We are looking for Senior Azure Red Hat OpenShift Platform Architect for our client in Richmond, VA
Job Title: Senior Azure Red Hat OpenShift Platform Architect
Job Location: Richmond, VA
Job Type: Contract
Pay Range: $70.00hr - $75.00hr
Job Overview:
Our client is seeking an experienced Azure Red Hat OpenShift (ARO) Platform Engineering Consultant to design, implement, and operationalize an enterprise container platform. The consultant will establish the ARO landing zone, Terraform automation framework, GitHub Actions CI/CD standards, security guardrails, RBAC model, and developer self-service capabilities. This role will partner with Cloud Engineering, DevOps, Security, IAM, and Application teams to create a standardized platform that enables secure and scalable application onboarding while enforcing enterprise governance and compliance requirements.
ARO Platform Architecture:
- Design and implement Azure Red Hat OpenShift (ARO) clusters for production and non-production environments.
- Define cluster topology, networking, ingress, egress, and connectivity standards.
- Establish namespace and project provisioning standards.
- Define platform architecture patterns for application onboarding.
- Create reusable reference architectures and design standards.
- Establish disaster recovery and multi-region design patterns.
- Lead technical design reviews and architecture decisions.
Terraform Platform Automation:
Develop reusable Terraform modules for ARO Clusters, Namespaces/Projects, Azure RBAC, Entra Groups, Workload Identity, Key Vault Integration, Azure Container Registry, Datadog Monitoring, and Network Connectivity.
- Implement Infrastructure as Code standards and governance.
- Manage Terraform state, module versioning, and release processes.
- Establish policy-as-code controls and security baselines.
- Support fully automated environment provisioning.
GitHub & GitHub Actions Enablement:
- Design GitHub Enterprise organizational structure.
- Define repository standards and governance practices.
- Build reusable GitHub Actions workflow templates.
- Establish CI/CD deployment standards for ARO-hosted applications.
- Implement branch protections, pull request controls, security scanning, code quality gates, artifact signing, and deployment approvals.
- Create self-service onboarding processes for application teams.
- Lead migration from legacy deployment pipelines to GitHub Actions.
Identity, Roles & Privileges:
- Design enterprise RBAC model for ARO.
- Integrate Microsoft Entra ID authentication with OpenShift.
- Define least-privilege access standards.
- Implement Privileged Identity Management (PIM) for elevated access.
- Define role assignments and approval workflows.
- Establish service-account governance and workload identities.
- Support audit and compliance requirements.
- Define and maintain Platform Roles, including Platform Administrator, Platform Operations, Application Operations, Developer, Security Administrator, CI/CD Service Accounts, and Read-Only Support.
Security & Compliance:
- Implement enterprise security baselines.
- Integrate Azure Key Vault using CSI drivers and workload identity.
- Establish secrets-management standards.
- Design separation-of-duties controls.
- Support regulatory and audit requirements.
- Implement infrastructure scanning and compliance checks within pipelines.
- Work with IAM and Security teams on governance controls.
Observability & Operations:
- Implement Datadog monitoring standards.
- Define dashboards, alerts, and service-level objectives (SLOs).
- Create operational runbooks.
- Establish platform support and escalation procedures.
- Define capacity planning standards.
- Implement platform health monitoring and reporting.
Developer Platform Enablement:
- Create onboarding processes for application teams.
- Develop deployment patterns and templates.
- Publish engineering standards and documentation.
- Provide platform training and knowledge transfer.
- Support application migration efforts into ARO.
- Drive adoption of self-service platform capabilities.
Required Qualifications:
- 8+ years in Cloud Infrastructure, Platform Engineering, or DevOps.
- 3+ years of Azure Red Hat OpenShift (ARO) or OpenShift experience.
- Expert Terraform development and module design experience.
- Strong GitHub Enterprise and GitHub Actions experience.
- Experience with Azure Networking, Entra ID, Azure RBAC, Managed Identity, Key Vault, Azure Container Registry, and API Management.
- Strong understanding of platform security and least-privilege design.
- Experience implementing enterprise DevSecOps practices.
- Strong documentation and stakeholder communication skills.
====
Benefits
Our Benefits Include:
- Medical, Dental, and Vision Insurance
- 401(k) Retirement Plan
- Health Savings Account (HSA)
- Disability Insurance (Short-Term and Long-Term)
- Life and AD&D Insurance
- Paid Sick Leave (where required by applicable state or local law)
- Supplemental Insurance Plans
- Identity Theft Protection
- Pet Insurance
- Employee Wellness Programs
- Employee Assistance Program (EAP)
- Career Growth and Professional Development Opportunities
Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws.
About Cynet Systems
Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia.
As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.
