On.Energy is a Miami-headquartered independent power producer that develops, integrates and operates AI-driven battery energy storage systems across the Americas.
<div class="content-intro"><p>ON.energy is building the power infrastructure that makes the AI era possible. As AI demand surges past what the grid and traditional data centers can support, ON.energy provides a new class of power technology proven at gigawatt scale and trusted by the world’s leading cloud and AI companies. Our systems are already deployed across 2.5 GW of hyper-scale campuses, validated by top U.S. national labs, and certified for grid-safe operation by major utilities. With real products in the field, we’re scaling faster than the grid can, transforming power from a bottleneck into a competitive advantage for the companies building the future.</p></div><p><span style="text-decoration: underline;"><strong>ROLE SUMMARY</strong></span></p> <p><em><span style="text-decoration: underline;">NOTE: This position is a hybrid working environment from one of our 3 major US based offices: Houston, Miami, Reston VA.</span></em></p> <p>The Senior RHEL engineer will own the OS and container platform behind our on-premises energy-management deployments. You’ll build and harden the tailored RHEL image and the containerized Ignition SCADA workload running on industrial PCs across U.S. data-center sites, and act as our deep RHEL authority and L3 escalation point. This is a platform-engineering and expertise role — not field installation.</p> <p>You will own our OS architectures, container builds and configuration, and the runtime that hosts Ignition, while the SCADA team owns everything configured inside Ignition (tags, screens, logic). On the network side, the host firewall and OS-level networking (interfaces, routing, DNS, firewalld/nftables) are yours, while the physical and site network beyond the host NIC belongs to Operational Technology (OT). Travel to third-party data-center sites is for troubleshooting and support only. The separate OT team commissions and deploys every machine, so you won’t install systems in the field.</p> <p><span style="text-decoration: underline;"><strong>RESPONSIBILITIES</strong></span></p> <ul> <li>Build, version, and maintain a reproducible, turnkey RHEL image tailored to the SCADA host’s needs (time sync, firewall/ports, storage, service ordering, resource tuning).</li> <li>Own the SCADA container image end to end: Containerfile, base image, JVM, persistence, ports, hardening, scanning, and registry.</li> <li>Run containers as systemd services via Podman and quadlets.</li> <li>Harden the OS and images to a recognized baseline (CIS/STIG) and define a patching and lifecycle strategy for OT uptime and restricted/disconnected sites (offline/mirrored registry).</li> <li>Troubleshoot full-stack — OS, container runtime, and application runtime behavior — remotely and on-site, handing off application-level issues to the SCADA team.</li> <li>Own host-level networking and firewall configuration (interfaces, routing, DNS, firewalld/nftables, and port exposure for the SCADA container), and lead connectivity troubleshooting between the host and site infrastructure.</li> <li>Document runbooks for the OT team and help define the connectivity and security posture.</li> <li>Maintain the Windows image pipeline (Packer-based) in steady state once established: periodic patching, hardening updates, and image rebuilds.</li> </ul> <p><span style="text-decoration: underline;"><strong>MUST-HAVE QUALIFICATIONS:</strong></span></p> <ul> <li>7+ years of senior, hands-on production RHEL/Linux engineering.</li> <li>Container-native delivery: Podman, quadlets/systemd, building and owning container images (including packaging a JVM-based app such as Ignition), and registry management.</li> <li>Reproducible, turnkey, versioned RHEL image building (bootc, Kickstart, Image Builder/osbuild, or Ansible-driven).</li> <li>OS and image hardening to a recognized baseline (CIS/STIG).</li> <li>Patch and lifecycle management for restricted/disconnected environments, including offline/mirrored content and registries.</li> <li>Automation (Ansible) and version control.</li> <li>Strong Linux networking and diagnostics: firewall administration (firewalld/nftables) and packet/connectivity tooling (Wireshark, tcpdump, ss, ip), plus containerized debug environments (toolbox).</li> <li>Confidence operating as the RHEL authority, with strong documentation habits.</li> </ul> <p><span style="text-decoration: underline;"><strong>NICE-TO-HAVE QUALIFICATIONS:</strong></span></p> <ul> <li>OT/ICS or SCADA exposure and frameworks (IEC 62443, NERC CIP, NIST 800-82).</li> <li>Familiarity with Ignition specifically.</li> <li>Windows image automation (Packer) and Windows patching/hardening familiarity.</li> <li>RHCSA / RHCE / RHCA certifications.</li> </ul> <p><span style="text-decoration: underline;"><strong>ADDITIONAL INFORMATION:</strong></span></p> <ul> <li>Based in the Houston, TX area preferred for hybrid schedule environment.</li> <li>Available to travel to sites for on-site support (20%), and to provide remote support for production issues.</li> <li>Able to meet third-party data-center access requirements (background check, badging, host-facility protocols) and represent the company professionally on-site.</li> </ul> <p>#LI-AD1</p><div class="content-conclusion"><hr> <p><strong>For US-based roles - What you’ll get:</strong></p> <ul> <li>Competitive salary + annual performance-based bonus eligibility</li> <li>Medical, dental, and vision insurance</li> <li>401(k) with company match</li> <li>Paid time off and company holidays </li> </ul> <p><strong>For Mexico-based roles - What you’ll get:</strong></p> <ul> <li>Competitive salary + annual performance bonus eligibility</li> <li>Christmas Bonus (Aguinaldo): 30 days</li> <li>Major medical expenses and life insurance</li> <li>Paid time off and holidays (per local policy)</li> </ul> <p><strong>For all roles:</strong></p> <ul> <li>Professional development and growth opportunities</li> <li>Opportunity to grow with a mission-driven team shaping the future of clean en