Senior Infrastructure Automation Engineer

System One, Inc.; Washington (District of Columbia); On-site; USD 96,000 - 124,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Life insurance

Job summary

System One is seeking a Senior Infrastructure Automation Engineer for a remote, 12 month+ contract to support the SEC ISS2 program. The role focuses on architecting, engineering, and building an enterprise automation capability centered on Red Hat Ansible Automation Platform and Ansible.

You will integrate with OpenShift/Kubernetes GitOps, CI/CD, and various enterprise systems, delivering reusable automation, RBAC, credentials management, and secure execution environments across Windows, Linux,

Qualifications

• BS degree plus 8–12 years of relevant experience or MS with 6–10 years.
• Hands-on experience designing enterprise infrastructure, configuration-management, or operations automation.
• Strong experience with Ansible/Ansible Automation Platform in production.
• Experience designing reusable automation including roles, playbooks, collections, inventories, credentials, and workflows.
• Experience using Git-based workflows to develop, review, test, and promote automation content.
• Experience integrating automation with APIs, webhooks, ITSM, secrets-management, or observability platforms.
• Experience administering RBAC, service accounts, credentials, execution environments, and audit logging.
• Production experience automating Windows and Linux/Unix, plus Kubernetes/OpenShift, virtualization, or cloud/storage networks.

Responsibilities

• Architect and implement the SEC enterprise automation capability using Ansible/AAP.
• Establish reusable AAP orgs, projects, inventories, credentials, and RBAC for multiple teams.
• Develop reusable Ansible roles, playbooks, and workflows for deployment and patching.
• Integrate GitHub Enterprise with AAP for auditable source control and testing.
• Integrate AAP with CyberArk or approved secrets-management.
• Design API-driven and event-driven automation with Datadog, ServiceNow, and other systems.
• Support Datadog onboarding, agent deployment, configuration, and observability tasks.
• Document architecture, standards, and runbooks for long-term operation.

Skills

Ansible/Automation Platform

Python

Bash

Windows/Linux automation

Education

BS degree

Master's degree

Tools

GitHub Enterprise

CyberArk

ServiceNow

Datadog

OpenShift

Kubernetes

Job description

Senior Infrastructure Automation Engineer

Remote

12 month+ contract

Federal End Customer – US Citizenship required

Must be able to obtain a public trust clearance

W2 Hourly Pay Rate: $80/hr. Range. Benefits available

System One IT has a remote, 12 month+ contract opening for a Senior Infrastructure Automation Engineer to support our client with their SEC ISS2 contract by architecting, engineering, and building an enterprise infrastructure and operations automation capability centered on Red Hat Ansible Automation Platform and Ansible. The SEC environment is expanding automation from an existing baseline and establishing a repeatable model that technical teams can use to automate infrastructure configuration, software and agent deployment, patching, operational procedures, and approved remediation without creating unnecessary dependencies on a single infrastructure team. The engineer will work closely with the OpenShift/Kubernetes GitOps and CI/CD engineer to build an integrated automation ecosystem supporting OpenShift modernization, containerization, observability, and day-to-day Operations. The role will help establish reusable automation, governance, RBAC, credentials, execution environments, APIs, webhooks, testing, and documentation across multiple SEC technical teams.

Primary Responsibilities

In this Role you will:

