Back to Jobs
Recently postedTechnology
ID
Senior or Lead AWS DevOps / Kubernetes Deployment Engineer - Only W2
Quick overview
SeniorityMid Senior
Work modeOn Site
LocationNew York, NY, United States
DockerAWSSAMLSSOGrafanaHTTPHTTPSHelmAzureKubernetesCI/CDOkta
Job description
Role: Senior or Lead AWS DevOps / Kubernetes Deployment Engineer
Location: New York, NY (3 days a week onsite is required)
Job Type: W2 Contract
NOTE: This is a specialized AWS DevOps / Kubernetes Deployment Engineer role with a strong focus on CI/CD, Helm, Docker, Kubernetes troubleshooting, AWS infrastructure, storage permissions, and enterprise SSO integrations.
This is not a conventional CI/CD pipeline engineer position. The client needs someone who can independently deploy and troubleshoot complex, customer-specific Kubernetes environments in UAT and Production.
Primary skills: DevOps, CICD Eng, AWS, Hekm, Docker, Kubernetes
Description:
Key Responsibilities & Daily Tasks:
Platform Deployment & Orchestration: Deploy, upgrade, and maintain the Surveillance solution using our provided Helm charts and Docker containers across multiple environment tiers (UAT and Production).
- Execute deployments using helm syntax commands and manage custom values files structured for specific customer environments.
- Manage high-availability scaling topologies, orchestrate multi-container pods (e.g., Tomcat application web dashboards paired with local OneTick network servers), and maintain backend architectures.
- Infrastructure Troubleshooting & Root-Cause Debugging:
-
- Actively debug runtime failures within the cluster (e.g., handling volume mount failures, subPath initialization blockages, and pod restarts).
- Analyze complex file system and share-level access permissions. Solve subtle storage issues, such as aligning container runtime users (runAsUser/securityContext) with strict corporate Network File System (NFS/AWS EFS/SGW) POSIX permissions (e.g., 775/777 path-traversal mandates).
- Investigate multi-container sidecar data syncing behaviors, such as tracing rsync permission-denied errors (Code 13) within persistent memory spaces or shared directories.
- Any security related concerns should be either identified and addresses on-site or, if product change is needed, being proactively packed for the OMD DevOps team to resolve.
- Enterprise Integration & Security Configuration:
-
- Configure and troubleshoot Federated Single Sign-On (SSO) infrastructure, mapping the Customer's Identity Provider (IdP - such as Azure AD, Okta, or Ping) to our products brokerage via SAML 2.0 or OpenID Connect protocols.
- Implement secure metadata exchanges, map user attributes, and establish group-based access control leveraging enterprise Object IDs.
- Manage secure connection protocols for cloud-managed architectures, including the deployment and routing of CloudSQL Auth Proxies, database string vaulting, and cloud storage integrations.
- Configure Application Load Balancers (AWS ALB), managing ingress annotations, SSL/TLS termination, pass-through targets, and HTTP-to-HTTPS redirection rules.
- Environment-Specific Customizations & Scaled Engineering:
-
- Manage, isolate, and maintain specific tenant deviations and infrastructure overrides stored within the decoupled configuration directories.
- Own the continuous calibration of bespoke environmental layers for dedicated accounts; this includes designing, deploying, and validating sophisticated Load Balancer mappings, multi-region ingress architectures, and fine-tuning automated pod-scaling behaviors.
- Observability & Monitoring Maintenance:
-
- Maintain localized log collection and log shipping sidecars (e.g., Grafana Promtail/Loki) to capture and store multi-container logs that do not natively pipe to standard output.
- Isolate platform dependencies from infrastructure limits by maintaining container-level requests, limits, and priority states.
- Communication & Collaboration Bridge:
-
- Independently solve all infrastructure, network, and environmental anomalies native to the customer's tenancy.
- When an application bug is suspected, compile deterministic diagnostic data (kubectl describe pod/kubectl logs outputs, engine trace dumps, OS stack traces, product logs) into highly analytical bug reports for our remote engineering organization.
Similar jobs
- JS

Senior Network Engineer with Security ClearanceRecently posted
JCS Solutions LLC · Washington, DC · On-site 🇺🇸
EncryptioniOSSlack+2Technology$70k - $110k/yr - TH

DevOps Engineer with GroovyRecently posted
Thinklusive · McLean, VA · On-site 🇺🇸
AWSGroovyJenkins+2TechnologySalary not listed - AS
Sr Cloud DevOps EngineerRecently posted
Analytics Solutions · United States · Hybrid 🇺🇸
OracleShellGit+13TechnologySalary not listed - AA
DEVOPS ENGINEER
AaraTechnologies Inc · Virginia Beach, VA · Hybrid 🇺🇸
DockerShellGit+10TechnologySalary not listed - RT

Senior Linux Platform Engineer
Request Technology, LLC · New York, NY · On-site 🇺🇸
GitTCP/IPAnsible+10TechnologySalary not listed - VT

Devops Engineer with LinuxRecently posted
Vsion Technologies Inc · Los Angeles, CA · On-site 🇺🇸
LinuxTechnologySalary not listed - RT

Senior Linux Kubernetes EngineerRecently posted
Request Technology, LLC · New York, NY · Hybrid 🇺🇸
DockerGitAWS+15TechnologySalary not listed - HM

DevOps Engineer (Cloud Engineer 4) - 31013 with Security ClearanceRecently posted
HII Mission Technologies · Fort Meade, MD · Hybrid 🇺🇸
GitAWSAnsible+12Technology$137.5k - $185k/yr - RT

Senior Linux Kubernetes EngineerRecently posted
Request Technology, LLC · Chicago, IL · Hybrid 🇺🇸
DockerGitAWS+15TechnologySalary not listed - HA
Senior DevOps EngineerRecently posted Auto Apply
Hatchit · Washington · Hybrid 🇺🇸
DockerSQLGit+24Technology$150k - $175k/yr - HA
DevOps EngineerRecently posted Auto Apply
Hatchit · Washington · Hybrid 🇺🇸
DockerSQLGit+23Technology$120k - $140k/yr - AT
Kubernetes EngineerRecently posted
Aziro Technologies LLC · Phoenix, AZ · Hybrid 🇺🇸
DockerShellGit+10TechnologySalary not listed