Ask HN: How do you handle configuration management?

I ask for two reasons: 1.) My company mandates the use of Jenkins for "all the things" CI/CD related. A significant component of my team's domain is a heavily customized off-the-shelf commercial product. This product comes with a plethora of configuration. We are tasked with using Jenkins to deploy config changes to production, and this has proven to be an inflexible pain in the rear. 2.) My company has an enterprise Puppet license, which to me seems a much better fit for our use case. One major caveat is that my company is devoutly beholden to its shareholders, which means it favors FOSS (extreme emphasis on FREE) solutions as much as possible. This has me thinking Ansible. I'm curious as to what you use and why you use it. I'm also open to any suggestions as to how I can convince both my manager and upper management that Jenkins just isn't cutting it.