Openshift Architect

Role: OpenShift Architect 
Location: Remote 

OpenShift Architect and an Ansible Automation Platform (AAP) Engineer. These roles include ownership of engineering execution in their respective domains and collaboration across activities to ensure consistent security, configuration, and compliance outcomes.
OpenShift Architect (Primary OpenShift Engineer and Technical Lead)

Responsibilities:
•    Serve as the primary engineer responsible for all OpenShift related tasks, including sandbox hardening, production cluster deployment, NERC CIP security implementation, and platform validation.
•    Lead and facilitate technical discovery workshops, architecture sessions, and requirements reviews with Client stakeholders.
•    Define the production OpenShift architecture, deployment design, identity integrations, network controls, and NERC CIP–aligned hardening requirements.
•    Implement OpenShift platform configurations, cluster services, network policies, identity and RBAC models, and required integrations.
•    Support the Compliance Review activity by providing technical insight into existing and planned OpenShift configurations.
•    Act as the technical escalation point for the AAP Engineer across security, platform, integration, or operational questions.
•    Review AAP designs, integrations, and platform dependencies to ensure alignment with OpenShift architecture.
•    Contribute to creation of runbooks, operational designs, and hardening documentation.
•    Participate in knowledge transfer sessions and provide deep technical guidance to Client platform operations staff.

Skills Requirements:
•    5–10 years of hands on OpenShift engineering and architecture experience (OpenShift 4.x required).
•    End to end experience deploying OpenShift clusters on vSphere, including IPI/UPI methods, networking, storage, and compute resource integration.
•    Strong understanding of Kubernetes architecture, Operators, cluster lifecycle, and Red Hat management tooling (OCM/ACM, RHCOS, MCO, etc.).
•    Demonstrated experience implementing compliance based security hardening (NERC CIP, CIS Benchmarks, STIGs, or similar).
•    Experience with enterprise authentication systems (LDAP, SAML/OIDC, identity governance).
•    Engineering expertise in cluster networking, ingress/egress, firewalling, TLS, API security, and etcd protections.
•    Strong automation background—Git, Terraform, Packer, and Ansible experience preferred.
•    Proven ability to lead workshops and communicate architecture decisions clearly to technical and non technical audiences.
Ansible Automation Platform (AAP) Engineer (Primary AAP Implementer)

Responsibilities:
•    Serve as the primary engineer responsible for all AAP related implementation tasks in both sandbox and production OpenShift environments.
•    Implement identity integrations, RBAC models, credential vault configurations, and NERC CIP aligned AAP security controls.
•    Deploy and configure AAP components including Automation Controller, Automation Hub, Execution Environments, and integrations required for operation.
•    Implement network policies, credential management, monitoring, alerting, and backup controls for AAP.
•    Support the Compliance Review activity by providing technical details, validating findings, and applying remediation recommendations for AAP.
•    Collaborate with the OpenShift Architect to ensure AAP deployment aligns with OpenShift platform architecture and security requirements.
•    Assist in documenting hardened AAP configurations, operational models, and lifecycle procedures.
•    Participate in validation sessions, platform reviews, testing cycles, and knowledge transfer activities.

Skills Requirements:
•    3–7 years of experience implementing and operating Ansible Automation Platform (AAP 2.x preferred).
•    Strong hands on skills with AAP components, Execution Environments, Collections, credential vaults, and enterprise integrations.
•    Experience deploying AAP on OpenShift using Operators, custom resources, and containerized execution models.
•    Understanding of NERC CIP, CIS Benchmarks, or equivalent compliance frameworks.
•    Ability to create, troubleshoot, and optimize Ansible playbooks, YAML configurations, and automation workflows.
•    Experience with enterprise identity (LDAP/SSO), secret management systems, and role based access control models.
•    Familiarity with Git based workflows, CI/CD pipelines, automation lifecycle processes, and Linux system administration.

Alignment Between Roles
•    The OpenShift Architect owns all engineering and implementation tasks related to OpenShift.
•    The AAP Engineer owns all engineering and implementation tasks related to AAP.
•    The Architect leads workshops and acts as the technical escalation point for the AAP Engineer.
•    Both roles collaborate to ensure consistent hardening and compliance across the platform.