Job Description
A Senior Consultant focused on AAP and OpenShift will lead the assessment, design, modernization, and optimization of enterprise automation platforms across complex hybrid environments. On a day-to-day basis, this individual will work closely with client infrastructure, platform, and security teams to evaluate current-state AAP deployments, architect highly available target-state solutions, and guide migrations across legacy AAP 1.x, AAP 2.4, and AAP 2.6 environments. They will administer and support OpenShift-based automation deployments, including managing AAP Operator implementations, custom resources, persistent storage, clustered databases, and backup and restore processes in containerized environments. This consultant will also design and enhance next-generation automation capabilities by implementing Event-Driven Ansible to respond to real-time observability events and by establishing Private Automation Hub guardrails for securely governing execution environments and curated automation content. In parallel, they will review and modernize existing Ansible playbooks and automation code, ensuring compatibility with newer Ansible Core versions, improving performance, enforcing coding standards, and resolving security risks and deprecated components. The role requires strong integration experience across enterprise Linux and Windows environments, including navigating network boundaries, proxy configurations, air-gapped deployments, and integrations with CMDBs, Git-based version control, and CI/CD pipelines. Additionally, the consultant will be responsible for translating security and compliance requirements into platform configuration, RBAC models, credential governance, and auditable automation workflows. From an operational strategy perspective, they will create technical roadmaps, disaster recovery plans, architecture decision records, and low-risk migration and rollback strategies while communicating platform value, ROI, and self-service capabilities to both technical and executive stakeholders. This person will also support enterprise OS lifecycle initiatives such as RHEL 8 to RHEL 9 upgrades using Leapp, manage phased application and PostgreSQL schema migrations aligned to Red Hat best practices, and help clients evolve from legacy RPM-based AAP deployments toward modern containerized and OpenShift Operator-based architectures.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.
Required Skills & Experience
• Enterprise AAP Lifecycle & Multi-Cluster Mesh Architecture: Elite competency in assessing current-state deployments, designing highly available target-state architectures, and orchestrating migrations across legacy AAP 1.x, AAP 2.4, and AAP 2.6 environments. Includes deep expertise in scaling hybrid topologies via Automation Mesh and optimizing VM execution node clustering.
• Cloud-Native OpenShift & Operator-Based Engineering: Hands-on knowledge of Red Hat OpenShift administration and cloud-native container infrastructure. This requires defining custom OpenShift resources, deploying and updating via the AAP Operator, and managing persistent state, storage parameters, and clustered database backups/restores within containerized environments.
• Next-Gen Automation Ecosystem Guardrails (EDA & PAH): Production-level expertise in designing and optimizing Event-Driven Ansible (EDA) engines to consume real-time observability data (e.g., Red Hat Lightspeed alerts, webhooks) and trigger automated remediation rulebooks. Proven skill in implementing Private Automation Hub (PAH) frameworks to securely sign, cache, and govern enterprise execution environments and collections.
• Playbook Modernization & Performance Optimization: Deep capability in reviewing and refactoring large portfolios of legacy Ansible code to enforce coding standards, eliminate deprecated modules, and resolve structural changes required for Ansible Core 2.16+ execution environments. This includes mitigating security vulnerabilities like template injection risks (e.g., CVE-2023-5764) within conditionals.
• Enterprise Infrastructure & Network Topology Integration: Mastery of physical, virtual, and hybrid-cloud environments across Red Hat Enterprise Linux (RHEL) and Windows infrastructure. Expertise encompasses navigating complex security boundaries, configuring secure proxy settings, managing air-gapped environment constraints, and integrating AAP with Enterprise CMDBs and CI/CD version control architectures (Git).
• Platform Security Governance, Auditing, and Compliance: Strategic capability to translate rigorous corporate compliance and security profiles into system configurations, Role-Based Access Control (RBAC) tiers, and credential policies. Utilizes advanced auditing metrics (such as AAP 2.6 automated job labeling) to provide a verifiable chain of intent for automated remediation pipelines to auditors.
• Business Continuity, Strategy, and Stakeholder Engagement: Proven ability to author technical roadmaps, disaster recovery playbooks, architecture decision records (ADRs), and low-downtime cutover/rollback strategies. Highly developed executive-level communication skills used to bridge complex platform capabilities (like ROI tracking dashboards or self-service portal features) directly into organizational business outcomes.
• OS Lifecycle & In-Place Upgrades (RHEL 8 to RHEL 9): Hands-on expertise managing enterprise operating system lifecycle transitions. Proficient in executing Red Hat Leapp framework upgrades, resolving OS-level software dependencies, repository mapping, and validating system integrity across physical and virtual RHEL estates.
• Phased Application & Schema Migration: Deep understanding of Red Hat's "one-change-at-a-time" architectural constraint. Proven ability to extract legacy AAP data, perform PostgreSQL database migrations (Postgres 13 to 15+), and execute seamless application-layer upgrades following decoupled OS maintenance windows.
RPM to Containerized Topology Modernization: Specialized skill in managing legacy RPM-based AAP deployments on RHEL, with the distinct capability to architect the eventual platform transition from RHEL 9 RPM layouts into cloud-native, containerized, or OpenShift-Operator architectures.
Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.