Automation Consultant
Must-have:PythonGitSecurityLead
About the role
Lead the automation track of a multi year patch management programme in a financial services environment. Ansible Automation Platform is the orchestration layer for patch selection, sequencing, change control and evidence. Design the orchestration architecture, lead implementation engineers and hand over a working framework to the internal team.
Architecture and design
- Own the Ansible framework architecture: discovery, prioritisation, approval, sequencing, execution and verification, with one evidence trail across platforms.
- Author framework sections of high level and low level designs and support architecture review boards.
- Shape the intended state approach for agentless targets using NetBox or policy as code.
Build and technical leadership
- Lead automation and ServiceNow engineers.
- Deliver workflow templates for ServiceNow change gates, owner approvals, five ring promotion logic and evidence to Splunk.
- Set standards for execution environments, collections and content as code in GitHub Enterprise and JFrog, aligned to coding standards.
- Drive agentless canaries, including ESXi host evacuation and patching and network platform firmware updates.
- Build Robot Framework test coverage and own component, integration and security testing for automation content.
Partnership and handover
- Coordinate with the security team on integration points and shared approval paths.
- Work with platform owners on cluster aware sequencing, rollback and validation criteria.
- Mentor automation engineers to author playbooks independently; contribute to SOPs, recorded training and supervised knowledge transfer.
- Build reusable patterns for databases, middleware, storage, firmware, AIX and Solaris.
Required experience
- At least 10 years in infrastructure automation, including at least 8 years of hands on production Ansible experience.
- Deep Ansible Automation Platform expertise in workflow templates, execution environments, automation mesh across segmented networks, RBAC and credential plugins.
- Prior technical lead or architect experience on an enterprise automation programme.
- Python, Git, REST APIs and CI pipelines.
- Ansible Automation Platform integration with ServiceNow Change and CMDB.
- Patch or change orchestration at scale, including rolling and cluster aware sequencing, maintenance windows and rollback.
- Delivery in a regulated industry, preferably financial services, covering change control, separation of duties and evidence suitable for audit.
- Clear written design documentation for architecture and change review boards.
Preferred
- Red Hat certifications: RHCE, EX374 or EX467.
- Agentless patching for VMware ESXi and vCenter, Nutanix and network operating systems including Cisco, F5, Palo Alto and Juniper.
- CyberArk, PingID, Splunk and Datadog.
- NetBox or Nautobot as a source of truth.