AWS OpenShift Infrastructure Architect / Lead

We are looking for a hands-on Senior Cloud Infrastructure Engineer / Architect OpenShift (ROSA) & AWS to lead end-to-end infrastructure modernization, establish a scalable architecture, and drive a complete technology stack overhaul.

The role

Own a production OpenShift (ROSA) and AWS platform end to end, as the sole platform owner. Design the architecture, run prod and non-prod, automate delivery, and keep the platform reliable, secure and cost-efficient.

What you will own

• OpenShift/ROSA: cluster configuration, machine pools, capacity, autoscaling, quotas and operators. Plan and run version upgrades and EUS lifecycle with Red Hat, including prechecks and post-upgrade validation.
• AWS foundation: multi-account Organizations and Control Tower, IAM Identity Center, SSO/MFA, least-privilege cross-account access. VPCs, DNS, load balancing, site-to-site VPN and Transit Gateway.
• Serverless: API Gateway, Lambda and S3 provisioning, permissions, networking and monitoring.
• Infrastructure as code: bring console-built resources under Terraform with reusable modules, locked remote state, reviewed plans and drift detection. Argo CD for Kubernetes delivery.
• Developer enablement: Helm templates, environment provisioning and Bitbucket Pipelines (or similar) integrations; documented deployment and rollback patterns.
• Security: RBAC, network policies, SCCs, secrets, encryption and certificates; patch vulnerabilities and coordinate fixes with Red Hat; access reviews and audit evidence.
• Alerts and incidents: own all monitoring and alerting (Instana, CloudWatch, PagerDuty, AWS and Red Hat notifications) so nothing is missed and nothing is noise. Lead Sev 1 incidents and own the on-call escalation path.
• Backup and recovery: implement platform backups, test restores, and maintain recovery runbooks.
• Cloud cost: own the full AWS bill across all accounts, including Marketplace subscriptions budgets, anomaly alerts, tagging, monthly reporting and optimisation.
• Architecture: design the target platform and set the standards DevOps and development teams build to; document decisions, diagrams and runbooks.

Must have

• 5+ years running production Kubernetes, 3+ on OpenShift; has led production OpenShift upgrades (ROSA strongly preferred).
• Red Hat Certified OpenShift Administrator (EX280) current.
• AWS Certified Solutions Architect Professional or AWS Certified DevOps Engineer Professional current.
• Production AWS: multi-account access, networking, IAM, DNS, load balancing and encryption.
• Proven system design: has designed a production platform (security, HA, DR) on their own and can defend the trade-offs.
• Terraform, Helm, Argo CD (or equivalent GitOps) and Git-based CI/CD in production; can import existing infrastructure and manage drift.
• Strong Linux, container and Kubernetes troubleshooting (networking, storage, scheduling, access); Bash and Python scripting.
• Alert tuning, restore testing, and leading Sev 1 response and post-incident reviews.
• Works independently as the sole platform owner: designs, decides, documents and delivers end to end; maintains runbooks and trains a backup engineer.
• Enough Java runtime knowledge (JDK, WebSphere Liberty) to triage app-to-platform issues.

Nice to have

• CKA or Red Hat Certified Advanced System Administrator in OpenShift (EX380).
• Instana administration and trace-based debugging; Fluentd or Vector logging pipelines; Argo CD at scale; AWS Control Tower; 3scale API management; Sealed Secrets.

Ideal Candidate

A strong technical leader who can lay the foundation, own the architecture, make critical technology decisions, and independently drive the entire infrastructure and technology modernization journey.

Important: We need a hands-on architect, not just an advisor or infrastructure administrator.