Openshift - W2 only

Job Summary

The OpenShift Platform Engineer designs, builds, secures, and operates Cotiviti's Red Hat OpenShift container platforms across on-premises, private, and public cloud environments.

They own the cluster lifecycle, automate provisioning and operations through Infrastructure as Code and GitOps, and partner with application, security, and infrastructure teams to deliver a reliable, compliant, and developer-friendly platform.

They also mentor teammates and promote a culture of automation and continuous improvement.

Principal Responsibilities and Essential Duties

• Mentoring
• Mentor teammates and peers with less experience in containers, Kubernetes, OpenShift, and automation.
• Document platform standards, runbooks, and architecture decisions, and lead knowledge-sharing sessions.
• Consult / Design
• Design reference architectures and reusable building blocks for OpenShift clusters, including networking, storage, and multi-tenancy.
• Define best practices for application onboarding, container images, and resource management.
• Meet with customers and respond to RFQ and compliance questions to review the technical implementation of security controls in our core infrastructure.
• Work closely with engineering partners and implementation teams to identify pain points and deliver platform capabilities that eliminate them.
• Analyze capacity, utilization, and cost trends, and implement right-sizing and autoscaling improvements to minimize impact.
• Evaluate new OpenShift releases, Operators, and complementary tools, and define roadmaps for their adoption.
• Build / Run
• Install, configure, upgrade, patch, and scale OpenShift clusters across on-premises, private, and public cloud environments.
• Automate provisioning and configuration using Terraform, Ansible, Helm, and GitOps tools such as Argo CD (OpenShift GitOps).
• Build and maintain CI/CD pipelines using OpenShift Pipelines (Tekton), Jenkins, GitLab CI/CD, or GitHub Actions.
• Manage cluster Operators, storage, ingress, and networking components, such as OVN-Kubernetes and OpenShift Data Foundation.
• Implement monitoring, logging, alerting, and tracing, and tune cluster performance and reliability.
• Plan, test, and document backup, disaster recovery, and high-availability procedures, including etcd backup and restore.
• Review code and configuration changes from peers and partners to ensure secure and supportable solutions.
• Security Operations
• Troubleshoot complex production issues as an escalation point for the platform, and lead root-cause analysis and corrective action.
• Participate in on-call rotations and incident response, and maintain the operational readiness of all environments.
• Harden clusters and enforce security policies using RBAC, Security Context Constraints, network policies, and policy engines such as OPA Gatekeeper.
• Manage image security, including vulnerability scanning, signing, and trusted registries such as Quay.
• Implement cloud security standards, threat modeling methodologies, secure code practices, and processes in tandem with security and software engineers.
• Collaborate closely with the Security team to ensure our systems achieve and maintain HITRUST certification and compliance.
• General
• Collaborate with teammates and stakeholders to build a team culture that employs best-in-class practices and drives high levels of internal and external customer satisfaction.

Requirements

• Education and experience
• Bachelor's degree in computer science, engineering, or a related field, or equivalent practical experience.
• Four or more years of experience operating container platforms in production, including at least two years with Red Hat OpenShift or another enterprise Kubernetes distribution.
• Technical
• Strong knowledge of Kubernetes and OpenShift architecture, including Operators, custom resource definitions (CRDs), RBAC, networking, and storage.
• Strong Linux administration skills, including networking, performance tuning, and troubleshooting.
• Hands-on Infrastructure as Code and configuration management experience (Terraform, Ansible, Helm).
• Experience with GitOps and CI/CD tooling (Argo CD, OpenShift Pipelines/Tekton, Jenkins, GitLab CI/CD, or GitHub Actions).
• Scripting skills in Bash, Python, or Go.
• Working knowledge of monitoring, logging, and tracing tools (Prometheus, Grafana, Elasticsearch, or equivalent).
• Experience with at least one major public cloud (AWS, Google Cloud Platform, Azure, or OCI); Running either managed OpenShift or self-hosted in the cloud is preferred.
• Understanding of container security practices and compliance frameworks such as HITRUST, HIPAA, and SOC 2.
• Non-technical
• Strong written and verbal communication skills, including the ability to explain technical concepts to technical and non-technical audiences.
• Collaborative, service-oriented approach when working with developers, security, and infrastructure teams.
• Ability to prioritize, manage multiple tasks, and work independently in a fast-paced environment.
• Willingness to participate in on-call rotations and occasional after-hours maintenance windows.
• Commitment to documentation, continuous learning, and continuous improvement.
• Preferred
• Red Hat Certified Specialist in OpenShift Administration, or Certified Kubernetes Administrator (CKA).
• Experience with OpenShift Service Mesh, Advanced Cluster Management, Advanced Cluster Security, or OpenShift Virtualization.
• Experience supporting workloads in regulated environments, such as healthcare.
• Cognitive / Mental Requirements
• Communicating with others to exchange information.
• Problem-solving and thinking critically.
• Completing tasks independently.
• Interpreting data.
• Making timely decisions in the context of a workflow.