09 · Recon
Who you're actually interviewing with
Verified facts from public sources, the live job posting, and infrastructure forensics — with inference kept clearly separate from evidence. Nothing here should be quoted as fact unless it says verified.
01 The company
What Proforma is
Print and promotional products franchise network, founded 1978. Press boilerplate calls it "the largest family-owned and operated technology and business success leader in the print and promotional products industry." LinkedIn company page: $650M organization, ~$50M invested in tech infrastructure.
VERIFIED · linkedin.com/company/proforma · onlyproforma.com/about-us
Scale
- 500+ independent franchise owners, ~200 Worldwide Support Center staff, 400+ preferred suppliers
- #5 on the 2026 ASI Counselor Top 40 distributors list
- Feb 2026: agreement to acquire Safeguard Business Systems from Deluxe — adds ~$180M annual revenue and ~150 distributorships
- "Northeast Ohio Top Workplace" recognition, June 2026
VERIFIED · onlyproforma.com press releases, Feb–Jul 2026
Locations
HQ and Worldwide Support Center: Independence, OH (Cleveland). Second Worldwide Support Center: 213 E. Davis Blvd., Tampa, FL 33606 — this role is on-site Tampa. Recent press (Safeguard, ProStores, Inc. 5000) is datelined Tampa, and both of Proforma's current LinkedIn openings are Tampa.
VERIFIED · onlyproforma.com/contact-us · LinkedIn jobs API
Platforms they sell
ProVision™ — all-in-one business management platform (~$15M investment claim). ProStores™ — franchise eCommerce suite: 12,500+ stores, 2M+ transactions (Apr 2026), Oracle/SAP/Ariba integrations. ProMatch™ — owner/sales-professional matching. "85+ in-house Technology Team Members."
VERIFIED · onlyproforma.com/technology
02 The posting
LinkedIn jobPosting ID 4456220665 — linkedin.com/jobs/view/infrastructure-engineer-at-proforma-4456220665. Tampa, FL · on-site · Mid-Senior · full-time. Posted 2026-08-21. Salary (employer-stated): $100,000–$120,000/yr. Only two Proforma postings live on LinkedIn; both Tampa.
What the text actually says
- Primary ownership: "primary technical owner of the container networking stack, including BGP-based routing within the OpenShift virtualization environment."
- Networking: BGP within OpenShift/OVN, VLANs, subnets, IPAM, internal DNS, MetalLB load balancing, network policies + microsegmentation, firewall/perimeter collaboration.
- Linux/Win: RHEL admin (patching, tuning, troubleshooting), storage via LVM, NFS, iSCSI, Bash + PowerShell scripting.
- OpenShift: hybrid Windows/Linux OCP clusters, OpenShift Virtualization (OVN-Kubernetes) networking, OLM, Helm, pod lifecycle, namespaces/RBAC/quotas/service accounts, "support the organization's migration from traditional infrastructure to containerized workloads."
- Required: 4–5+ yrs; OpenShift/K8s admin; strong BGP + container networking (OVN preferred); RHEL; Windows Server + AD hybrid; scripting.
- Preferred: RHCE / RH OpenShift Specialist, CKA, Ansible/Terraform, GitLab CI/Jenkins/GitOps, migration experience.
- Core competencies: multi-layer diagnosis, cross-team collaboration, adaptability during transformation, runbooks/diagrams/change records, continuous learning.
Not in the posting: NinjaOne, the "team of two / single point of failure" context, and the hiring manager's on-prem-vs-cloud comments. Those came from the interview loop — they're real signals, just not public. Use them conversationally, not as "I read your posting."
03 Stack evidence
| Signal | Confidence | Where it came from |
|---|---|---|
| Live Windows → OpenShift migration; BGP/OVN-Kubernetes + MetalLB are the core stack | Verified | Job posting text |
| Red Hat ecosystem customer: Ansible engagement by Shadow-Soft (now Arctiq), Red Hat partner. Case study: automated Redis, Solr, IIS configs; SSH key rotation; AD-auth RBAC; cut config time "from 6 hours to 30 minutes" during product launches | Verified | web.archive.org/web/20250215231056/https://shadow-soft.com/content/proforma |
| "Expansive IT team of 80 people" and "hundreds of servers" in "hardware and virtual machine environments" (pre-Ansible case study) | Verified | Same archived case study |
| Self-hosted edge: every proforma.com subdomain + gosafeguard.com resolves to 159.112.205.136 — ARIN block of Bigleaf Networks (SD-WAN provider), not AWS/Azure/GCP. Wildcard *.proforma.com cert | Verified | DNS + rdap.arin.net lookups |
| www.proforma.com fronted by Tengine (nginx-derived) with sl-session cookie; ProVision is a live Angular login SPA at api.proforma.com/ProVision/ | Verified | HTTP header + JS bundle inspection |
| E-commerce plumbing: PayPal Payflow payments; separate prod/QA/staging domains (provision, provision2qa/3qa/4qa, staging); Safeguard's storefront already served from Proforma infra | Verified | proforma.com JS app config |
| Windows estate is current: IIS web servers, Windows Server + AD hybrid identity | Verified | Case study + job posting |
| CIO: Brian Carothers — quoted on Red Hat partner catalog and Arctiq ("legacy processes were holding us back") | Verified | catalog.redhat.com · arctiq.com |
| On-prem/colo datacenter(s) behind a Bigleaf SD-WAN edge; VMware-style hypervisor being displaced by OpenShift Virtualization | Inference | IP space + job text + partner positioning |
| E-commerce stack composition: Angular front-ends, Solr search, Redis cache, IIS app servers, Oracle/SAP/Ariba integrations | Inference | Case study + platform marketing |
| NinjaOne RMM in use; infrastructure team in Tampa is small (posting exists to de-risk a 1-person SPOF) | Inference | Interview loop only — not public |
Why this matters: this is a self-hosted shop. They front their own internet edge, run their own DNS/IPAM/VLANs, and the job explicitly wants someone who administers BGP on-prem rather than consuming it from a cloud provider. Your Penske on-prem + F5 + OpenShift story is exactly the profile this posting was written for.
04 Gaps I could not verify
- NinjaOne: zero public mention tied to Proforma anywhere. Interview-only knowledge — safe to discuss, don't claim to have researched it.
- Glassdoor: blocked by bot protection; culture signals taken from press instead (Top Workplace, Safeguard integration, Inc. 5000 volume).
- No Red Hat customer story on redhat.com — the Ansible work is documented only via the partner case study.
- No press on the Windows→OpenShift migration — evidence is the posting text plus Red Hat partner ecosystem.
- Datacenter location/colo provider unknown. The IP space proves a self-hosted edge, not where racks live.
- proforma.com/careers is a JS SPA — careers page text couldn't be extracted; postings enumerated via LinkedIn's API instead.