Job Specifications
Position Title: DevOps / SRE
Location: Stamford, CT (Onsite)
Job Description
Performance Engineering
Design and develop performance test scripts using Apache JMeter or equivalent tools.
Create test scenarios including load, stress, spike, endurance, and scalability.
Collaborate with developers, architects, and business stakeholders to understand performance goals.
Experience with Dynatrace, Grafana, or Kibana.
DevOps / SRE / Platform Engineering
10+ years in DevOps, SRE, or Platform Engineering.
6+ years Kubernetes.
3+ years hands-on OpenShift 4.x operations at scale.
Own enterprise-grade OpenShift 4.x platforms across on-prem and cloud.
Deliver reliable, secure, automated clusters; enable developer self-service through GitOps and golden patterns.
Lead upgrades, scaling, and multi-cluster operations.
Core Skills
Strong Linux (RHEL), networking (TCP/IP, DNS, TLS, routing), storage concepts.
Terraform/Ansible (IaC).
Argo CD, Tekton, Operators, Helm/Kustomize.
Experience with ODF/OCS and cluster upgrades.
Security: RBAC, SCC/PSA, Network Policies, supply-chain controls, vulnerability remediation.
Excellent troubleshooting across all platform layers.
OpenShift Expertise
Design and implement OpenShift clusters (IPI/UPI).
Day-2 operations: Machine Configs, upgrades, node pools.
Multi-cluster governance with ACM/OCM.
Networking/Ingress: OVN-Kubernetes, Multus, Ingress Controllers/Routes, L4/L7 load balancing, DNS/TLS.
Storage: ODF/OCS/Ceph/Portworx, PVC/PV classes, performance tuning, backup/restore (Velero/OADP).
GitOps / CI-CD / Security
GitOps-first enablement: Argo CD (app-of-apps), Helm/Kustomize, Operators.
Build reusable templates for namespaces, quotas, RBAC, policies.
Tekton/OpenShift Pipelines, Quay/Harbor, image signing/promotion, SBOM, vulnerability scanning (RHACS/StackRox/Trivy).
SCC/PSA, Network Policies, secrets management, compliance operator/OpenSCAP, Gatekeeper/Kyverno.
Security posture: CVE remediation, audit compliance, policy conformance.
Additional Skills
Red Hat certifications (EX280/EX288, RHCSA, RHCE).
Service Mesh (Istio/Red Hat Service Mesh).
Keycloak/SSO.
External Secrets / Vault.
AWS/Azure/GCP integration (LB, DNS, IAM, secrets), cost management/showback