Open Shift

P1
C3 TSTS 10 years in infrastructure/virtualization/containers; 3+ years Kubernetes (OpenShift 4.x); 2+ years hands-on OpenShift Virtualization/KubeVirt. Deep virtualization skills: vSphere/ESXi, Hyper-V, KVM/Libvirt; strong Linux (RHEL), storage (Ceph/ODF), networking (LL7, SR-IOV, VLAN/VXLAN). Proven experience migrating VMs at scale: discovery, tooling (Forklift), testing, and cutovers with minimal downtime. Solid automation with Ansible and Terraform; CI/CD/GitOps (Argo CD, Tekton), YAML-heavy workflows. Security/compliance experience: network segmentation, cert management, secrets, vulnerability management, audit readiness. Architect, install, and operate OpenShift Virtualization (CNV): VM/VMI lifecycle, templates, CDI/DataVolumes, live migration, hot-plug disks, performance profiles. Design performant storage and networking for VMs: ODF/OCS/Ceph (RBD/CephFS), Multus, SR-IOV, bonding, CPU pinning, hugepages, NUMA/topology awareness. Plan and execute migrations from VMware/Hyper-V using Forklift (and related tooling): discovery, dependency mapping, cutover, rollback, and data consistency. Build HA/DR/runbooks for VM workloads: backup/restore with Velero/OADP/Trilio, ODF-DR strategies, multi-AZ resilience. Implement security and governance: SCC/PSA, image/OVA pipelines, certificate/PKI, secrets management, network isolation policies, compliance operator/OpenSCAP. Establish observability for VMs and platform: Prometheus/Alertmanager, Grafana, EFK/Loki, SLOs/error budgets, capacity planning, chargeback/showback. Automate lifecycle and operations: cluster/node tuning, performance profiles, day-2 upgrades of CNV/Operators, Ansible/Terraform pipelines, GitOps patterns. Partner with app/infra/security teams to define standards, landing zones, golden images, and self-service workflows; mentor engineers and review designs. Red Hat certs (EX280, RHCSA/RHCE), OpenShift Virtualization Specialist; vSphere/NSX certs. Experience with ACM/OCM, Service Mesh, External Secrets, Vault, RHACS (StackRox). Multi-cloud/on-prem exposure (AWS/Azure/GCP, vSphere/bare metal).