The OpenShift Platform Engineer designs, builds, secures, and operates Client's Red Hat OpenShift container platforms across on-premises, private, and public cloud environments.
They own the cluster lifecycle, automate provisioning and operations through Infrastructure as Code and GitOps, and partner with application, security, and infrastructure teams to deliver a reliable, compliant, and developer-friendly platform.
They also mentor teammates and promote a culture of automation and continuous improvement.
Principal Responsibilities and Essential Duties:
Mentoring:
Mentor teammates and peers with less experience in containers, Kubernetes, OpenShift, and automation.
Document platform standards, runbooks, and architecture decisions, and lead knowledge-sharing sessions.
Consult / Design:
Design reference architectures and reusable building blocks for OpenShift clusters, including networking, storage, and multi-tenancy.
Define best practices for application onboarding, container images, and resource management.
Meet with customers and respond to RFQ and compliance questions to review the technical implementation of security controls in our core infrastructure.
Work closely with engineering partners and implementation teams to identify pain points and deliver platform capabilities that eliminate them.
Analyze capacity, utilization, and cost trends, and implement right-sizing and autoscaling improvements to minimize impact.
Evaluate new OpenShift releases, Operators, and complementary tools, and define roadmaps for their adoption.
Build / Run:
Install, configure, upgrade, patch, and scale OpenShift clusters across on-premises, private, and public cloud environments.
Automate provisioning and configuration using Terraform, Ansible, Helm, and GitOps tools such as Argo CD (OpenShift GitOps).
Build and maintain CI/CD pipelines using OpenShift Pipelines (Tekton), Jenkins, GitLab CI/CD, or GitHub Actions.
Manage cluster Operators, storage, ingress, and networking components, such as OVN-Kubernetes and OpenShift Data Foundation.
Implement monitoring, logging, alerting, and tracing, and tune cluster performance and reliability.
Plan, test, and document backup, disaster recovery, and high-availability procedures, including etcd backup and restore.
Review code and configuration changes from peers and partners to ensure secure and supportable solutions.
Security Operations:
Troubleshoot complex production issues as an escalation point for the platform, and lead root-cause analysis and corrective action.
Participate in on-call rotations and incident response, and maintain the operational readiness of all environments.
Harden clusters and enforce security policies using RBAC, Security Context Constraints, network policies, and policy engines such as OPA Gatekeeper.
Manage image security, including vulnerability scanning, signing, and trusted registries such as Quay.
Implement cloud security standards, threat modeling methodologies, secure code practices, and processes in tandem with security and software engineers.
Collaborate closely with the Security team to ensure our systems achieve and maintain HITRUST certification and compliance.
General:
Collaborate with teammates and stakeholders to build a team culture that employs best-in-class practices and drives high levels of internal and external customer satisfaction.
Complete all responsibilities as outlined in the annual performance review and/or goal setting.
Complete all special projects and other duties as assigned.
Must be able to perform duties with or without reasonable accommodation.