Role summary
The Research User Computing Platforms Lead provides hands-on technical leadership for KAUST's Linux scientific workstation platform, with responsibility for its architecture, provisioning, configuration, automation, security, and lifecycle management. The role ensures that high-performance Linux workstations and remote workstation services effectively support faculty, researchers, and students across research and teaching activities. While the primary focus is Linux, the role also supervises and provides technical direction to Windows and macOS engineers supporting the wider end-user computing fleet.
Responsibilities
- Set the architecture and technical direction for KAUST's Linux scientific workstation fleet, including configuration management, provisioning, inventory, patching, access control, security, and lifecycle management
- Establish infrastructure-as-code, GitOps, automation, and engineering standards for the Linux platform team, and provide technical direction for the Windows and macOS endpoint platforms supported by the team
- Lead and document build-vs-buy and tooling decisions for provisioning, configuration management, secrets management, observability, and fleet operations, including rationale, risks, and tradeoffs
- Own the design and continuous improvement of physical and remote scientific workstation platforms, ensuring secure, high-performance access for faculty, researchers, students, and teaching users
- Oversee platform operations, including bare-metal and virtual provisioning, patch orchestration, inventory, drift detection, observability, reliability, and service continuity for active research users
- Own the security and compliance posture of the workstation fleet, including host hardening, secrets management, audit logging, compliance baselines, and alignment with frameworks such as NIST 800-171 and CIS Benchmarks
- Define hardware standards, refresh cycles, model validation, driver compatibility, firmware and BIOS automation, and lifecycle plans while balancing research priorities, budget constraints, and user disruption
- Lead, mentor, supervise, and develop the Linux workstation platform team, including Windows and macOS engineers, ensuring clear roles, objectives, performance expectations, and shared engineering practices
- Serve as the senior technical escalation point for complex platform, provisioning, access-control, hardware, and cross-platform endpoint issues
- Work directly with faculty, researchers, students, vendors, and internal IT teams to understand requirements, manage expectations, and translate research and teaching needs into sustainable platform capabilities
- Partner with network, security, IAM, storage, and advanced computing teams to deliver integrated, secure, and compliant platform services
- Provide regular updates and recommendations to senior IT leadership on platform direction, risks, lifecycle planning, investment needs, and service improvements
- Perform other applicable tasks and duties assigned within the realm of the employee's knowledge, skills, and abilities in the field of the position
Qualifications
- Bachelor's degree in computer science, Information Technology, Engineering, or a related field
- Master's degree in a relevant technical or management discipline
Requirements
- Extensive experience in Linux systems, infrastructure, endpoint engineering, or platform engineering, with a strong record of owning systems at scale
- Hands-on production experience with declarative configuration management, preferably Puppet or Ansible, and a demonstrated infrastructure-as-code and GitOps mindset using Git workflows, code review, and CI/CD for infrastructure
- Experience managing large Linux endpoints or workstation fleets, ideally 500+ endpoints, including Ubuntu and Rocky Linux in enterprise, research, academic, or scientific computing environments
- Experience with network-based provisioning, patch management, endpoint security, observability, hardware lifecycle management, firmware/BIOS automation, and security/compliance baselines
- Working knowledge of network access control, including 802.1X, RADIUS, certificate-based authentication, endpoint supplicant configuration, and provisioning or break-glass scenarios
- Evidence of technical leadership, including setting architecture, making consequential tradeoffs, mentoring engineers, improving engineering practices, and supporting hiring or team development
- Experience working directly with faculty, researchers, students, technical teams, vendors, and leadership to gather requirements, manage expectations, and balance competing priorities
- Experience supporting high-performance or GPU-enabled scientific computing environments, including NVIDIA/CUDA, performance tuning, and workload-specific desktop requirements
Education
Bachelor's degree in computer science, Information Technology, Engineering, or a related field
Skills
- Linux systems
- Configuration management
- Puppet or Ansible
- Infrastructure-as-code
- Git workflows
- Code review
- CI/CD for infrastructure
- Ubuntu
- Rocky Linux
- Network-based provisioning
- Patch management
- Endpoint security
- Observability and monitoring
- Hardware lifecycle management
- Firmware and BIOS automation
- Security and compliance baselines
- Network access control
- 802.1X and RADIUS
- Certificate-based authentication
- Technical leadership
- Mentoring engineers
- High-performance scientific computing support
- NVIDIA and CUDA
Education · Experience · Type
Bachelor'sSalary not stated