Systems Engineer Linux & Kubernetes Platform Services (100%) — EOC – Ente Ospedaliero Cantonale

Full description

The EOC is the multi-site hospital organization in Ticino, with facilities across the entire canton offering a total of 1,000 beds. The organization effectively combines a local approach with an overall vision, ensuring the population has access to comprehensive and proximity-based hospital services, regardless of where they are required. Thanks to the commitment and expertise of over 6,500 employees and their focus on human relationships, the EOC provides high-quality healthcare, caring for over 41,000 inpatients annually and delivering more than 600,000 outpatient consultations. To complete our Platform Services team within the EDT Area of the General Management, we are looking for a Systems Engineer Linux & Kubernetes Platform Services (100%). ##

• Profile In a multi-site hospital context characterized by high reliability and operational continuity requirements, the selected candidate will contribute to the management and evolution of the Linux platform and containerized Kubernetes services, active across multiple environments (dev/test/pre-production/production). The role involves direct technical responsibility for the stability, security, and automation of the platform, with particular attention to the resilience of systems supporting critical clinical and administrative applications. The person will work in collaboration with infrastructure, application, and security teams, actively contributing to the modernization and consolidation of the platform. ##
• Responsibilities
• Kubernetes Platform Management
• Design, implementation, and maintenance of Kubernetes clusters in on-premise and/or hybrid environments.
• Management of the cluster lifecycle (installation, updates, patching, scaling).
• Configuration and management of core components (Ingress, StorageClass, RBAC, NetworkPolicy).
• Linux System Administration
• Management and hardening of enterprise Linux servers (RHEL/Ubuntu).
• Performance monitoring and capacity planning.
• Analysis and resolution of complex system issues.
• Automation and Infrastructure as Code
• Application deployment using GitOps.
• Implementation and maintenance of CI/CD pipelines (GitLab CI).
• Use of Infrastructure as Code tools (Terraform/OpenTofu).
• Development and management of configurations with Puppet and/or Ansible.
• Secure management of secrets (OpenBao or equivalents).
• Security and Operational Continuity
• Implementation of security policies on Kubernetes clusters.
• Hardening of Linux nodes.
• Design and verification of backup and disaster recovery strategies.
• Analysis of second- and third-level incidents and drafting of Root Cause Analysis.
• Monitoring and Continuous Improvement
• Configuration and management of monitoring and logging systems (Prometheus, Grafana, ELK).
• Updating technical documentation.
• Contribution to standardization efforts.