Seniority level: DevOps CICD Eng AWS

Employment type: C2C only(candidate should be directly employed by your organization)

Location: USA New York 3 days / week office attendance

Project Duration: 3 month with significant possibility to become a multi-year engagement

Primary skill: DevOps CICD Eng AWS

Description

Key Responsibilities & Daily Tasks

Platform Deployment & Orchestration: Deploy, upgrade, and maintain the Surveillance solution using our provided Helm charts and Docker containers across multiple environment tiers (UAT and Production).

Execute deployments using helm syntax commands and manage custom values files structured for specific customer environments.
Manage high-availability scaling topologies, orchestrate multi-container pods (e.g., Tomcat application web dashboards paired with local OneTick network servers), and maintain backend architectures.

Infrastructure Troubleshooting & Root-Cause Debugging:

Actively debug runtime failures within the cluster (e.g., handling volume mount failures, subPath initialization blockages, and pod restarts).
Analyze complex file system and share-level access permissions. Solve subtle storage issues, such as aligning container runtime users (runAsUser/securityContext) with strict corporate Network File System (NFS/AWS EFS/SGW) POSIX permissions (e.g., 775/777 path-traversal mandates).
Investigate multi-container sidecar data syncing behaviors, such as tracing rsync permission-denied errors (Code 13) within persistent memory spaces or shared directories.
Any security related concerns should be either identified and addresses on-site or, if product change is needed, being proactively packed for the OMD DevOps team to resolve.

Enterprise Integration & Security Configuration:

Configure and troubleshoot Federated Single Sign-On (SSO) infrastructure, mapping the Customer s Identity Provider (IdP - such as Azure AD, Okta, or Ping) to our products brokerage via SAML 2.0 or OpenID Connect protocols.
Implement secure metadata exchanges, map user attributes, and establish group-based access control leveraging enterprise Object IDs.
Manage secure connection protocols for cloud-managed architectures, including the deployment and routing of CloudSQL Auth Proxies, database string vaulting, and cloud storage integrations.
Configure Application Load Balancers (AWS ALB), managing ingress annotations, SSL/TLS termination, pass-through targets, and HTTP-to-HTTPS redirection rules.

Environment-Specific Customizations & Scaled Engineering:

Manage, isolate, and maintain specific tenant deviations and infrastructure overrides stored within the decoupled configuration directories.
Own the continuous calibration of bespoke environmental layers for dedicated accounts; this includes designing, deploying, and validating sophisticated Load Balancer mappings, multi-region ingress architectures, and fine-tuning automated pod-scaling behaviors.

Observability & Monitoring Maintenance:

Maintain localized log collection and log shipping sidecars (e.g., Grafana Promtail/Loki) to capture and store multi-container logs that do not natively pipe to standard output.
Isolate platform dependencies from infrastructure limits by maintaining container-level requests, limits, and priority states.

Communication & Collaboration Bridge:

Independently solve all infrastructure, network, and environmental anomalies native to the customer's tenancy.
When an application bug is suspected, compile deterministic diagnostic data (kubectl describe pod/kubectl logs outputs, engine trace dumps, OS stack traces, product logs) into highly analytical bug reports for our remote engineering organization.

DevOps CICD Eng AWS - New York, NY

Key skills

About this role