AWS DevOps CI/CD Engineer

Quick Facts

• Role: AWS DevOps CI/CD Engineer

• Engagement: 3 months with significant possibility to become multi-year

• Work location: New York, NY — 3 days/week office attendance

• Primary focus: CI/CD, Kubernetes deployments, AWS infrastructure, security (SSO), and observability

Description

Deploy, upgrade, and maintain the Surveillance solution across UAT and Production using Helm charts and Docker containers. Own troubleshooting in the Kubernetes cluster (including storage/permission issues), configure federated SSO (SAML 2.0/OIDC), set up AWS load balancing and secure routing, and maintain observability for multi-container logging.

Responsibilities

• Deploy and manage Helm-based releases with customer-specific values files across multiple environment tiers.
• Handle high-availability scaling topologies and orchestrate multi-container pods (e.g., application dashboards with local network servers).
• Debug cluster runtime failures such as volume mount issues, subPath initialization blockages, and pod restarts.
• Investigate file system and share-level permissions; align container user settings (runAsUser/securityContext) with NFS/EFS POSIX requirements.
• Trace sidecar data syncing problems (e.g., rsync permission-denied errors) within persistent or shared directories.
• Configure and troubleshoot federated SSO by mapping a Customer IdP to products via SAML 2.0 or OpenID Connect, including attribute and group-based access control.
• Set up secure cloud connectivity components such as CloudSQL Auth Proxy, database string vaulting, and cloud storage integrations.
• Configure AWS Application Load Balancers (ALB) including ingress annotations, SSL/TLS termination, pass-through targets, and HTTP-to-HTTPS redirection.
• Maintain tenant-specific deviations and infrastructure overrides from decoupled configuration directories.
• Own continuous calibration of environment-specific layers: Load Balancer mappings, multi-region ingress architectures, and automated pod-scaling behaviors.
• Maintain log collection and shipping sidecars (Grafana Promtail/Loki or similar) for multi-container logs.
• Isolate platform dependencies using container requests/limits and priority states.
• Collaborate by independently resolving infrastructure/network/anomaly issues and producing deterministic diagnostics when application bugs are suspected (kubectl outputs, traces, stack traces, product logs).

Requirements

• Hands-on experience deploying Kubernetes workloads on AWS using Helm and Docker.
• Strong debugging skills for Kubernetes cluster runtime issues, including storage mounts and initialization problems.
• Ability to troubleshoot storage and POSIX permission mismatches across NFS/EFS and container security contexts.
• Experience configuring federated SSO with SAML 2.0 and/or OpenID Connect, including IdP attribute/group mapping.
• Experience configuring AWS ALB/ingress with TLS/SSL termination and secure routing rules.
• Experience with Kubernetes log collection/forwarding using tools such as Grafana Promtail/Loki.
• Ability to create detailed diagnostic reports using kubectl and other runtime/trace evidence.

Benefits

• 3-month engagement with significant potential to extend into multi-year work.

• Opportunity to work across UAT and Production with enterprise security and AWS infrastructure responsibilities.