OpenShift Platform Engineer

Overview M&T Bank is seeking an experienced OpenShift Platform Engineer to help design, operate, secure, and continuously improve its enterprise container platform. This senior individual-contributor role is responsible for complex platform[1]engineering initiatives across OpenShift and hybrid-cloud environments, including cluster lifecycle management, automation, reliability, security, observability, and developer enablement. The engineer will independently lead technical work from design through production implementation, troubleshoot complex cross-domain problems, establish reusable engineering standards, and mentor other engineers. The successful candidate will combine deep OpenShift or Kubernetes experience with strong Linux, networking, storage, automation, cloud, security, and communication skills. Primary Responsibilities

• Architect, deploy, upgrade, scale, and support production OpenShift clusters across hybrid infrastructure.
• Lead complex platform initiatives independently from technical design and risk assessment through implementation, validation, documentation, and operational transition.
• Automate cluster provisioning, configuration, upgrades, policy enforcement, and operational tasks through reusable infrastructure-as-code, configuration-management, GitOps, and CI/CD practices.
• Diagnose and resolve complex issues involving Kubernetes, Linux, containers, networking, ingress, DNS, certificates, storage, compute, identity, and application connectivity.
• Establish monitoring, alerting, health checks, operational dashboards, capacity-planning practices, and performance improvements that strengthen platform reliability.
• Coordinate incident response and root-cause analysis, then implement and validate corrective and preventive actions.
• Strengthen platform resiliency through tested backup, recovery, and disaster-recovery capabilities.
• Enforce least-privilege access, OpenShift and Kubernetes RBAC, workload security controls, secrets and certificate practices, platform policies, and create audit-ready documentation.
• Collaborate with cybersecurity, risk, and control teams to assess platform changes, remediate vulnerabilities and configuration findings, and satisfy applicable control requirements.
• Assess emerging technologies and recommend adoption based on security, resilience, supportability, operational complexity, cost, and business value.
• Deliver secure self-service capabilities, reference configurations, and reusable patterns that streamline application onboarding and improve the developer experience.
• Engage application, cloud, network, storage, security, support, and vendor teams to deliver platform capabilities and resolve cross-domain issues.
• Define platform standards, reference architectures, operational procedures, technical designs, and support documentation.
• Mentor engineers and review peer-created technical designs, automation, documentation, and production changes.
• Present technical options, tradeoffs, risks, and recommendations clearly to stakeholders across technical and management levels.
• Champion engineering, change-management, IT service-management, security, risk, and regulatory practices applicable to the Bank.
• Contribute to an on-call support rotation., Stand up and operate bare-metal OpenShift container platforms, manage cluster lifecycle, and transition provisioning to Terraform- and Ansible-based infrastructure as code. Support platform services, observability, DNS, cybersecurity compliance, documentation, feasibility assessments, and OCONUS hardware bootstrap activities. The role requires strong Linux administration, Kubernetes expertise, active DoD Secret clearance, US citizenship, and recurring access to a DISA SIPR facility. Top Skills: AnsibleArgocdCniCsiFluxGitopsKubernetesLinuxOpenshiftPowerdnsRhelSpectro CloudTerraformVMware Acuity Insurance

System Engineer II (OpenShift Containers Platform)

7 Days Ago In-Office or Remote United States 87K-125K Annually Mid level 87K-125K Annually Mid level Insurance * Software Designs, implements, and supports enterprise infrastructure platforms centered on OpenShift, Kubernetes, GitOps, and container technologies. Responsibilities include cluster lifecycle management, CI/CD, virtualization, storage, monitoring, automation, security, backups, disaster recovery, troubleshooting, system upgrades, documentation, and incident response. The role collaborates cross-functionally, mentors junior engineers, supports continuous improvement, and participates in on-call activities and after-hours changes when needed. Top Skills: AclsAnsibleBashCronDnsDockerEncryptionEnterprise Backup And Disaster Recovery SolutionsFirewallsGitGitopsKubernetesLinuxMulti-Factor AuthenticationOpenshiftPodmanPowershellPrometheusPythonRdpRed Hat Advanced Cluster Management (Acm)RoutingSolarwindsSshTcp/IpVlansVMwareVulnerability ManagementWindows ServerZena, Peraton

• Combined minimum of 8 years’ higher education and/or work experience in systems design, management and/or architecture
• Strong understanding of the system development and infrastructure lifecycle and architecture, vendor best practices, IT Service Management, and systems design
• Demonstrated proficiency administering and supporting production OpenShift or Kubernetes environments.
• Strong troubleshooting experience across Linux, containers, networking, storage, compute, identity, and distributed application platforms.
• Hands-on experience automating infrastructure or platform operations using scripting, configuration management, infrastructure as code, GitOps, or CI/CD practices.
• Working knowledge of Git-based development, peer review, testing, and controlled change-management practices. * A proven record of independently leading complex technical work, evaluating constraints and risks, and delivering high-quality production implementations with limited supervision.
• Demonstrated success translating business, security, operational, and technical requirements into maintainable platform solutions.
• Strong written and verbal communication skills, including the ability to explain technical designs, risks, tradeoffs, and recommendations clearly.
• Experience mentoring engineers and reviewing technical designs, automation, documentation, or production changes.

Education and Experience Preferred

• Bachelor’s degree in Computer Science, Computer Engineering, Management Information Systems, or a related field.
• Experience administering Red Hat OpenShift in a large, multi-cluster production environment.
• Expertise with managed Kubernetes environments, specifically Azure Kubernetes Service (AKS), Elastic Kubernetes Service (EKS), Azure Red Hat OpenShift (ARO), and/or Red Hat OpenShift on AWS (ROSA).
• Linux systems administration experience and familiarity with container technologies such as Podman or Docker.
• Experience implementing GitOps and continuous delivery using Argo CD or a comparable platform.
• Automation experience with Ansible, Terraform, Python, Go, or Bash.
• Knowledge of observability platforms and practices spanning metrics, logs, traces, dashboards, alerting, and capacity analysis.
• Knowledge of container security, including vulnerability management, image governance, policy enforcement, and security baseline management.
• Experience designing or supporting self-service platform capabilities and application-team onboarding.
• Professional experience in financial services or another highly regulated environment.

Designs, operates, secures, and improves enterprise OpenShift and Kubernetes platforms across hybrid-cloud environments. Responsibilities include cluster lifecycle management, automation, troubleshooting, observability, resiliency, security controls, disaster recovery, developer self-service, incident response, documentation, and technical leadership. The engineer independently leads complex platform initiatives, collaborates across infrastructure and security teams, mentors engineers, and participates in on-call support., M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $116,400.00 - $194,000.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation. The range listed above corresponds to our national pay range for this role. The specific pay range applicable to you may vary based on your location., In-Office or Remote 2 Locations 146K-234K Annually Senior level 146K-234K Annually Senior level Aerospace * Information Technology * Security * Cybersecurity * Defense Install, operate, and lifecycle-manage bare-metal OpenShift and Kubernetes platforms. Build Terraform and Ansible infrastructure-as-code provisioning, support platform services and virtualization, implement STIG and cybersecurity compliance, monitor performance, and document architecture and operations. The role also supports OCONUS hardware bootstrap activities and transitions manual provisioning to an IaC-managed model. Top Skills: AnsibleArgocdCniCsiFluxGitopsKubernetesLinuxOpenshiftPowerdnsRhelSpectro CloudTerraformVMware

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute