Principal OpenShift Networking Architect

Job Description Principal OpenShift Networking Architect

Location: Dublin 18 (2 days onsite per week)

Duration: Until the end of the year likely to be extended

Summary of this role: his resource will own the networking architecture for the OpenShift Container Platform and OpenShift Virtualisation platforms. They will be responsible for defining the future-state networking segmentation and connectivity model across container and virtual machine workloads including evaluation of modern Kubernetes networking and micro-segmentation technologies.

A key responsibility will be leading the transition from traditional NSX-based segmentation models to OpenShift-native networking and security controls including the discovery analysis and rationalisation of existing NSX Distributed Firewall policies into scalable OpenShift-native segmentation patterns for both container and virtual machine workloads.

This is a hands-on architecture role rather than a traditional network infrastructure role. The successful candidate must be a recognised OpenShift/Kubernetes networking specialist capable of defining standards producing architecture deliverables guiding implementation teams and providing technical leadership around network isolation multi-tenancy virtualisation networking and software-defined networking.

Skillset and background:

• 10 years of enterprise networking and infrastructure experience
  
• 5 years of hands-on Kubernetes networking experience
  
• Strong OpenShift networking experience within large enterprise or regulated environments
  
• Expert knowledge of OVN-Kubernetes architecture operation and troubleshooting
  
• Expert knowledge of Kubernetes networking constructs including Services Ingress Egress and Network Policies
  
• Hands-on experience with Multus and secondary network architectures
  
• Strong understanding of namespace isolation multi-tenancy and Kubernetes micro-segmentation
  
• Experience translating existing VMWare NSX Firewall and micro-segmentation policies into Kubernetes-native segmentation models using OpenShift Network Policies Admin Network Policies Cilium or Calico
  
• Strong understanding of the challenges associated with migrating from VM-based security controls to container and OpenShift-native security architectures
  
• Experience defining and implementing Zero Trust networking architectures
  
• Hands-on experience with OpenShift Virtualisation and KubeVirt networking models
  
• Experience evaluating and implementing modern Kubernetes networking platforms such as OVN-Kubernetes UDN/CUDN Isovalent Enterprise for Cilium Calico Enterprise or equivalent
  
• Ability to produce High-Level Designs (HLDs) Low-Level Designs (LLDs) standards and reference architectures
  
• Strong stakeholder management and technical leadership skills
  
• Red Hat OpenShift certifications or equivalent Kubernetes networking certifications would be advantageous
  

Key Deliverables:

• OpenShift Networking Reference Architecture
  
• Container and VM Segmentation Strategy
  
• Multi-Tenancy Design Standards
  
• Network Policy Framework
  
• OpenShift Virtualisation Networking Standards
  
• SDN/CNI Assessment and Recommendations
  
• Network Security and Micro-Segmentation Architecture
  
• Platform Networking Design Governanc