• Architect and implement the SEC enterprise infrastructure and operations automation capability using Ansible Automation Platform and Ansible.
• Establish reusable AAP organizations, projects, inventories, credentials, execution environments, job templates, workflows, RBAC, and operational standards for multiple technical teams.
• Develop and maintain reusable Ansible roles, playbooks, collections, and workflows for infrastructure configuration, software deployment, agent deployment, upgrades, patching, and operational procedures.
• Integrate GitHub Enterprise with AAP so automation source, version control, review, testing, and promotion are governed through an auditable Git-based process.
• Integrate AAP with CyberArk or the approved SEC secrets-management capability so credentials are protected and are not embedded in repositories or automation content.
• Design and implement API-driven and event-driven automation, including approved integrations with Datadog, ServiceNow, and other enterprise systems.
• Build the automation required to support Datadog onboarding, agent deployment, configuration, tagging, upgrades, and other repeatable observability tasks.
• Develop approved automated-remediation workflows that can be triggered by Datadog events or other operational conditions, with appropriate authorization, safety controls, auditability, and rollback considerations.
• Support infrastructure automation for Windows, Linux/Unix, OpenShift/Kubernetes, virtualization, storage, networking, and other applicable infrastructure domains while respecting the technical ownership of those teams.
• Work with the GitOps/CI/CD engineer to determine where Ansible/AAP should integrate with OpenShift and application delivery workflows without duplicating GitOps or container CI responsibilities.
• Establish development, testing, approval, and production-execution standards for automation so teams can safely build and manage their own approved automation within the shared AAP framework.
• Evaluate manual operational processes, identify appropriate automation opportunities, and engineer reusable solutions that reduce repetitive work and operational toil.
• Develop and validate automation in lower environments, test failure and rollback behavior, and establish evidence that demonstrates reliable execution before production use.
• Document architecture, standards, integrations, runbooks, automation usage guidance, and support procedures for the long-term operation of the platform.
• Work collaboratively with the OpenShift/Kubernetes GitOps and CI/CD engineer and other engineering teams to establish a cohesive enterprise automation capability.

Basic Qualifications

• Typically requires a BS degree and 8-12 years of prior relevant experience, or a Master's degree with 6-10 years of prior relevant experience. Additional relevant experience may be considered in lieu of degree requirements where permitted by contract.
• Strong hands-on experience designing and implementing enterprise infrastructure, configuration-management, or operations automation.
• Strong experience with Ansible and/or Ansible Automation Platform in production environments.
• Experience designing reusable automation including roles, playbooks, collections, inventories, credentials, execution environments, jobs, and workflows.
• Experience using Git-based workflows to develop, review, test, and promote automation content.
• Experience integrating automation platforms with APIs, webhooks, ITSM systems, secrets-management systems, or monitoring/observability platforms.
• Experience administering or engineering automation controls such as RBAC, service accounts, credentials, execution environments, and audit logging.
• Production experience automating Windows and Linux/Unix infrastructure and at least one of Kubernetes/OpenShift, virtualization, cloud, storage, or network platforms.
• Strong scripting and programming skills using Python, PowerShell, Bash, or comparable languages for automation and API integration.
• Strong troubleshooting, systems integration, and technical problem-solving skills across infrastructure and enterprise platforms.
• Ability to architect solutions, evaluate alternatives, document technical decisions, and communicate recommendations to technical teams and customer stakeholders.
• Must meet applicable contract citizenship and work authorization requirements and be able to obtain and maintain SEC Public Trust or other required clearance.

Preferred Qualifications

• Direct experience designing or administering Red Hat Ansible Automation Platform at enterprise scale.
• Experience with AAP organizations, execution environments, workflows, inventories, service accounts, credential management, RBAC, and API-driven execution.
• Experience integrating AAP/Ansible with CyberArk, ServiceNow, Datadog, GitHub, or comparable enterprise systems.
• Experience with event-driven automation and automated remediation triggered by monitoring/observability platforms.
• Experience supporting OpenShift/Kubernetes infrastructure and container platforms.
• Experience with GitOps/CI/CD platforms and understanding of how infrastructure automation complements application delivery pipelines.
• Experience with infrastructure
• Experience with infrastructure-as-code technologies such as Terraform or comparable tools.
• Experience building automation platforms and standards from the ground up rather than only maintaining established automation environments.
• Experience in federal environments governed by FISMA, NIST, FedRAMP, or similar security requirements.
• Relevant certifications in Ansible, Red Hat, Kubernetes, cloud, automation, or related disciplines.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M-MM1
#LI-MM1
Ref: #851-Rockville-S1