• Audit our existing AWS environment, including the current admin web application, and assess what should be preserved, wrapped or retired as part of the target design • Design and implement a modular, reusable Terraform codebase covering our core AWS infrastructure (compute, networking, storage, IAM and managed services), replacing manual/console-driven provisioning and the parts of the existing admin tool that fall outside a proper audit trail • Set up remote state management with locking (for example S3 and DynamoDB) and encryption at rest, and define access controls so state files are never stored locally or committed to version control • Build and integrate CI/CD pipelines that plan, validate and apply Terraform changes automatically, including automated policy and security scanning (Checkov, tfsec) on every pull request • Establish version control workflows, module structure and environment separation (dev/staging/prod and demo) so every infrastructure change is peer reviewed, logged and attributable to a person and a pull request • Embed our existing compliance obligations into reusable modules and pipeline checks: secure configuration and patch/update tracking relevant to Cyber Essentials Plus, access control and logging relevant to ISO 27001, and change control and data handling discipline relevant to our Bacs Approved Bureau status • Sequence the migration plan so it does not put ISO 27001 certification at risk, given our audit falls within this contract window. You are not responsible for managing or liaising on the audit itself, but the phasing, rollback approach and documentation must be aware of that date • Design and build an on-demand ephemeral environment capability: a full, isolated stack that a developer or QA engineer can spin up on demand, run a complete test pass against, and tear down automatically afterward • Ensure any fixture or seed data used in ephemeral test environments is synthetic or properly masked, not copied production data, given BAB rules on customer data handling and verification • Document architecture decisions, runbooks and module usage so the environment is maintainable after the engagement ends • Deliver hands-on training and workshops for the internal CTO, DevOps and infrastructure team, pairing with staff, including the lead DevOps engineer who built the current admin tool, on real migration work • Define a phased migration plan that brings existing infrastructure under code without service disruption, prioritising the highest risk manual and unaudited changes first • Produce a transition and handoff plan and knowledge transfer materials ahead of contract end, with a clear list of what the internal team owns going forward

• Design, implement, and maintain scalable, reliable infrastructure in AWS • Operate and improve Kubernetes-based environments, including production workloads • Build and maintain infrastructure as code using Terraform • Improve CI/CD pipelines, deployment workflows, and release automation in partnership with engineering teams • Build and maintain the packaging and reference architectures customers use to install our software in their own environments • Strengthen observability across the platform, including monitoring, logging, alerting, and actionable dashboards • Improve developer experience through tooling, environment automation, and self-service infrastructure • Operate within and preserve the established security and compliance posture of our environments • Monitor, troubleshoot, and resolve complex infrastructure issues with clear and timely communication • Participate in incident response and post-incident analysis • Develop and maintain documentation, runbooks, and technical standards • Identify opportunities to improve cost efficiency, performance, and resilience across environments

• Asumirás el liderazgo estratégico para el diseño, implementación, tuning y aseguramiento del stack tecnológico de Oracle en plataformas críticas del sector financiero • Diseñar y desplegar arquitecturas de infraestructura híbridas y Cloud Native en OCI altamente resilientes, garantizando conectividad avanzada y alta disponibilidad • Optimizar y realizar tuning avanzado en plataformas de capa media y clústeres complejos (WebLogic, SOA Suite, Forms & Reports) para maximizar el rendimiento operativo • Blindar el ecosistema crítico de la organización mediante la implementación de arquitecturas de seguridad robustas, gestión de identidades (IAM) y controles de ciberseguridad especializados para la banca • Orquestar la infraestructura como código (IaC) y la conteneización utilizando Terraform y Kubernetes (OKE) para automatizar y escalar los entornos financieros • Asegurar el alineamiento y cumplimiento de las plataformas con los estándares y marcos internacionales de referencia (NIST, CIS, COBIT, ITIL)

