Recently postedTechnology

Staff Bare-Metal Provisioning Software Engineer

Hierarch Soft Technologies, Inc.San Jose, CA🇺🇸United States

Quick overview

SeniorityMid Senior

Work modeHybrid

LocationSan Jose, CA, United States

MicroservicesAnsibleDNSHTTPPythonVaultKubernetesLinux

Job description

Hi,

We have an exciting opportunity with our client for the below role. If you are interested, please share your updated resume at

Position: Senior / Staff Bare-Metal Provisioning Software Engineer

Location: San Jose, CA.

Duration: Longterm

We are seeking a software-first Bare-Metal Provisioning Engineer to architect and build the zero-touch hardware lifecycle control plane for our AI Inference Cloud (NVIDIA GPU, Intel x86, and SambaNova clusters over a Juniper fabric).

Modeled after bare-metal cloud architectures (e.g., Equinix Metal / Tinkerbell), you will write Go and Python microservices that take raw servers from rack power-on to immutable Linux and Kubernetes readiness without human intervention.

What You’ll Own

OOB Hardware & Firmware Control Plane: Build and maintain Go/Python controllers (using bmclib, Redfish, IPMI, or metal-toolbox) to automate power states, BIOS/UEFI settings (PCIe bifurcation, SR-IOV, NUMA, C-states), and firmware updates across multi-vendor GPU/ASIC servers.

Zero-Touch Network Boot & OS Lifecycle: Architect automated iPXE/PXE provisioning pipelines (Tinkerbell, Matchbox, Ironic, or Metal3) to stream and boot immutable Linux and bare-metal Kubernetes (Talos, RKE2, Kubeadm).

Inventory & DDI Reconciliation: Automate hardware discovery, burn-in attestation, and state sync against NetBox (DCIM/IPAM plan of record) to dynamically drive local Kea DHCP (Option 66/67) and Split-Horizon CoreDNS.

Air-Gap-Survivable GitOps: Implement pull-only provisioning workflows (Argo CD, Flux, ansible-pull) with local GPG/Cosign signature verification, local Harbor OCI registry mirrors, and TPM 2.0 / Vault at-boot secret injection.

Must-Have Stack & Experience:

5+ years building bare-metal provisioning software, hardware lifecycle engines, or fleet automation at a bare-metal cloud (Equinix Metal/Packet, CoreWeave, Crusoe), hyperscaler, or large-scale HPC/AI fleet.

Production Go & Python: Proven track record writing custom provisioning daemons, BMC/Redfish API clients, and declarative state machines in Go and Python.

Deep Boot & OOB Internals: Mastery of UEFI/BIOS, iPXE/PXE, HTTP/TFTP boot, Ignition/cloud-init, IPMI, Redfish, and Linux kernel/NUMA/PCIe tuning.

Autonomous Local Infra: Hands-on experience integrating NetBox APIs, local DHCP/DNS, and bare-metal Kubernetes without relying on public cloud managed service