Role track: Platform Operator

Role overview

Operate, harden, and maintain compliant OpenShift clusters. Enforce day-to-day platform guardrails: access, pod security, networking baselines, quotas, logging, and compliance.

Core responsibilities (framework):

  • Configure SCC/pod security, RBAC, and NetworkPolicies

  • Node hardening and patch management

  • Audit log aggregation and forwarding

  • Platform-scoped vulnerability scanning and remediation

  • Automate compliance scanning and interpret results

  • Security-oriented platform documentation and standards

  • Resource quotas, limits, and operational secret rotation

Recommended sequence

Basic

  1. 101-01 — Default Secure Behavior

  2. 101-02 — Projects & Namespaces

  3. 101-03 — RBAC Basics

  4. 101-04 — SCC & Resource Guardrails

  5. 101-05 — NetworkPolicy Basics

  6. 101-06 — Secrets Management

  7. 101-07 — Image Provenance

  8. 101-08 — Etcd Encryption & Control Plane

  9. 101-09 — Audit Logging & Exec Events

  10. 101-10 — Security & Compliance Add-Ons

  11. 101-11 — Rebuild & Harden Images

  12. 101-12 — Enforce TLS on Routes

Intermediate

  1. 201-01 — Custom RBAC & ClusterRoles

  2. 201-02 — Custom SCC, Seccomp, SELinux

  3. 201-09 — Sandboxed Containers & Isolation

  4. 201-03 — File Integrity & Node Hardening

  5. 201-05 — Secret Lifecycle Externalization

  6. 201-06 — Audit Correlation & Anomaly Detection

  7. 201-07 — Compliance Operator Tailoring

  8. 201-10 — RHACM Policy Governance (DoD / NIST)

For deeper segmentation, also use NetworkPolicy foundations in 101-05 and coordinate with the Network & Infrastructure track.

Advanced

  1. 301-01 — STRIDE PolicySet

Product deep-dives

  • RHACS — platform vulnerability, compliance, and policy operations

  • TSSC — when supporting signing infrastructure consumers

  • OpenShift Virtualization Security — HCO feature gates, virt-handler files, virt RBAC, VM/storage isolation, and host kernel/firmware audits

Catalogs