1185.01 cloudera admistrator

Job Title: Cloudera Administrator (CDP Private Cloud Base + Data Services Installation & Administration | HA/Kerberos/Auto-TLS/KMS-HSM)Experience: 4–6 YearsEmployment Type: Full-Time - 8-month ContractLocation: On-siteKey ResponsibilitiesWe are seeking a hands‑on Cloudera Administrator with 4–6 years of on‑prem experienceto install, configure, upgrade, and fully administer both CDP Private Cloud Base and Cloudera Data Services end‑to‑end, including Cloudera Data Warehouse (CDW), Cloudera Data Engineering (CDE), and Cloudera AI (CAI). The role requires strong expertise in High Availability, Kerberos enablement, Cloudera Auto‑TLS / TLS certificate management, Ranger security, and Ranger KMS with external HSM / enterprise KMS integration.CDP Private Cloud Base – Full AdministrationInstall, configure, operate, upgrade, and patch CDP Private Cloud Base (repositories, parcels, service roles, configuration baselines).Administer and support core components: HDFS, YARN, Hive, Impala, Hue, Kafka, Zookeeper, Ranger, Atlas (as applicable). Perform capacity planning, performance tuning, node provisioning/decommissioning, and advanced troubleshooting (logs/metrics/OSlevel).Cloudera Data Services – Installation + Full Administration (Critical)Install and configure Cloudera Data Services on the target platform, including prerequisites and platform readiness.Perform end‑to‑end administration of:CDW: creation/operations of Virtual Warehouses, workload isolation, autoscaling/resource allocation, connectivity, performance tuning and troubleshooting.CDE: environment setup, job execution operations, quotas, scheduling/monitoring, dependency/runtime management, and troubleshooting.Cloudera AI (CAI): workspace setup, runtimes, user onboarding/support, and alignment with enterprise security controls.Own day‑2 operations for Data Services: upgrades, scaling, backups (where applicable), monitoring/alerting, and incident/RCA.High Availability (HA) & ResilienceImplement and maintain HA for critical services (as applicable): Name Node HA, Resource Manager HA, Hive Server2 HA, and resilient Kafka/Zookeeper patterns.Validate failover behavior and maintain operational runbooks and SOPs.Security: Kerberos, Auto‑TLS, Ranger, KMS/HSMLead Kerberos enablement and ongoing administration (principals, keytabs lifecycle, renewals, troubleshooting authentication issues).Enable and manage TLS at scale, including Cloudera Auto‑TLS, certificate lifecycle management (keystores/truststores), trust chains, and secure service‑to‑service communications.Administer Ranger access controls (resource‑based and tag‑based policies), auditing, and ecosystem integrations; support governance via Atlas (as needed).Install/configure and operate Ranger KMS and HDFS Transparent Data Encryption (TDE) (encryption zones, key rotation, access policies, audits).Integrate Ranger KMS with external HSM / enterprise KMS (vendor‑agnostic), ensuring secure key custody, compliance alignment, and auditability.Operations & AutomationOperate monitoring and alerting (Cloudera Manager and enterprise tools), manage incidents and RCAs, and drive permanent fixes.Maintain documentation, runbooks, change management, and standard maintenance processes.Automate repeatable operational tasks using Bash/Python (and optionally Ansible/Terraform where applicable).Mandatory Requirements4–6 years of hands‑on Cloudera on‑prem administration (CDP Private Cloud Base strongly preferred).Proven ability to install and administer Cloudera Data Services (CDW/CDE/CAI) end‑to‑end (not only support).Strong Cloudera Manager experience (install, upgrade, troubleshoot, performance tuning).Strong experience enabling/operating High Availability (HA) in Cloudera/Hadoop ecosystems.Strong experience enabling/operating Kerberos (principals/keytabs lifecycle and troubleshooting).Strong experience enabling/operating TLS, including Cloudera Auto‑TLS and certificate lifecycle management.Hands‑on experience with Ranger (policies, audits, troubleshooting).Hands‑on experience with Ranger KMS and HDFS TDE (encryption zones, key lifecycle).Experience integrating with external HSM / enterprise KMS (PKI, cert chains, trust configuration).Strong Linux administration and troubleshooting skills.Preferred / Nice to HavePractical experience with Kubernetes administration (networking/ingress, storage classes, certificates, observability) supporting Cloudera Data Services.Strong performance tuning for Hive/Impala/YARN workloads.Familiarity with compliance controls (dual control, break‑glass access, audit evidence).