● Runtime & Reverse Proxy Operations: Operational knowledge of application runtime baselines, including Java (OpenJDK 17 / Spring / Quarkus), NodeJS 24, and web server engines (Apache HTTPd 2.4 & Tomcat 10) for reverse proxies and logging configurations.

2. DevSecOps & Pipeline Engineering
● Automated CI/CD Pipelines: Constructing and maintaining multi-stage compilation and release workflows using Jenkins pipelines integrated with enterprise GitHub repositories.
● Embedded Pipeline Security: Hands-on integration of static/dynamic security inspection tools—including SonarQube, CheckmarxOne, and DefectDojo—deep inside delivery hooks.
● Infrastructure as Code (IaC): Writing and maintaining playbooks using Ansible Automation Platform and managing cluster credentials securely via Ansible Vault.

3. Identity, Access & Export Compliance
● Federated Single Sign-On (SSO): Implementing and managing OAuth 2.0 / OpenID Connect (OIDC) access controls over corporate MobileSSO networks for user and machine (M2M) authentication.
● Token Isolation & Cryptography: Managing token isolation and key configurations using signed/encrypted JSON Web Encryption (JWE) tokens.
● Export Control Restrictions: Operationalizing logical workspace borders and access restrictions for sensitive/restricted datasets (e.g., military ITAR data) based on contextual program variables.
● Segregated Audit Logging: Routing application and platform tracing to dedicated, secure indexes to keep audit trails isolated from general operational logs.

4. Data Center & Infrastructure Integration
● Perimeter Networks & Proxies: Configuring data flows navigating tight Data Center Filtering (DCF) firewalls, AxessGate proxies, and API Gateways.
● Multi-Protocol Storage Volumes: Mounting external network file systems using SFTP, NFS v4, or SMB/CIFS combined with active Kerberos authentication.
● Database Infrastructure Linkages: Configuring high-availability SQL*Net connections targeting remote Oracle instances bound to active Data Guard pools.

Nice-to-Have Requirements
● Container Network Segregation: Experience partitioning container topologies to isolate high-volume automated Machine-to-Machine (M2M) traffic from User-to-Machine (U2M) endpoints.
● Database & Cache Management: Basic configuration persistence over MongoDB, PostgreSQL, and Memory-based storage engine Redis.

Responsibilities & Tasks
● Platform Operations: Maintain, scale, and optimize production RedHat OpenShift (OCP 4) cluster environments and application workloads.
● DevSecOps Pipeline Execution: Build and manage automated Jenkins pipelines featuring integrated vulnerability scanning, static code analysis, and automated artifact publishing.
● Infrastructure Automation: Eliminate manual operational tasks by authoring Ansible playbooks for environment provisioning, secret management, and platform patching.
● Security & Audit Compliance: Maintain zero-trust access controls, manage encrypted log indexing, and enforce strict data isolation rules across platform namespaces.
● Cross-Team Collaboration: Work closely with application developers, security teams, and enterprise architects to ensure smooth service deployments and high availability.

Success Metrics
● First-Time-Right Deployments: Deliver high-quality automated pipeline hooks and infrastructure playbooks on schedule.
● Platform Uptime & Efficiency: Ensure optimal OpenShift pod autoscaling, resource utilization, and minimal change failures.
● Compliance Rigor: Maintain 100% adherence to security logging, vulnerability remediations, and export control regulations.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company:

Airbus India Private Limited

Employment Type:

Permanent

-------

Experience Level:

Professional

Job Family:

Digital

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com.

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.