Job Description

A client of Insight Global is seeking an experienced Senior OpenShift Bare Metal Consultant to join our team and lead the deployment, automation, security, and lifecycle management of large-scale OpenShift environments. The ideal candidate will have deep hands-on expertise managing enterprise OpenShift platforms running on bare metal infrastructure and supporting a fleet of 60+ clusters across multiple environments. This role will be responsible for planning, deploying, upgrading, and maintaining applications using GitOps methodologies while ensuring platform consistency, security, and operational excellence across the entire cluster landscape.

The consultant will drive GitOps and fleet management initiatives, including the deployment and lifecycle management of applications and platform services across OpenShift environments. A key responsibility will be upgrading, installing, and maintaining security solutions such as Prisma Cloud, SentinelOne, and Palo Alto Cortex through GitOps-driven workflows. The successful candidate will have extensive experience building scalable GitOps frameworks and implementing repeatable deployment strategies across large, distributed Kubernetes environments.

From a security perspective, the consultant will be responsible for integrating OpenShift clusters with Privileged Access Management (PAM) solutions, managing secrets and credentials, and establishing secure connections between HashiCorp Vault and the External Secrets Operator (ESO). Additional responsibilities include implementing post-installation security configurations, automating kubeadmin credential rotations, configuring MFA and OIDC integrations with Okta, and ensuring adherence to enterprise security standards and best practices across all clusters.

The role also requires strong application and platform support capabilities, including custom Helm chart development and maintenance for security and operational tooling. The consultant will support critical tenant environments, including specialized workloads such as 5G Core platforms and other mission-critical applications. They will be expected to troubleshoot complex platform, infrastructure, and service installation issues while working closely with engineering, operations, and security teams to ensure platform reliability and performance.





Automation is a significant component of this position. The ideal candidate will have extensive experience developing production-ready automation using Ansible Automation Platform (AAP), creating playbooks and workflows for cluster lifecycle management, health checks, inventory management, security tool deployment, and automated merge request generation. The consultant will also be responsible for creating and maintaining detailed Methods of Procedure (MoPs), technical documentation, and operational runbooks to support platform operations and knowledge transfer.

Required experience includes advanced expertise with Red Hat OpenShift on bare metal, Kubernetes administration, GitOps tools and practices, Helm, HashiCorp Vault, External Secrets Operator (ESO), Ansible Automation Platform (AAP), Okta integrations, enterprise security tooling, and large-scale cluster management. Experience supporting highly available, production-grade environments and troubleshooting complex platform issues is essential.

Beyond technical qualifications, we are looking for a highly professional consultant with exceptional communication skills, a team-oriented mindset, and a positive attitude. The ability to work effectively with cross-functional teams, take ownership of complex initiatives, and deliver high-quality solutions in enterprise environments is critical to success in this role. Candidates should have a proven track record of successfully implementing and supporting OpenShift platforms at scale while demonstrating strong customer-facing and consulting capabilities.

Skills and Requirements

- 3+ years of OpenShift experienceExperience with OpenShift on BareMetalExperience with Ansible Automation Platform (AAP)Experience with security tools such as Prisma and SentinelOne

GitOps & Fleet Management

- Planning, deployment,



and lifecycle management of applications via GitOps across our entire fleet of over 60 OpenShift clusters.
- Upgrading and installing security tools (Prisma Cloud, SentinelOne, Palo Alto Cortex) across all clusters via GitOps.

Kubernetes/OpenShift Security & Secret Management

- Integration of clusters with Privileged Access Management (PAM) (secrets, URLs, etc.).
- Creating and updating secrets in HashiCorp Vault and establishing integrations with the External Secrets Operator (ESO).
- Post-installation security configuration (Kubeadmin password rotation AAP playbook, MFA OIDC OKTA setup).

Application & Platform Support

- Custom Helm chart development for tools like Prisma and SentinelOne versions.
- Supporting core tenant environments (e.g., 5G Core and other specialized application workloads).
- Troubleshooting complex service installations.

Automation & Scripting

Developing production automation playbooks and scripts via Ansible Automation Platform (AAP) for tasks like inventory check, creation and cluster health checks, generate merge request for SentinelOne & Prisma deployment, etc.

Method of Procedure (MoP) creation and documentation.

Key Professional Qualities

Beyond the technical expertise, exceptional professionalism and a positive attitude are a major asset to our team and a requirement for this role.

Location Preference - MontrealLanguage preference - French speaking (preference; NOT REQUIRED

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].

#J-18808-Ljbffr

📌 CANADA Sr. Consultant: OpenShift BareMetal (Montreal)
🏢 Insight Global
📍 Montreal