Description

Execute deployments using helm syntax commands and manage custom values files structured for specific customer environments.

Manage high-availability scaling topologies, orchestrate multi-container pods (e.g., Tomcat application web dashboards paired with local OneTick network servers), and maintain backend architectures.

Infrastructure Troubleshooting & Root-Cause Debugging:

Actively debug runtime failures within the cluster (e.g., handling volume mount failures, subPath initialization blockages, and pod restarts).

Analyze complex file system and share-level access permissions. Solve subtle storage issues, such as aligning container runtime users (runAsUser/securityContext) with strict corporate Network File System (NFS/AWS EFS/SGW) POSIX permissions (e.g., 775/777 path-traversal mandates).

Investigate multi-container sidecar data syncing behaviors, such as tracing rsync permission-denied errors (Code 13) within persistent memory spaces or shared directories.

Any security related concerns should be either identified and addresses on-site or, if product change is needed, being proactively packed for the OMD DevOps team to resolve.

Enterprise Integration & Security Configuration:

Configure and troubleshoot Federated Single Sign-On (SSO) infrastructure, mapping the Customer’s Identity Provider (IdP - such as Azure AD, Okta, or Ping) to our products brokerage via SAML 2.0 or OpenID Connect protocols.

Implement secure metadata exchanges, map user attributes, and establish group-based access control leveraging enterprise Object IDs.

Manage secure connection protocols for cloud-managed architectures, including the deployment and routing of CloudSQL Auth Proxies, database string vaulting, and cloud storage integrations.

Configure Application Load Balancers (AWS ALB), managing ingress annotations, SSL/TLS termination, pass-through targets, and HTTP-to-HTTPS redirection rules.

Environment-Specific Customizations & Scaled Engineering:

Manage, isolate, and maintain specific tenant deviations and infrastructure overrides stored within the decoupled configuration directories.

Own the continuous calibration of bespoke environmental layers for dedicated accounts; this includes designing, deploying, and validating sophisticated Load Balancer mappings, multi-region ingress architectures, and fine-tuning automated pod-scaling behaviors.

Observability & Monitoring Maintenance:

Maintain localized log collection and log shipping sidecars (e.g., Grafana Promtail/Loki) to capture and store multi-container logs that do not natively pipe to standard output.

Isolate platform dependencies from infrastructure limits by maintaining container-level requests, limits, and priority states.

Communication & Collaboration Bridge:

Independently solve all infrastructure, network, and environmental anomalies native to the customer's tenancy.

When an application bug is suspected, compile deterministic diagnostic data (kubectl describe pod/kubectl logs outputs, engine trace dumps, OS stack traces, product logs) into highly analytical bug reports for our remote engineering organization

Key Skills

Education

Bachelor's degree