Software Engineer

Ansible Engineer

Position would require the candidate to be a W2 employee of Donatech. US Citizenship Required. Active Secret Clearance Required.

Ansible Playbooks & Roles: Writing idempotent playbooks, structuring roles for reusability, managing dependencies.

YAML & Jinja2: Deep understanding of YAML syntax, Jinja2 templating, filters, and conditionals for dynamic configuration.

Inventory Management: Building dynamic and static inventories, grouping, host variables, and integration with external sources.

Linux Administration: Strong proficiency with common distributions (RHEL, Ubuntu, Debian, Alpine), package management, systemd, networking config, and security hardening.

Windows Support: Ansible Windows modules, PowerShell remediation, and Active Directory integration (if applicable).

Infrastructure Abstraction: Combining Ansible with Terraform or CloudFormation for hybrid approaches or using Ansible alone for configuration post-provisioning.

Container & Kubernetes: Ansible for cluster bootstrapping, pod/deployment management, and container runtime configuration.

Version Control: Git workflows for playbook/role repositories, branching strategies, and pull-request-based reviews.

CI/CD Integration: Embedding Ansible runs in GitHub Actions, GitLab CI, Jenkins, or Azure Pipelines for automated testing, linting (ansible-lint), and deployment.

Testing & Validation: Using Molecule for role testing, TestInfra for server validation, and integration with schema/policy checks.

Secrets Management: Integrating with HashiCorp Vault, Ansible Vault, or cloud KMS for secure handling of passwords, API keys, and TLS certificates.

Compliance & Auditing: Ensuring playbooks meet organizational security standards, generating compliance reports, and maintaining audit trails.

Networking Basics: DNS, DHCP, VPCs/subnets, load balancers, firewalls, and IP address management.

Other IaC Tools: Familiarity with Terraform, Pulumi, or CloudFormation helps when designing hybrid or multi-cloud strategies.

Observability: Wiring Ansible outputs into monitoring stacks (Prometheus, Grafana, ELK, Splunk) for drift detection and operational visibility.

Scripting & Automation: Python or Bash for custom modules, hooks, or glue code between Ansible and other tooling.