OpenShift Platform Engineer

Principal Responsibilities and Essential Duties:

Mentoring:

· Mentor teammates and peers with less experience in containers, Kubernetes, OpenShift, and automation

· Document platform standards, runbooks, and architecture decisions, and lead knowledge-sharing sessions

Consult / Design:

· Design reference architectures and reusable building blocks for OpenShift clusters, including networking, storage, and multi-tenancy

· Define best practices for application onboarding, container images, and resource management

· Meet with customers and respond to RFQ and compliance questions to review the technical implementation of security controls in our core infrastructure

· Work closely with engineering partners and implementation teams to identify pain points and deliver platform capabilities that eliminate them

· Analyze capacity, utilization, and cost trends, and implement right-sizing and autoscaling improvements to minimize impact

· Evaluate new OpenShift releases, Operators, and complementary tools, and define roadmaps for their adoption

Build / Run:

· Install, configure, upgrade, patch, and scale OpenShift clusters across on-premises, private, and public cloud environments

· Automate provisioning and configuration using Terraform, Ansible, Helm, and GitOps tools such as Argo CD (OpenShift GitOps)

· Build and maintain CI/CD pipelines using OpenShift Pipelines (Tekton), Jenkins, GitLab CI/CD, or GitHub Actions

· Manage cluster Operators, storage, ingress, and networking components, such as OVN-Kubernetes and OpenShift Data Foundation

· Implement monitoring, logging, alerting, and tracing, and tune cluster performance and reliability

· Plan, test, and document backup, disaster recovery, and high-availability procedures, including etcd backup and restore

· Review code and configuration changes from peers and partners to ensure secure and supportable solutions

Security Operations:

· Troubleshoot complex production issues as an escalation point for the platform, and lead root-cause analysis and corrective action

· Participate in on-call rotations and incident response, and maintain the operational readiness of all environments

· Harden clusters and enforce security policies using RBAC, Security Context Constraints, network policies, and policy engines such as OPA Gatekeeper

· Manage image security, including vulnerability scanning, signing, and trusted registries such as Quay

· Implement cloud security standards, threat modeling methodologies, secure code practices, and processes in tandem with security and software engineers

· Collaborate closely with the Security team to ensure our systems achieve and maintain HITRUST certification and compliance

General:

· Collaborate with teammates and stakeholders to build a team culture that employs best-in-class practices and drives high levels of internal and external customer satisfaction. Required

· Complete all responsibilities as outlined in the annual performance review and/or goal setting. Required

· Complete all special projects and other duties as assigned. Required

· Must be able to perform duties with or without reasonable accommodation. Required