Senior OpenShift/Kubernetes GitOps and CI/CD Engineer

Job Title: Senior OpenShift/Kubernetes GitOps and CI/CD Engineer
Location: Washington, DC
Type: Contract
Compensation: $75-80/hr W-2
Work Model: Remote – offsite
Hours: 40.0
Security Clearance: Must be able to obtain a Public Trust clearance

Responsibilities

• Architect and implement the GitOps and CI/CD capability from the initial foundation through production operationalization, using sound engineering and security practices.
• Assess the existing OpenShift/Kubernetes environment and application portfolio, developing repeatable patterns for containerizing and onboarding workloads from traditional virtualized environments.
• Design standardized GitHub repository structures for application source and GitOps deployment configuration, including branching, pull requests, CODEOWNERS, branch protection, review, and promotion practices.
• Engineer reusable OpenShift Pipelines/Tekton CI/CD templates for application build, test, security validation, container image creation, and promotion.
• Design and implement container image build workflows using Buildah or another appropriate OpenShift-compatible build technology, including image provenance and immutable image identification.
• Integrate CI pipelines with Nexus and/or Artifactory for application dependencies and build artifacts, ensuring separation between general artifacts and container images stored in Quay.
• Integrate ACS into the software supply chain and implement security policy gates, including blocking critical and high vulnerability images from promotion unless approved.
• Establish and operate Quay as the container image registry, managing repository structure, access, promotion, lifecycle, and image traceability.
• Design and implement the Argo CD/Red Hat OpenShift GitOps deployment model, covering desired state, reconciliation, environment promotion, drift management, and rollback.
• Establish standards for Helm and Kustomize for OpenShift application deployment and environment-specific configuration.
• Integrate GitOps and CI/CD workflows with Entra ID/RBAC, CyberArk, ServiceNow change control, and Datadog as appropriate.
• Establish end-to-end deployment traceability from source commit through deployment and validation.
• Build and validate a reference application deployment, then convert lessons learned into reusable templates, standards, and onboarding patterns.
• Design and test deployment recovery and rollback procedures to ensure application health post-deployment or rollback.
• Collaborate with infrastructure automation teams to establish integrated application delivery and automation capabilities.
• Document architecture, decisions, standards, interfaces, procedures, and operational guidance for long-term support.

Requirements

• Typically requires a BS degree and 8-12 years of relevant experience, or a Master's degree with 6-10 years of relevant experience.
• Strong hands-on experience designing, engineering, and operating enterprise CI/CD and GitOps solutions.
• Proven experience with Kubernetes or Red Hat OpenShift environments in production.
• Demonstrated expertise in containerized application delivery workflows, registry management, deployment, and rollback.
• Experience with Git-based workflows including pull requests, branching, and repository controls.
• Proficiency with CI/CD pipeline tools such as Tekton, GitHub Actions, GitLab CI/CD, Jenkins, or Azure DevOps.
• Experience with GitOps platforms like Argo CD, Flux, or similar tools.
• Strong knowledge of container build technologies such as Buildah, Docker/BuildKit, and registry management like Quay or Harbor.
• Expertise in Kubernetes packaging tools including Helm and Kustomize.
• Ability to integrate CI/CD or automation with security controls and ITSM/change-management systems.
• Strong troubleshooting, systems integration, and problem-solving skills across platforms.
• Ability to architect solutions, evaluate alternatives, document technical decisions, and communicate effectively.
• Must meet applicable contract citizenship and work authorization requirements and be able to obtain and maintain SEC Public Trust clearance.

Preferred Qualifications

• Experience with enterprise OpenShift Pipelines/Tekton and GitOps tools like Argo CD.
• Skills with Buildah, Quay, Red Hat Advanced Cluster Security, Nexus, and JFrog Artifactory.
• Experience in containerizing applications from VMs or traditional deployment platforms.
• Ability to design platform capabilities, standards, and reusable patterns from ground up.
• Understanding of secure software supply chain practices, including image signing, provenance, and immutable deployments.
• Familiarity with enterprise security frameworks such as FISMA, NIST, or FedRAMP.
• Relevant certifications in Kubernetes, Red Hat OpenShift, Cloud, DevOps, or related disciplines.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M-2
#LI-CK1
Ref: #851-Rockville-S1