Administrator Systemów Informatycznych

PKO Finat Sp. z o.o. is hiring an IT Systems Administrator to work onsite in Warszawa - Ursynów, ul. Pileckiego.

• Knowledge of OpenShift cluster operations (training DO180).
• Understanding of RBAC, network, storage, and upgrade procedures (training DO280).
• Experience with scaling, automation, CI/CD, and GitOps (training DO380).
• Familiarity with multi-cluster management using RHACM (training DO432).
• Skills in Advanced Cluster Security including scanning and runtime policies (training DO430).
• Ability to install OpenShift clusters.
• Knowledge of GitLab CI including rules, needs, include, cache, and Kubernetes runners.
• Experience with Tekton and OpenShift Pipelines.
• Hands-on with Buildah, Kaniko.
• Familiarity with Harbor, Quay, Trivy/ACS, cosign, and SBOM.
• Proficient in monitoring tools: Prometheus, Thanos, ServiceMonitor, PodMonitor, alert rules, Alertmanager, and alert routing.
• Experience with logging solutions: LokiStack, cluster-logging, Vector, object storage retention.
• Knowledge of security contexts (SCC), ServiceAccount, RBAC least privilege, and NetworkPolicy.
• Experience with cert-manager.

Nice to have:

• Experience with virtualization (training DO316).

• Operate and manage OpenShift clusters as outlined in trainings DO180, DO280, DO380, DO432, and DO430.
• Implement RBAC policies including least privilege.
• Manage cluster network and storage configurations.
• Perform cluster upgrades and scaling.
• Automate CI/CD pipelines using GitLab CI, Tekton, and GitOps.
• Manage multi-cluster environments with RHACM.
• Implement Advanced Cluster Security including scanning and runtime policies.
• Install and configure new clusters.
• Monitor cluster health with Prometheus, Thanos, ServiceMonitor, PodMonitor, and manage alerting with Alertmanager.
• Manage container image tools such as Buildah, Kaniko, Harbor, and Quay.
• Work with logging tools like LokiStack, Vector, and manage retention and storage.
• Use cert-manager for certificates.
• Manage SCC and ServiceAccount configurations.