Start searching
Back to Jobs
Recently postedTechnology

DevOps CICD Eng AWS - New York, NY

Logging-InNew York, NY🇺🇸United States

Quick overview

SeniorityMid Senior
Work modeOn Site
LocationNew York, NY, United States
DockerAWSSAMLSSOGrafanaHTTPHTTPSHelmAzureOkta

Job description

Seniority level: DevOps CICD Eng AWS
Employment type: C2C only(candidate should be directly employed by your organization)
Location: USA New York 3 days / week office attendance
Project Duration: 3 month with significant possibility to become a multi-year engagement
Primary skill: DevOps CICD Eng AWS
Description
Key Responsibilities & Daily Tasks
Platform Deployment & Orchestration: Deploy, upgrade, and maintain the Surveillance solution using our provided Helm charts and Docker containers across multiple environment tiers (UAT and Production).
  • Execute deployments using helm syntax commands and manage custom values files structured for specific customer environments.
  • Manage high-availability scaling topologies, orchestrate multi-container pods (e.g., Tomcat application web dashboards paired with local OneTick network servers), and maintain backend architectures.
    • Infrastructure Troubleshooting & Root-Cause Debugging:
  • Actively debug runtime failures within the cluster (e.g., handling volume mount failures, subPath initialization blockages, and pod restarts).
  • Analyze complex file system and share-level access permissions. Solve subtle storage issues, such as aligning container runtime users (runAsUser/securityContext) with strict corporate Network File System (NFS/AWS EFS/SGW) POSIX permissions (e.g., 775/777 path-traversal mandates).
  • Investigate multi-container sidecar data syncing behaviors, such as tracing rsync permission-denied errors (Code 13) within persistent memory spaces or shared directories.
  • Any security related concerns should be either identified and addresses on-site or, if product change is needed, being proactively packed for the OMD DevOps team to resolve.
    • Enterprise Integration & Security Configuration:
  • Configure and troubleshoot Federated Single Sign-On (SSO) infrastructure, mapping the Customer s Identity Provider (IdP - such as Azure AD, Okta, or Ping) to our products brokerage via SAML 2.0 or OpenID Connect protocols.
  • Implement secure metadata exchanges, map user attributes, and establish group-based access control leveraging enterprise Object IDs.
  • Manage secure connection protocols for cloud-managed architectures, including the deployment and routing of CloudSQL Auth Proxies, database string vaulting, and cloud storage integrations.
  • Configure Application Load Balancers (AWS ALB), managing ingress annotations, SSL/TLS termination, pass-through targets, and HTTP-to-HTTPS redirection rules.
    • Environment-Specific Customizations & Scaled Engineering:
  • Manage, isolate, and maintain specific tenant deviations and infrastructure overrides stored within the decoupled configuration directories.
  • Own the continuous calibration of bespoke environmental layers for dedicated accounts; this includes designing, deploying, and validating sophisticated Load Balancer mappings, multi-region ingress architectures, and fine-tuning automated pod-scaling behaviors.
    • Observability & Monitoring Maintenance:
  • Maintain localized log collection and log shipping sidecars (e.g., Grafana Promtail/Loki) to capture and store multi-container logs that do not natively pipe to standard output.
  • Isolate platform dependencies from infrastructure limits by maintaining container-level requests, limits, and priority states.
    • Communication & Collaboration Bridge:
  • Independently solve all infrastructure, network, and environmental anomalies native to the customer's tenancy.
  • When an application bug is suspected, compile deterministic diagnostic data (kubectl describe pod/kubectl logs outputs, engine trace dumps, OS stack traces, product logs) into highly analytical bug reports for our remote engineering organization.

Similar jobs

Apply