Principal OpenShift Networking Architect

Job Description – Principal OpenShift Networking Architect

Location: Dublin 18 (2 days onsite per week)

Duration: Until the end of the year, likely to be extended

Summary of this role: his resource will own the networking architecture for the OpenShift Container Platform and OpenShift Virtualisation platforms. They will be responsible for defining the future-state networking, segmentation and connectivity model across container and virtual machine workloads, including evaluation of modern Kubernetes networking and micro-segmentation technologies.

A key responsibility will be leading the transition from traditional NSX-based segmentation models to OpenShift-native networking and security controls, including the discovery, analysis and rationalisation of existing NSX Distributed Firewall policies into scalable OpenShift-native segmentation patterns for both container and virtual machine workloads.

This is a hands-on architecture role rather than a traditional network infrastructure role. The successful candidate must be a recognised OpenShift/Kubernetes networking specialist capable of defining standards, producing architecture deliverables, guiding implementation teams and providing technical leadership around network isolation, multi-tenancy, virtualisation networking and software-defined networking.

Skillset and background:

• 10+ years of enterprise networking and infrastructure experience
  


• 5+ years of hands-on Kubernetes networking experience
  


• Strong OpenShift networking experience within large enterprise or regulated environments
  


• Expert knowledge of OVN-Kubernetes architecture, operation and troubleshooting
  


• Expert knowledge of Kubernetes networking constructs including Services, Ingress, Egress and Network Policies
  


• Hands-on experience with Multus and secondary network architectures
  


• Strong understanding of namespace isolation, multi-tenancy and Kubernetes micro-segmentation
  


• Experience translating existing VMWare NSX Firewall and micro-segmentation policies into Kubernetes-native segmentation models using OpenShift Network Policies, Admin Network Policies, Cilium or Calico 
  


• Strong understanding of the challenges associated with migrating from VM-based security controls to container and OpenShift-native security architectures
  


• Experience defining and implementing Zero Trust networking architectures
  


• Hands-on experience with OpenShift Virtualisation and KubeVirt networking models
  


• Experience evaluating and implementing modern Kubernetes networking platforms such as OVN-Kubernetes, UDN/CUDN, Isovalent Enterprise for Cilium, Calico Enterprise or equivalent
  


• Ability to produce High-Level Designs (HLDs), Low-Level Designs (LLDs), standards and reference architectures
  


• Strong stakeholder management and technical leadership skills
  


• Red Hat OpenShift certifications or equivalent Kubernetes networking certifications would be advantageous
  

Requirements

Key Deliverables:

• OpenShift Networking Reference Architecture
  


• Container and VM Segmentation Strategy
  


• Multi-Tenancy Design Standards
  


• Network Policy Framework
  


• OpenShift Virtualisation Networking Standards
  


• SDN/CNI Assessment and Recommendations
  


• Network Security and Micro-Segmentation Architecture
  


• Platform Networking Design Governanc