Description
We are seeking a Senior AI Solution Engineer with Terraform to design and deploy representative lab environments that support the development and validation of Cloud Security Posture Management (CSPM) capabilities. In this role, you will leverage deep hands-on OpenStack expertise to build multi-tier application environments on public cloud infrastructure, enabling the engineering team to test and refine API-based security scanning tools.
Responsibilities
•Deploy a functional, multi-node Red Hat OpenStack Platform (RHOSP) environment on public cloud infrastructure using nested virtualization
•Set up core services such as Keystone, Nova, Neutron, Cinder, and Glance using standard deployment tools like TripleO or Ansible
•Configure Keystone v3 with multiple domains and projects to support complex identity and access management scenarios
•Create custom roles, such as "Security Auditor," to test non-admin API access
•Use Terraform to simulate complex, multi-tier application environments for security scanning validation
•Intentionally configure common misconfigurations, such as wide-open security groups, unencrypted volumes, and public API endpoints, to support scanner testing
•Provide a clear environment map, including API endpoints, credentials, and network topology, for the internal engineering team
•Develop and test Cloud Security Posture Management capabilities within the representative enterprise environment
Requirements
•3+ years of hands-on experience with OpenStack, specifically Red Hat OpenStack Platform (RHOSP)
•Proficiency in Terraform for simulating multi-tier application environments
•Expertise in core OpenStack services, including Keystone, Nova, Neutron, Cinder, and Glance
•Skills in deployment tools such as TripleO and Ansible
•Knowledge of identity and access management, including Keystone v3 configuration with multiple domains, projects, and custom roles
•Understanding of common cloud security misconfigurations, including security groups, volume encryption, and API endpoint exposure
•Familiarity with public cloud infrastructure and nested virtualization
•English proficiency at B2 level or higher
Conditions
No conditions specified in the posting.
