Senior DevOps Architect - Remote, Kubernetes & Cloud Infra

Octave; Madison (AL); Remote; USD 120,000 - 160,000; Full time

Job summary

Octave is seeking a Senior DevOps Engineer to design, deploy, and operate the Kubernetes infrastructure powering the OUX platform from Madison, Alabama. You will own the PostgreSQL layer, craft the Microsoft Fabric integration, and manage the MCP tool configuration service for platform reliability.

Additionally, you will build tenant provisioning, enforce strong security measures with Azure Key Vault and RBAC, and drive CI/CD pipelines using Bicep, Terraform, or Pulumi across environments.

Qualifications

• 3+ years in platform or infrastructure engineering, with hands-on production Kubernetes experience (AKS strongly preferred).
• Strong proficiency with PostgreSQL — schema design, performance tuning, HA configuration, and operational management.
• Hands-on experience with Azure infrastructure services: AKS, Azure Key Vault, Azure Container Registry, Azure Monitor, and Azure networking
• Experience with Microsoft Fabric administration — workspace management, capacity configuration, service principal access, and API-based provisioning
• Proficiency with infrastructure-as-code tools (Bicep, Terraform, or Pulumi) and GitOps practices
• Experience designing and operating multi-tenant SaaS infrastructure — namespace isolation, resource quotas, and tenant lifecycle management
• Strong understanding of Kubernetes security primitives — RBAC, network policies, pod security standards, and secrets management
• Experience with CI/CD pipeline design and operation (Azure DevOps, GitHub Actions, or comparable)
• Solid understanding of OAuth2/OIDC and enterprise identity integration patterns

Responsibilities

• Design, deploy, and operate the Kubernetes infrastructure underpinning the OUX platform — cluster configuration, namespace strategy, resource management, autoscaling, and multi-tenancy isolation
• Own the PostgreSQL database layer for the OUX platform — schema design, provisioning, backup and recovery, performance tuning, and migration strategy for the ontology tool and Platform Studio backend services
• Build and maintain the Microsoft Fabric integration infrastructure — service principal configuration, workspace provisioning, lakehouse connectivity, and Fabric API authentication patterns for the platform's data pipeline triggers
• Deploy and operate Refold as the platform's MCP tool configuration service — maintaining the Refold API surface, its integration with the agentic framework, and the infrastructure reliability guarantees the MCP Designer tool depends on
• Design and implement the tenant provisioning infrastructure — automated onboarding of new customer tenants, namespace isolation, credential management, and per-tenant resource quotas
• Own infrastructure security posture: network policies, secrets management (Azure Key Vault), certificate lifecycle, and the ingress/reverse proxy layer
• Build and maintain CI/CD pipelines for infrastructure-as-code (Bicep, Terraform, or Helm) and application deployment across environments
• Instrument the infrastructure layer with observability tooling — metrics, logs, distributed tracing, and cost-per-tenant dashboards feeding the platform's commercial reporting
• Collaborate with the OUX UI Engineer on security architecture — AuthN/AuthZ integration (Ory, Azure AD), CORS policy, and penetration testing remediation

Skills

Kubernetes

PostgreSQL

Azure

IaC

GitOps

Multi-tenant SaaS

K8s security

CI/CD

OAuth2/OIDC

Ory Hydra/Kratos

Tools

AKS

Azure Key Vault

Azure Monitor

Azure Container Registry

Terraform

Pulumi

Bicep

GitHub Actions

Azure DevOps

Ory Hydra/Kratos

Job description

Octave is seeking a Senior DevOps Engineer to design, deploy, and operate the Kubernetes infrastructure powering the OUX platform from Madison, Alabama. You will own the PostgreSQL layer, craft the Microsoft Fabric integration, and manage the MCP tool configuration service for platform reliability.

Additionally, you will build tenant provisioning, enforce strong security measures with Azure Key Vault and RBAC, and drive CI/CD pipelines using Bicep, Terraform, or Pulumi across environments.