OpenShift Consultant (Freelance | Flexible Hours)

O projekcie: Hi there! If you’re seeking a high-impact role within an ambitious and fast-growing software house, you might have just found your perfect match! We are seeking a highly skilled and experienced DevOps/ OpenShift Consultant to join our team.Our client is building a cloud-agnostic, sovereign-ready data platform prototype for a major global payments company. The platform is designed to run consistently across AWS EKS, Azure AKS, and an on-premise OpenShift environment, demonstrating true deployment portability across cloud and sovereign infrastructure. The core stack is a modern open-source lakehouse: Apache Spark and Apache Flink for batch and streaming processing, Apache Airflow for orchestration, and Apache Iceberg as the table format. All components are deployed and managed via Kubernetes operators, with infrastructure provisioned through Terraform and Helm. Working hours: The role is consultative in nature (a few hours per week), which offers a high level of flexibility - you can carry out your responsibilities at a time that suits you best. Wymagania: - At least 5 years of practice as a DevOps/Data/Platform Engineer - Experience in deploying OpenShift clusters, along with solid knowledge of managing applications on the OpenShift platform ( knowledge of - SCCs, Routes, OperatorHub, oauth-proxy patterns) - Comfortable with Helm chart authoring and environment-specific values management - Terraform for infrastructure provisioning (EKS/AKS modules) Nice to have:  - Exposure to disconnected or air-gapped Kubernetes deployments - Familiarity with data platform operators (Spark, Flink, or Airflow on Kubernetes) Codzienne zadania: - Participating in multi-environment validation in weeks 6-7, ensuring the platform behaves consistently across EKS, AKS, and OpenShift - Deploying and configuring the Spark Operator, Flink Operator, and Airflow on OpenShift, including all Security Context Constraints (SCC) and RBAC configuration - Setting up oauth-proxy sidecars for platform UIs (Spark History Server, Flink Dashboard, Airflow) integrated with an OpenShift-configured identity provider - Deploying and configuring the External Secrets Operator with HashiCorp Vault as the secrets backend - Managing image mirroring to an internal registry for disconnected/air-gapped deployment - Configuring PostgreSQL (via operator) as the shared database backend for Airflow and Nessie - Ensuring all Helm charts are OpenShift-compatible — non-root containers, correct SCCs, Routes rather than Ingress where required - Contributing to Terraform modules and Helm charts that are environment-aware but maintain a single source of truth across all three deployment targets