Software Engineer

CI/CD Integration: Embedding Ansible runs in GitHub Actions, GitLab CI, Jenkins, or Azure Pipelines for automated testing, linting (ansible-lint), and deployment. Secrets Management: Integrating with HashiCorp Vault, Ansible Vault, or cloud KMS for secure handling of passwords, API keys, and TLS certificates.

Position would require the candidate to be a W2 employee of Donatech.
US Citizenship Required.
Active Secret Clearance Required.

Ansible Playbooks & Roles: Writing idempotent playbooks, structuring roles for reusability, managing dependencies.
YAML & Jinja2: Deep understanding of YAML syntax, Jinja2 templating, filters, and conditionals for dynamic configuration.
Inventory Management: Building dynamic and static inventories, grouping, host variables, and integration with external sources

Linux Administration: Strong proficiency with common distributions (RHEL, Ubuntu, Debian, Alpine), package management, systemd, networking config, and security hardening.
Windows Support: Ansible Windows modules, PowerShell remediation, and Active Directory integration (if applicable).

Infrastructure Abstraction: Combining Ansible with Terraform or CloudFormation for hybrid approaches or using Ansible alone for configuration post-provisioning.
Container & Kubernetes: Ansible for cluster bootstrapping, pod/ deployment management, and container runtime configuration.

Version Control: Git workflows for playbook/role repositories, branching strategies, and pull-request-based reviews.
CI/CD Integration: Embedding Ansible runs in GitHub Actions, GitLab CI, Jenkins, or Azure Pipelines for automated testing, linting (ansible-lint), and deployment.
Testing & Validation: Using Molecule for role testing, TestInfra for server validation, and integration with schema/ policy checks.

Secrets Management: Integrating with HashiCorp Vault, Ansible Vault, or cloud KMS for secure handling of passwords, API keys, and TLS certificates.
Compliance & Auditing: Ensuring playbooks meet organizational security standards, generating compliance reports, and maintaining audit trails.
Networking Basics: DNS, DHCP, VPCs/subnets, load balancers, firewalls, and IP address management.

Other IaC Tools: Familiarity with Terraform, Pulumi, or CloudFormation helps when designing hybrid or multi-cloud strategies.
Observability: Wiring Ansible outputs into monitoring stacks (Prometheus, Grafana, ELK, Splunk) for drift detection and operational visibility.
Scripting & Automation: Python or Bash for custom modules, hooks, or glue code between Ansible and other tooling.