Back to Jobs
Recently postedTechnology

Senior or Lead AWS DevOps / Kubernetes Deployment Engineer - Only W2

Info Dinamica IncNew York, NY🇺🇸United States

Quick overview

SeniorityMid Senior
Work modeOn Site
LocationNew York, NY, United States
DockerAWSSAMLSSOGrafanaHTTPHTTPSHelmAzureKubernetesCI/CDOkta

Job description

Role: Senior or Lead AWS DevOps / Kubernetes Deployment Engineer
Location: New York, NY (3 days a week onsite is required)
Job Type: W2 Contract
NOTE: This is a specialized AWS DevOps / Kubernetes Deployment Engineer role with a strong focus on CI/CD, Helm, Docker, Kubernetes troubleshooting, AWS infrastructure, storage permissions, and enterprise SSO integrations.
This is not a conventional CI/CD pipeline engineer position. The client needs someone who can independently deploy and troubleshoot complex, customer-specific Kubernetes environments in UAT and Production.
Primary skills: DevOps, CICD Eng, AWS, Hekm, Docker, Kubernetes
Description:
Key Responsibilities & Daily Tasks:
Platform Deployment & Orchestration: Deploy, upgrade, and maintain the Surveillance solution using our provided Helm charts and Docker containers across multiple environment tiers (UAT and Production).
  • Execute deployments using helm syntax commands and manage custom values files structured for specific customer environments.
  • Manage high-availability scaling topologies, orchestrate multi-container pods (e.g., Tomcat application web dashboards paired with local OneTick network servers), and maintain backend architectures.
    • Infrastructure Troubleshooting & Root-Cause Debugging:
  • Actively debug runtime failures within the cluster (e.g., handling volume mount failures, subPath initialization blockages, and pod restarts).
  • Analyze complex file system and share-level access permissions. Solve subtle storage issues, such as aligning container runtime users (runAsUser/securityContext) with strict corporate Network File System (NFS/AWS EFS/SGW) POSIX permissions (e.g., 775/777 path-traversal mandates).
  • Investigate multi-container sidecar data syncing behaviors, such as tracing rsync permission-denied errors (Code 13) within persistent memory spaces or shared directories.
  • Any security related concerns should be either identified and addresses on-site or, if product change is needed, being proactively packed for the OMD DevOps team to resolve.
    • Enterprise Integration & Security Configuration:
  • Configure and troubleshoot Federated Single Sign-On (SSO) infrastructure, mapping the Customer's Identity Provider (IdP - such as Azure AD, Okta, or Ping) to our products brokerage via SAML 2.0 or OpenID Connect protocols.
  • Implement secure metadata exchanges, map user attributes, and establish group-based access control leveraging enterprise Object IDs.
  • Manage secure connection protocols for cloud-managed architectures, including the deployment and routing of CloudSQL Auth Proxies, database string vaulting, and cloud storage integrations.
  • Configure Application Load Balancers (AWS ALB), managing ingress annotations, SSL/TLS termination, pass-through targets, and HTTP-to-HTTPS redirection rules.
    • Environment-Specific Customizations & Scaled Engineering:
  • Manage, isolate, and maintain specific tenant deviations and infrastructure overrides stored within the decoupled configuration directories.
  • Own the continuous calibration of bespoke environmental layers for dedicated accounts; this includes designing, deploying, and validating sophisticated Load Balancer mappings, multi-region ingress architectures, and fine-tuning automated pod-scaling behaviors.
    • Observability & Monitoring Maintenance:
  • Maintain localized log collection and log shipping sidecars (e.g., Grafana Promtail/Loki) to capture and store multi-container logs that do not natively pipe to standard output.
  • Isolate platform dependencies from infrastructure limits by maintaining container-level requests, limits, and priority states.
    • Communication & Collaboration Bridge:
  • Independently solve all infrastructure, network, and environmental anomalies native to the customer's tenancy.
  • When an application bug is suspected, compile deterministic diagnostic data (kubectl describe pod/kubectl logs outputs, engine trace dumps, OS stack traces, product logs) into highly analytical bug reports for our remote engineering organization.

Similar jobs