Title: Senior OpenShift/Kubernetes GitOps and CI/CD Engineer)
Location: Washington DC / 100% Remote
duration: 6 months contract, FTE Possible
In this Role you will:
Architect and implement the GitOps and CI/CD capability from the initial foundation through production operationalization, using sound engineering and security practices.
Assess the existing OpenShift/Kubernetes environment and application portfolio and develop repeatable patterns for containerizing and onboarding appropriate workloads from traditional virtualized environments.
Design standardized GitHub repository structures for application source and GitOps deployment configuration, including branching, pull requests, CODEOWNERS, branch protection, review, and promotion practices.
Engineer reusable OpenShift Pipelines/Tekton CI/CD templates for application build, test, security validation, container image creation, and promotion.
Design and implement container image build workflows using Buildah or another appropriate OpenShift-compatible build technology, including image provenance and immutable image identification.
Integrate CI pipelines with Nexus and/or Artifactory for approved application dependencies and build artifacts, and establish clear separation between general artifacts and container images stored in Quay.
Integrate ACS into the software supply chain and implement security policy gates, including blocking Critical and High vulnerability images from production promotion unless an approved exception process is used.
Establish and operate Quay as the approved container image registry for applicable OpenShift workloads, including repository structure, access, promotion, lifecycle, and image traceability standards.
Design and implement the Argo CD/Red Hat OpenShift GitOps deployment model, including desired state, reconciliation, environment promotion, drift management, and rollback.
Establish practical Helm and Kustomize standards for OpenShift application deployment and environment-specific configuration.
Integrate GitOps and CI/CD workflows with Entra ID/RBAC, CyberArk, ServiceNow change control, and Datadog observability as appropriate.
Establish end-to-end deployment traceability from source commit and approval through pipeline execution, security results, image digest, GitOps synchronization, OpenShift deployment, and operational validation.
Build and validate a representative application deployment as a reference implementation, then convert lessons learned into reusable templates, standards, documentation, and onboarding patterns.
Design and test repeatable deployment recovery and rollback procedures, including validation of application health following deployment or rollback.
Work closely with the Senior Infrastructure Automation Engineer and other engineering teams to establish an integrated application delivery and infrastructure automation capability.
Document architecture, technical decisions, standards, interfaces, operating procedures, and implementation guidance for long-term Operations support.
Basic Qualifications:
Typically requires a BS degree and 8-12 years of prior relevant experience, or a Master's degree with 6-10 years of prior relevant experience. Additional relevant experience may be considered in lieu of degree requirements where permitted by contract.
Strong hands-on experience designing, engineering, and operating enterprise CI/CD and/or GitOps solutions.
Strong production experience with Kubernetes or Red Hat OpenShift environments.
Demonstrated experience building and maintaining containerized application delivery workflows, including container image creation, registry management, deployment, and rollback.
Experience with Git-based development and delivery workflows, including pull requests, branching, repository controls, and automated validation.
Experience with CI/CD pipeline technologies such as Tekton, GitHub Actions, GitLab CI/CD, Jenkins, Azure DevOps, or comparable enterprise tooling.
Experience with GitOps technologies such as Argo CD, Flux, or comparable Kubernetes-native GitOps platforms.
Experience with container build technologies and registries such as Buildah, Docker/BuildKit, Quay, Harbor, or comparable technologies.
Experience with Kubernetes configuration and packaging technologies such as Helm, Kustomize, or comparable approaches.
Experience integrating CI/CD or platform automation with security controls, identity/RBAC, secrets management, or ITSM/change-management systems.
Strong troubleshooting, systems integration, and technical problem-solving skills across applications, platforms, networks, and infrastructure.
Ability to architect solutions, evaluate alternatives, document technical decisions, and communicate recommendations to technical teams and customer stakeholders.
Must meet applicable contract citizenship and work authorization requirements and be able to obtain and maintain Public Trust or other required clearance.
