Senior Enterprise OpenShift Architect

Job Title: Senior OpenShift Architect

We are seeking a highly skilled and experienced professional to lead the design, deployment, and management of enterprise-scale OpenShift/Kubernetes environments. The ideal candidate will have expertise in architecting, implementing, and securing high-availability Kubernetes-based infrastructure.

• Infrastructure Design and Deployment
  • Design and implement RedHat OpenShift clusters across production and lab environments, ensuring seamless integration with network switches and SAN storage.
  • Setup air-gapped OCP installations on HPE Synergy 480 Gen 11 (production) and HPE BL460c Gen 10 (lab).
  • Build four OCP clusters (production site-1, production site-2, lab-1, lab-2) with three master nodes and N worker nodes in each.
  • Develop high-level and low-level design documentation for OCP deployments.
  • Configure Multus (CNI) for external IP communication and Portworx (CSI plugin) for database nodes.
  • Implement geo-redundancy and failover strategies to ensure business continuity.
• Security and Compliance
  • Apply CIS security hardening for Kubernetes and underlying nodes, ensuring compliance with industry standards.
  • Implement role-based access control, image policies, Kubernetes security policies, and certificate management to maintain a secure environment.
  • Setup ingress controllers, API server configurations, and HA Proxy load balancing with SSL and KeepAlive to enhance security and performance.
• Networking and Infrastructure
  • Configure DNS, DHCP, and NTP services for cluster networking, ensuring accurate time synchronization.
  • Integrate Kubernetes clusters with network switches and SAN storage, ensuring seamless communication and data transfer.
  • Implement SNMP alerting and monitoring to detect potential issues before they impact business operations.
• Storage and Logging
  • Setup Portworx for persistent storage, ensuring data durability and availability.
  • Deploy and configure container registry (Quay) for secure image storage and management.
  • Integrate Elasticsearch and Kibana for application logs, providing real-time insights into system performance and activity.
  • Configure Rsyslog for node log forwarding, archival policies, and external log analyzer integration, ensuring comprehensive logging and monitoring.
  • Support sidecar containers (e.g., Logstash) for centralized log forwarding, enhancing log analysis and reporting capabilities.
• Monitoring and Observability
  • Deploy Prometheus and Grafana dashboards for monitoring cluster resources (CPU, memory, disk, network), ensuring proactive issue detection and resolution.
  • Configure alerts for node, pod, and persistent storage, ensuring timely notification of potential issues.
  • Ensure continuous monitoring of infrastructure and application workloads, maintaining optimal system performance and reliability.
• Cluster Administration and Operations
  • Perform installation, upgrades, and patching at node and Kubernetes level, ensuring seamless updates and minimal downtime.
  • Manage backup and restore processes (ETCD snapshots, import/export backups), ensuring data integrity and availability.
  • Validate cluster health via test deployments and functional checks, ensuring system reliability and performance.
  • Support application deployments and ATP post-migration tests, ensuring smooth transitions and minimal disruption to business operations.
  • Support Couchbase, Portworx, and other middleware installations on Kubernetes, enhancing system functionality and performance.
• Documentation and Knowledge Transfer
  • Prepare high-level and low-level design documents, maintenance operation procedures (MOPs), and end-to-end documentation of the deployed platform, ensuring knowledge sharing and collaboration.
  • Provide comprehensive training and knowledge transfer sessions for internal teams, ensuring smooth adoption and utilization of new technologies and systems.