Ansible Automation Engineer - (Active Secret Clearance Required)

Overview
Client is seeking an Ansible Engineer to support infrastructure automation, configuration management, and operational consistency across Linux, Windows, containerized, and cloud-based environments. This role focuses on working on F-35 Pilot training devices, developing reusable automation solutions, integrating infrastructure tooling, and supporting secure, scalable deployment practices.
The ideal candidate will have strong expertise in Ansible, infrastructure-as-code concepts, systems administration, and automation testing, with experience integrating automation into modern CI/CD and observability platforms.

Core Responsibilities
• Design, develop, and maintain idempotent Ansible playbooks and reusable roles while managing role dependencies and automation standards.
• Create and manage static and dynamic inventories, host variables, and integrations with external inventory sources.
• Automate Linux and Windows system administration tasks, including package management, system configuration, PowerShell-based remediation, and Active Directory integration.
• Support infrastructure provisioning and post-provisioning configuration using Ansible in conjunction with tools such as Terraform or CloudFormation.
• Implement automation for containerized and Kubernetes environments, including cluster bootstrapping, deployment management, and runtime configuration.
• Integrate Ansible workflows into Git-based development processes, pull-request reviews, and CI/CD pipelines.
• Develop testing and validation frameworks using tools such as Molecule, TestInfra, and policy or schema validation solutions.
• Implement and maintain secure secrets management solutions using Ansible Vault, HashiCorp Vault, or cloud-based key management services.
• Support compliance initiatives by maintaining audit trails, generating compliance reporting, and ensuring automation aligns with organizational security standards.
• Integrate automation workflows with monitoring and observability platforms to improve operational visibility and detect configuration drift.

Essential Qualifications, Skills, and Technologies
• Strong experience developing Ansible playbooks and roles, including idempotent automation design, dependency management, and reusable role structures.
• Deep understanding of YAML and Jinja2, including templating, filters, conditionals, and dynamic configuration generation.
• Experience with inventory management, including host grouping, host variables, static inventories, dynamic inventories, and external inventory integrations.
• Strong Linux administration experience across distributions such as RHEL, Ubuntu, Debian, and Alpine.
• Experience supporting Windows environments using Ansible Windows modules, PowerShell, and Active Directory integrations.
• Knowledge of infrastructure automation and configuration management practices using Ansible and infrastructure-as-code tools.
• Experience with Kubernetes, container platforms, and automation of deployment and cluster management tasks.
• Proficiency with Git workflows, repository management, branching strategies, and pull-request-based review processes.
• Experience integrating automation into GitHub Actions, GitLab CI, Jenkins, or Azure Pipelines, including automated testing and linting.
• Hands-on experience with Molecule, TestInfra, and automation testing methodologies.
• Experience implementing secrets management solutions using HashiCorp Vault, Ansible Vault, or cloud key management services.
• Understanding of compliance, auditing, and security-focused automation practices.
• Knowledge of networking fundamentals, including DNS, DHCP, VPCs, subnets, load balancers, firewalls, and IP address management.
• Scripting experience using Python or Bash for automation, custom modules, and tool integration.

Preferred Skills or Experience
• Familiarity with Terraform, Pulumi, or CloudFormation in hybrid or multi-cloud infrastructure environments.
• Experience integrating automation telemetry and operational data into Prometheus, Grafana, ELK, or Splunk environments.

Work Details
• Security Clearance Required: Secret.
• Work arrangement: Worker will telework less than 50% of the time.
• Schedule: 4/10, 1st Shift.
• Opportunity for full-time hire.
• Program supports F-35 pilot training devices under Prime Contract #N00019-19-C-0010.
• Access to ECI information is required.

Nesco Resource offers a comprehensive benefits package for our associates, which includes a MEC (Minimum Essential Coverage) plan that encompasses Medical, Vision, Dental, 401K, and EAP (Employee Assistance Program) services.

Nesco Resource provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.