Job Description
JOB TITLE: SYSTEM ADMINISTRATOR JOB LOCATION: REMOTE WAGE RANGE : 75.00-80.00 PER HOUR JOB NUMBER: SAIJP JOB DESCRIPTION Architect and implement the SEC GitOps and CI/CD capability from the initial foundation through production operationalization, using sound engineering and security practices. Assess the existing OpenShift/Kubernetes environment and application portfolio and develop repeatable patterns for containerizing and onboarding appropriate workloads from traditional virtualized environments. Design standardized GitHub repository structures for application source and GitOps deployment configuration, including branching, pull requests, CODEOWNERS, branch protection, review, and promotion practices. Engineer reusable OpenShift Pipelines/Tekton CI/CD templates for application build, test, security validation, container image creation, and promotion. Design and implement container image build workflows using Buildah or another appropriate OpenShift-compatible build technology, including image provenance and immutable image identification. Integrate CI pipelines with Nexus and/or Artifactory for approved application dependencies and build artifacts, and establish clear separation between general artifacts and container images stored in Quay. Integrate Client into the software supply chain and implement security policy gates, including blocking Critical and High vulnerability images from production promotion unless an approved exception process is used. Establish and operate Quay as the approved container image registry for applicable OpenShift workloads, including repository structure, access, promotion, lifecycle, and image traceability standards. Design and implement the Argo CD/Red Hat OpenShift GitOps deployment model, including desired state, reconciliation, environment promotion, drift management, and rollback. Establish practical Helm and Kustomize standards for OpenShift application deployment and environment-specific configuration. Integrate GitOps and CI/CD workflows with Entra ID/RBAC, CyberArk, ServiceNow change control, and Datadog observability as appropriate. Establish end-to-end deployment traceability from source commit and approval through pipeline execution, security results, image digest, GitOps synchronization, OpenShift deployment, and operational validation. Build and validate a representative application deployment as a reference implementation, then convert lessons learned into reusable templates, standards, documentation, and onboarding patterns. Design and test repeatable deployment recovery and rollback procedures, including validation of application health following deployment or rollback. Work closely with the Senior Infrastructure Automation Engineer and other engineering teams to establish an integrated application delivery and infrastructure automation capability. Document architecture, technical decisions, standards, interfaces, operating procedures, and implementation guidance for long-term Operations support. Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities While an hourly range is posted for this position, an eventual hourly rate is determined by a comprehensive salary analysis which considers multiple factors including but not limited to: job-related knowledge, skills and qualifications, education and experience as compared to others in the organization doing substantially similar work, if applicable, and market and business considerations. Benefits offered include medical, dental and vision benefits; dependent care flexible spending account; 401(k) plan; voluntary life/short term disability/whole life/term life/accident and critical illness coverage; employee assistance program; sick leave in accordance with regulation. Benefits may be subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions. Benefits offered are in accordance with applicable federal, state, and local laws and subject to change at TCM's discretion.