Summary The Linux Desktop Engineer will own the design, deployment, configuration, and structural maintenance of Celestica's high-performance Linux computing platform. This role directly supports the Hardware Platform Solutions (HPS) engineering group by managing a fleet of approximately 50 HP ZBook Mobile Workstations preinstalled with Ubuntu and optimized for advanced AI-based software development.

08 - Specialist, IT Infrastructure

Req ID: 137435

Remote Position: Hybrid

Region: Americas

Country: Canada

State/Province: Ontario

City: Toronto

Summary The Linux Desktop Engineer will own the design, deployment, configuration, and structural maintenance of Celestica's high-performance Linux computing platform. This role directly supports the Hardware Platform Solutions (HPS) engineering group by managing a fleet of approximately 50 HP ZBook Mobile Workstations preinstalled with Ubuntu and optimized for advanced AI-based software development.

Operating at the intersection of enterprise endpoint compliance and agile engineering infrastructure , the successful candidate will use HCL BigFix as the primary Endpoint Management framework. Responsibilities include developing deployment packages for core endpoint security software , managing monthly patching cycles , and troubleshooting highly specialized developer toolchains to maximize engineering velocity.

Key Responsibilities

- Fleet Configuration & Baseline Optimization: Own the baseline golden imaging, mass deployment, and configuration maintenance of the HP ZBook workstation fleet utilizing HCL BigFix.
- Silent Software Packaging: Architect and deploy automated, silent installation packages for all enterprise and custom engineering endpoint software via BigFix fixlets.




- Endpoint Security Management: Install and administer Celestica’s standard security applications, including CrowdStrike Falcon, ThreatLocker, and Zscaler ZPA.
- Developer Persona Customization: Configure application controls specifically for the engineering developer workspace. This involves deploying ThreatLocker in a persistent Learning Mode with dedicated sandbox path exceptions (such as ~/Workspace) to prevent process blocks during source compilation.
- Exclusion Path Auditing: Implement and maintain required anti-malware scan exclusions across engineering build paths (e.g., /home/*/src/, make, gcc, cargo) to ensure frictionless local compilation.
- Patching & Vulnerability Remediation: Support and execute monthly operating system and application patching cycles. Ensure critical security patches are vetted and pushed to engineering systems within a mandatory 24-hour window when required.
- Privileged Access Governance: Administer scoped sudo access on developer workstations using secure alternative authentication models (such as SSH agent-based PAM) and manage compliance audits via session recording tools like tlog.
- Engineering Toolchain Support: Act as the primary technical interface for HPS Software Engineers, ensuring local access to build essentials, containerization software, and integrated development environments.





Qualifications/Skills/Competencies

Preferred Technical Qualifications:

- Operating Systems: Expert-level administration of native Ubuntu Linux (specifically 22.04 LTS and 24.04 LTS Desktop environments).
- Endpoint Management: Deep technical expertise using HCL BigFix for software asset tracking, package packaging, enterprise scripting, and automated deployment.
- Endpoint Security: Direct experience administering patches and Fixlets for enterprise security suites: CrowdStrike Falcon, ThreatLocker (including allowlisting/ringfencing policy adjustments), and Zscaler ZPA.
- Developer Environments: Familiarity supporting low-level compilation workflows and toolchains: build essentials (GCC, Clang, CMake, Rust/cargo), Python 3.10+, Docker CE, MicroK8s/Kind, and VS Code.
- Scripting & Automation: Advanced proficiency in Bash or Python scripting to automate workstation configuration, environment provisioning, and repetitive IT administrative tasks.
- Workstation Hardware: Experience configuring high-density workstations (such as the HP ZBook Fury series), including managing system BIOS updates and optimizing dedicated NVIDIA hardware driver profiles.

Core Competencies

- Developer Velocity Orientation: Possesses an intense focus on minimizing developer friction, reducing workplace downtime, and protecting the engineer's flow state.
- Matrix Collaboration: Exceptional diplomatic and relationship-building skills to successfully co-develop frameworks with Global Information Security and remote site infrastructure divisions.
- Advanced Technical Problem Solving: Proven ability to troubleshoot unique, non-standard software-hardwa

📌 Linux Desktop Engineer (Toronto)
🏢 Celestica
📍 Toronto