JOB DESCRIPTION
Insight Global is seeking a Linux / SSH Infrastructure Engineer for a cutting-edge IoT technology client. This consultant will take ownership of designing, securing, and implementing a modern remote-access platform for a large fleet of Linux-based devices. The ideal candidate will bring deep expertise in OpenSSH, SSH Certificate Authorities, reverse tunneling, Linux infrastructure, and security architecture. This individual will serve as both a technical lead and hands-on engineer, driving the migration from an existing reverse SSH environment to a scalable, certificate-based access model. The engagement offers the opportunity to influence long-term infrastructure strategy, lead complex migration efforts, strengthen security posture, and deliver knowledge transfer to internal teams in a fully remote, high-impact consulting environment.
Responsibilities include: •Review and finalize remote-access architecture design •Harden and secure Ubuntu-based relay infrastructure hosted in DigitalOcean •Design and implement SSH certificate-based authentication architecture •Configure secure SSO-backed engineer access •Implement and maintain reverse SSH tunneling infrastructure •Create scalable migration strategies for existing Linux-based IoT devices •Develop rollout, validation, and rollback procedures •Test deployment processes across multiple device generations •Work closely with internal engineering teams on device registration and backend integrations •Produce operational runbooks and technical documentation •Train support engineers and contractors on the new infrastructure •Lead architecture discussions and provide hands-on implementation support •Ensure scalability, security, and operational efficiency across the device fleet
REQUIRED SKILLS AND EXPERIENCE
•5+ years of Linux systems administration experience •Extensive Ubuntu server administration experience •Strong Linux networking and remote administration expertise •Experience making production SSHD changes in remote environments •Deep OpenSSH expertise including: -SSH Certificates -SSH Certificate Authorities (CA) -Reverse SSH Tunnels -Reverse Port Forwarding -Jump Hosts/Bastion Hosts -ProxyJump configurations -authorized_keys restrictions -Forced commands -Match blocks -Session management and keepalives •Experience with persistent reverse tunnels using autossh or similar tools •Secure remote-access architecture design experience •Identity and access management (IAM) and least-privilege security principles •Certificate-based authentication implementation experience •Infrastructure hardening and secure fleet management experience •Linux-based IoT or embedded systems experience •ARM-based device experience •Experience supporting both systemd and sysvinit environments •Large-scale infrastructure migration experience •Proven experience with: -Staged deployments -Verification testing -Rollback planning -Pilot programs -Production change control •Strong verbal and written English communication skills
NICE TO HAVE SKILLS AND EXPERIENCE
•HashiCorp Vault experience •Step-CA experience •PKI infrastructure expertise •OIDC integration experience •Google Workspace authentication experience •DigitalOcean administration experience •DevSecOps background •Site Reliability Engineering (SRE) experience •Infrastructure Security Engineering experience •Knowledge of IoT cybersecurity regulations/frameworks: -UK PSTI -EU Cyber Resilience Act (CRA) -California SB-327