nOpenShift Enterprise Architect

The\n AEGIS program at Leidos is seeking a highly experienced \nOpenShift Enterprise Architect with 8+ years of senior-level experience designing, implementing, and governing enterprise container-platform architectures. This position supports NASA’s Office of Strategic Infrastructure (OSI) Facilities and Real Estate Division (FRED) IT within a complex on-premises Red Hat OpenShift environment used to host enterprise applications such as the Maximo Application Suite (MAS), IBM Storage Fusion, and other mission-critical workloads.\n \n, * Bachelor’s degree in Information Systems, Computer Science, Engineering, or related field.\n

• Minimum 8+ years of combined OpenShift, Kubernetes, and/or Linux experience.\n
• Must have a current RedHat OpenShift Administration certification or able to obtain certification within 6 months of employment.\n
• Proficient in OpenShift administration, including cluster management, application deployment, configuration, troubleshooting, performance tuning, and patching.\n
• Strong understanding of Kubernetes concepts and principles.\n
• Solid experience with Linux operating systems, including command-line skills and system administration tasks.\n
• Experience with container technologies and container orchestration platforms.\n
• Knowledge of networking concepts such as DNS, load balancing, and security.\n
• Ability to diagnose and resolve complex issues within the OpenShift environment.\n
• Proficiency in scripting languages (e.g., Python) for automation and system management.\n
• Excellent verbal and written communication skills with the ability to collaborate effectively across business and technical teams.\n
• Ability to learn quickly and work in a fast-paced, collaborative environment.\n, * Familiarity with user synchronization methods or large-scale environment deployments.\n
• Experience using Jira Service Management or similar platforms for issue tracking.\n

The architect will provide high-level technical strategy, platform governance, integration design, security architecture, and cross-organizational leadership to ensure OpenShift remains secure, scalable, resilient, and aligned with enterprise IT standards.\n \n \nPrimary Responsibilities:\n \n Enterprise Architecture & Platform Strategy\n \n \n

• Define the end-to-end architecture for the enterprise OpenShift platform, including cluster topology, node architecture, compute/storage strategy, and high-availability patterns.\n
• Develop and maintain lifecycle plans, deployment workflows, and CM baselines.\n
• Establish architectural standards, reference architectures, and reusable patterns for containerized workloads.\n
• Lead platform capacity planning, scalability modeling, and performance optimization initiatives.\n

\n OpenShift Platform Design, Governance & Lifecycle Management\n \n \n

• Design and architect on-prem and hybrid OpenShift environments including installation, upgrades, cluster expansion, multi-cluster governance, and infrastructure dependencies.\n
• Oversee the design and governance of cluster objects (namespaces, operators, ingress, storage classes, policies, RBAC, quotas, pod security standards).\n
• Ensure proper architectural controls for backup and restore, DR/Failover strategy, cluster federation, and platform observability.\n
• Provide architectural oversight for application onboarding, integration patterns, and workload migrations into OpenShift.\n

\n Security Architecture, Compliance, & Zero-Trust Controls\n \n \n

• Implement enterprise security policies and zero-trust requirements across clusters.\n
• Architect platform-wide certificate management, PKI integration, TLS enforcement, secrets-management policies, encrypted storage strategies, and data-protection baselines.\n
• Direct vulnerability remediation strategy, patch management standards, and secure configuration hardening.\n

\n Networking & Infrastructure Architecture\n \n \n

• Architect routing, ingress, load balancing, reverse proxy, DNS, and firewall rule structures supporting resilient application connectivity.\n
• Define infrastructure integration patterns with hypervisors, bare-metal, storage subsystems, and enterprise identity platforms.\n
• Provide architectural guidance for cross-cluster networking, service mesh, egress controls, multitenancy boundaries, and traffic-engineering strategies.\n

\n Monitoring and Automation\n \n \n

• Architect end-to-end observability solutions using Prometheus, Grafana, Alertmanager, and enterprise logging platforms (e.g., Splunk).\n
• Define alerting strategy, SLO/SLI metrics, cluster health dashboards, capacity analytics, and anomaly-detection baselines.\n
• Ensure data pipelines for logs, metrics, and events meet enterprise governance, retention, and compliance requirements.\n
• Establish automation standards using GitOps (ArgoCD), Ansible, Terraform, and OpenShift APIs.\n

\n Cross-Organizational Stakeholder Engagement & Continuous Improvement\n \n \n

• Produce architectural diagrams, executive briefings, governance documentation, and technical decision packages.\n
• Recommend platform enhancements, cost-optimization opportunities, efficiency improvements, and modernization paths.\n