Senior OpenShift/Kubernetes GitOps, CI/CD Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and implement the SEC GitOps and CI/CD capabilities from the foundational stage through to production operationalization.

• Evaluate the current OpenShift/Kubernetes environment and application portfolio, creating repeatable patterns for containerizing and onboarding suitable workloads.

• Create standardized GitHub repository structures for application source code and GitOps deployment configurations.

• Develop reusable OpenShift Pipelines/Tekton CI/CD templates for application build, testing, security validation, container image creation, and promotion.

• Design and execute container image build workflows utilizing Buildah or another suitable OpenShift-compatible build technology.

• Integrate CI pipelines with Nexus and/or Artifactory for approved application dependencies and build artifacts.

• Incorporate ACS into the software supply chain and establish security policy gates.

• Set up and manage Quay as the designated container image registry.

• Design and implement the Argo CD/Red Hat OpenShift GitOps deployment model, covering desired state, reconciliation, environment promotion, drift management, and rollback procedures.

• Establish standards for Helm and Kustomize for OpenShift application deployment and environment-specific configurations.

• Integrate GitOps and CI/CD workflows with Entra ID/RBAC, CyberArk, ServiceNow change control, and Datadog observability.

• Create end-to-end deployment traceability from source commit and approval through to operational validation.

• Build and validate a representative application deployment as a reference implementation.

• Design and test repeatable procedures for deployment recovery and rollback.

• Collaborate closely with the Senior Infrastructure Automation Engineer and other engineering teams.

• Document architecture, technical decisions, standards, interfaces, operating procedures, and implementation guidance for long-term operations support.

⛳️ Requirements

• Generally requires a BS degree and 8-12 years of relevant experience, or a Master’s degree with 6-10 years of relevant experience.

• Additional relevant experience may be considered in place of degree requirements when permitted by contract.

• Significant hands-on experience in designing, engineering, and operating enterprise CI/CD and/or GitOps solutions.

• Extensive production experience with Kubernetes or Red Hat OpenShift environments.

• Proven experience in building and maintaining containerized application delivery workflows, including container image creation, registry management, deployment, and rollback.

• Familiarity with Git-based development and delivery workflows, including pull requests, branching, repository controls, and automated validations.

• Experience with CI/CD pipeline technologies such as Tekton, GitHub Actions, GitLab CI/CD, Jenkins, Azure DevOps, or similar enterprise tools.

• Proficiency with GitOps technologies such as Argo CD, Flux, or similar Kubernetes-native GitOps platforms.

• Knowledge of container build technologies and registries like Buildah, Docker/BuildKit, Quay, Harbor, or analogous technologies.

• Experience with Kubernetes configuration and packaging technologies such as Helm, Kustomize, or comparable methodologies.

• Ability to integrate CI/CD or platform automation with security controls, identity/RBAC, secrets management, or ITSM/change-management systems.

• Strong troubleshooting, systems integration, and technical problem-solving abilities across applications, platforms, networks, and infrastructure.

• Capability to architect solutions, assess alternatives, document technical decisions, and communicate recommendations to technical teams and customer stakeholders.

• Must fulfill applicable contract citizenship and work authorization requirements and be able to obtain and maintain SEC Public Trust or other necessary clearances.

• Preferred: Direct experience in designing or managing enterprise OpenShift Pipelines/Tekton environments.

• Preferred: Familiarity with Red Hat OpenShift GitOps/Argo CD.

• Preferred: Knowledge of Buildah, OpenShift Pipelines, Quay, and Red Hat Advanced Cluster Security.

• Preferred: Experience with Nexus and/or JFrog Artifactory and container image promotion workflows.

• Preferred: Proficiency with Helm and Kustomize in production Kubernetes/OpenShift environments.

• Preferred: Experience in containerizing and migrating applications from virtual machines or other traditional deployment platforms to Kubernetes/OpenShift.

• Preferred: Experience in designing platform capabilities from scratch, establishing standards, reference architectures, and reusable engineering patterns.

• Preferred: Understanding of secure software supply chain practices, including image scanning, provenance, signing, policy enforcement, and immutable deployments.

• Preferred: Experience integrating CI/CD and GitOps with ServiceNow, CyberArk, Entra ID, or enterprise observability platforms.

• Preferred: Background in federal environments governed by FISMA, NIST, FedRAMP, or similar security standards.

• Preferred: Relevant certifications in Kubernetes, Red Hat OpenShift, cloud, DevOps, or related fields.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and holiday schedule.

• Opportunities for professional development and training.

• Flexible work arrangements and remote work options.