AWS OpenShift Infrastructure Architect / Lead

Webuters; United States; Remote; USD 180,000 - 250,000; Full time

Job summary

Webuters is seeking a hands-on Senior Cloud Infrastructure Engineer / Architect focused on OpenShift (ROSA) and AWS to lead end-to-end infrastructure modernization, designing a scalable, secure and cost-efficient platform.

You will own production OpenShift and AWS environments, configure clusters, manage upgrades, implement IaC with Terraform and Argo CD, and drive DevOps automation with Helm, CI/CD pipelines and robust incident response.

Qualifications

• 5+ years running production Kubernetes environments.
• 3+ years hands-on OpenShift experience with upgrades (ROSA strongly preferred).
• Red Hat Certified OpenShift Administrator (EX280) current.
• AWS Certified Solutions Architect Professional or AWS Certified DevOps Engineer Professional current.
• Proven design of production platforms with security, HA and DR considerations.
• Proficient in Terraform, Helm and Argo CD (GitOps) for production delivery.

Responsibilities

• Own a production OpenShift/ROSA and AWS platform end to end as the sole owner.
• Design architecture, run prod and non-prod, automate delivery and ensure reliability, security and cost-efficiency.
• Lead upgrades, prechecks and post-upgrade validation with Red Hat.
• Implement IaC with Terraform and maintain drift detection; manage Kubernetes delivery via Argo CD.
• Define runbooks, monitor incidents, and own on-call escalation and Sev1 responses.
• Collaborate with development teams to enable rapid, safe deployments.

Skills

Kubernetes

OpenShift

ROSA

AWS

Terraform

Argo CD

GitOps

Bash

Python

Incident response

Tools

Argo CD

Kubernetes tooling

Terraform modules

Helm

CI/CD pipelines

Job description

We are looking for a hands‑on Senior Cloud Infrastructure Engineer / Architect OpenShift (ROSA) & AWS to lead end-to-end infrastructure modernization, establish a scalable architecture, and drive a complete technology stack overhaul.

The role

Own a production OpenShift (ROSA) and AWS platform end to end, as the sole platform owner. Design the architecture, run prod and non-prod, automate delivery, and keep the platform reliable, secure and cost-efficient.

What you will own

• OpenShift/ROSA: cluster configuration, machine pools, capacity, autoscaling, quotas and operators. Plan and run version upgrades and EUS lifecycle with Red Hat, including prechecks and post-upgrade validation.
• AWS foundation: multi-account Organizations and Control Tower, IAM Identity Center, SSO/MFA, least-privilege cross-account access. VPCs, DNS, load balancing, site-to-site VPN and Transit Gateway.
• Serverless: API Gateway, Lambda and S3 provisioning, permissions, networking and monitoring.
• Infrastructure as code: bring console-built resources under Terraform with reusable modules, locked remote state, reviewed plans and drift detection. Argo CD for Kubernetes delivery.
• Developer enablement: Helm templates, environment provisioning and Bitbucket Pipelines (or similar) integrations; documented deployment and rollback patterns.
• Security: RBAC, network policies, SCCs, secrets, encryption and certificates; patch vulnerabilities and coordinate fixes with Red Hat; access reviews and audit evidence.
• Alerts and incidents: own all monitoring and alerting (Instana, CloudWatch, PagerDuty, AWS and Red Hat notifications) so nothing is missed and nothing is noise. Lead Sev 1 incidents and own the on-call escalation path.
• Backup and recovery: implement platform backups, test restores, and maintain recovery runbooks.
• Cloud cost: own the full AWS bill across all accounts, including Marketplace subscriptions budgets, anomaly alerts, tagging, monthly reporting and optimisation.
• Architecture: design the target platform and set the standards DevOps and development teams build to; document decisions, diagrams and runbooks.

Must have

• 5+ years running production Kubernetes, 3+ on OpenShift; has led production OpenShift upgrades (ROSA strongly preferred).
• Red Hat Certified OpenShift Administrator (EX280) current.
• AWS Certified Solutions Architect Professional or AWS Certified DevOps Engineer Professional current.
• Production AWS: multi-account access, networking, IAM, DNS, load balancing and encryption.
• Proven system design: has designed a production platform (security, HA, DR) on their own and can defend the trade-offs.
• Terraform, Helm, Argo CD (or equivalent GitOps) and Git-based CI/CD in production; can import existing infrastructure and manage drift.
• Strong Linux, container and Kubernetes troubleshooting (networking, storage, scheduling, access); Bash and Python scripting.
• Alert tuning, restore testing, and leading Sev 1 response and post-incident reviews.
• Works independently as the sole platform owner: designs, decides, documents and delivers end to end; maintains runbooks and trains a backup engineer.
• Enough Java runtime knowledge (JDK, WebSphere Liberty) to triage app-to-platform issues.

Nice to have

• CKA or Red Hat Certified Advanced System Administrator in OpenShift (EX380).
• Instana administration and trace-based debugging; Fluentd or Vector logging pipelines; Argo CD at scale; AWS Control Tower; 3scale API management; Sealed Secrets.

Ideal Candidate

A strong technical leader who can lay the foundation, own the architecture, make critical technology decisions, and independently drive the entire infrastructure and technology modernization journey.

Important: We need a hands‑on architect, not just an advisor or infrastructure administrator.