Role Description Maintains the OBIWAN operating-system, virtualization, server, network, storage, monitoring, and cybersecurity environment to ensure continuous, secure, and reliable service. The position administers Red Hat Enterprise Linux and supporting Windows/VMware infrastructure, monitors Oracle/Exadata-related platforms, performs controlled patching and lifecycle maintenance, resolves infrastructure incidents, maintains architecture and inventory records, and supports ATO sustainment, vulnerability remediation, audits, and FAA cybersecurity coordination. The candidate must have the ability to operate effectively under pressure adhering to the ProSol Core Values of: - Agility: rapid adaptation to the changing requirements and environment of our clients; - Excellence: Service quality that exceeds the expectations of our clients; - Integrity: Accountability and honesty−always doing the right thing; - Long-Term Commitment: Unquestioned loyalty and dedication to our clients, partners and employees. Qualifications - Advanced Red Hat Enterprise Linux administration, including services, permissions, filesystems, networking, logging, shell scripting, package management, patching, hardening, and troubleshooting. - Hands-on experience with VMware/VxRail or comparable virtualization, Windows server dependencies, networking, storage, backup, monitoring, and enterprise data-center operations. - Experience with Oracle/Exadata-related infrastructure, Oracle Enterprise Manager, secure shell access, certificates, identity services, and application/database dependencies. - Strong cybersecurity operations knowledge, including vulnerability scanning, secure configuration, patch management, ATO support, NIST SP 800-53 controls, POA&M management, evidence collection, and audit readiness. - Ability to diagnose complex incidents spanning hardware, operating systems, network, storage, databases, applications, security controls, and vendor products. - Ability to plan controlled maintenance, assess impact, document implementation and rollback steps, validate results, and communicate risk clearly. - Strong technical documentation and collaboration skills, including architecture diagrams, inventories, runbooks, incident records, security artifacts, and customer-ready recommendations. Requirements - Bachelor’s degree in computer science, information technology, cybersecurity, engineering, or a related technical field; directly relevant experience may substitute for a portion of formal education. - At least seven years of experience supporting Linux-based enterprise infrastructure, systems administration, cybersecurity operations, or mission-critical data-center environments. - At least five years of hands-on Red Hat Linux or comparable enterprise Linux administration experience. - Demonstrated experience with patching, monitoring, virtualization, infrastructure troubleshooting, secure configuration, vulnerability remediation, and disaster-recovery readiness. - Experience supporting federal information systems, sensitive financial data, or other environments requiring formal authorization, audit, and records-management controls. Preferred Qualifications - Red Hat Certified System Administrator (RHCSA), Red Hat Certified Engineer (RHCE), Security+, CISSP, VMware, Microsoft, Oracle, or comparable infrastructure/security certification. - Experience with Dell VxRail, Oracle Exadata X9, Oracle Enterprise Manager, PRTG, Splunk, Microsoft Defender, Nessus, WebInspect, or similar monitoring and security tools. - Experience supporting FAA security requirements, ATOM/SMART, ATO recertification, SSP/SAR/ISCP/PTA documentation, and FAA ISSO coordination. - Experience with Active Directory, service-account governance, MFA, certificate renewal, cipher hardening, log aggregation, and security-event analysis. - Experience coordinating vendor service requests, hardware replacement, enterprise data-center access, and remote/onsite incident response. Core Competencies - Red Hat Linux administration - Infrastructure monitoring and recovery - Virtualization and data-center support - Cybersecurity and ATO sustainment - Vulnerability and patch management - Architecture and configuration control - Incident response and troubleshooting - Technical documentation and audit readiness Supervisory Responsibilities This position has no routine direct reports. The employee may act as infrastructure or cybersecurity technical lead, coordinate vendors, direct technical response during incidents, and mentor or cross-train team members. Work Environment and Physical Requirements Work is primarily performed remotely or at a Contractor facility and requires extended computer use, frequent review of monitoring data and logs, and occasional work outside normal hours. Pre-approved travel to the FAA Enterprise Data Center may require entry into controlled technical spaces, walking, standing, bending, reaching, and handling or inspecting installed equipment in accordance with site safety rules. Performance Expectations - OBIWAN infrastructure remains available, stable, secure, monitored, patched, and recoverable. - Incidents and alerts are detected early, escalated appropriately, resolved safely, and documented through root cause and preventive action. - Security findings, POA&M items, patches, certificates, and audit evidence are tracked to timely and verifiable closure. - Architecture diagrams, inventories, configuration baselines, runbooks, and maintenance records remain accurate and current. - Maintenance and infrastructure changes are fully planned, tested, approved, reversible, and executed with minimal user impact. Position Description Disclaimer This description summarizes the position’s primary duties and may be revised for related business or contract needs. It does not create an employment contract. Reasonable accommodations may be provided in accordance with applicable law and company policy. Additional Information ProSol is an equal opportunity employer, all interested qualified applicants are encouraged to apply, EEO/D/M/V/F. ProSol welcomes and encourages diversity in the workforce. All your information will be kept confidential according to EEO guidelines.