Senior DevOps Engineer

Geomatik; Madison (AL); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Octave is seeking an OUX Infra Engineer to own and evolve the Kubernetes-based infrastructure that powers the Octave Unified Experience platform. You will design, deploy, and operate multi-tenant, scalable infrastructure spanning Kubernetes, PostgreSQL, and the Microsoft Fabric integration points.

In this role you will implement IaC pipelines (Bicep/Terraform), manage security posture (RBAC, secrets, ingress), and ensure observability and cost controls across environments while collaborating

Qualifications

• 3+ years in platform or infrastructure engineering with hands-on production Kubernetes experience.
• Strong proficiency with PostgreSQL — schema design, performance tuning, HA configuration and operational management.
• Hands‑on experience with Azure infrastructure services: AKS, Azure Key Vault, Azure Container Registry, Azure Monitor, and Azure networking.
• Experience with Microsoft Fabric administration — workspace management, capacity configuration, API-based provisioning.
• Proficiency with infrastructure-as-code tools (Bicep, Terraform, or Pulumi) and GitOps practices.
• Experience designing and operating multi-tenant SaaS infrastructure — namespace isolation, resource quotas, and tenant lifecycle management.
• Strong understanding of Kubernetes security primitives — RBAC, network policies, pod security standards, and secrets management.
• Experience with CI/CD pipeline design and operation (Azure DevOps, GitHub Actions, or comparable).
• Solid understanding of OAuth2/OIDC and enterprise identity integration patterns.

Responsibilities

• Design, deploy, and operate the Kubernetes infrastructure underpinning the OUX platform — cluster configuration, namespace strategy, resource management, autoscaling, and multi-tenancy isolation.
• Own the PostgreSQL database layer for the OUX platform — schema design, provisioning, backup and recovery, performance tuning, and migration strategy for the ontology tool and Platform Studio backend services.
• Build and maintain the Microsoft Fabric integration infrastructure — service principal configuration, workspace provisioning, lakehouse connectivity, and Fabric API authentication patterns for the platform's data pipeline triggers.
• Deploy and operate Refold as the platform's MCP tool configuration service — maintaining the Refold API surface, its integration with the agentic framework, and the infrastructure reliability guarantees the MCP Designer tool depends on.
• Design and implement the tenant provisioning infrastructure — automated onboarding of new customer tenants, namespace isolation, credential management, and per-tenant resource quotas.
• Own infrastructure security posture: network policies, secrets management (Azure Key Vault), certificate lifecycle, and the ingress/reverse proxy layer.
• Build and maintain CI/CD pipelines for infrastructure-as-code (Bicep, Terraform, or Helm) and application deployment across environments.
• Instrument the infrastructure layer with observability tooling — metrics, logs, distributed tracing, and cost-per-tenant dashboards feeding the platform's commercial reporting.
• Collaborate with the OUX UI Engineer on security architecture — AuthN/AuthZ integration (Ory, Azure AD), CORS policy, and penetration testing remediation.

Skills

Kubernetes

PostgreSQL

Azure

GitOps

Terraform

Bicep

OAuth2/OIDC

CI/CD

Security (RBAC)

Multi-tenant SaaS

Tools

AKS

Azure Key Vault

Azure Container Registry

Azure Monitor

Azure Networking

Microsoft Fabric

Refold MCP

Ory Hydra/Kratos

Job description

Job Location (Short): Madison, Alabama-USA

Workplace Type: Remote

Responsibilities

The OUX Infra Engineer owns the infrastructure foundation that the Octave Unified Experience (OUX) platform runs on. This role is responsible for designing, deploying, and operating the Kubernetes-based infrastructure, database layer, Microsoft Fabric integration points, and the Refold MCP service that together enable Platform Studio and all OUX shell applications to function reliably at scale, across multi-tenant customer environments. This is a platform infrastructure role with a product engineering sensibility — the infrastructure you build directly determines what developers and customers can do on the platform.

• Design, deploy, and operate the Kubernetes infrastructure underpinning the OUX platform — cluster configuration, namespace strategy, resource management, autoscaling, and multi-tenancy isolation
• Own the PostgreSQL database layer for the OUX platform — schema design, provisioning, backup and recovery, performance tuning, and migration strategy for the ontology tool and Platform Studio backend services
• Build and maintain the Microsoft Fabric integration infrastructure — service principal configuration, workspace provisioning, lakehouse connectivity, and Fabric API authentication patterns for the platform's data pipeline triggers
• Deploy and operate Refold as the platform's MCP tool configuration service — maintaining the Refold API surface, its integration with the agentic framework, and the infrastructure reliability guarantees the MCP Designer tool depends on
• Design and implement the tenant provisioning infrastructure — automated onboarding of new customer tenants, namespace isolation, credential management, and per-tenant resource quotas
• Own infrastructure security posture: network policies, secrets management (Azure Key Vault), certificate lifecycle, and the ingress/reverse proxy layer
• Build and maintain CI/CD pipelines for infrastructure-as-code (Bicep, Terraform, or Helm) and application deployment across environments
• Instrument the infrastructure layer with observability tooling — metrics, logs, distributed tracing, and cost-per-tenant dashboards feeding the platform's commercial reporting
• Collaborate with the OUX UI Engineer on security architecture — AuthN/AuthZ integration (Ory, Azure AD), CORS policy, and penetration testing remediation

Education / Qualifications

• 3+ years in platform or infrastructure engineering, with hands-on production Kubernetes experience (AKS strongly preferred)
• Strong proficiency with PostgreSQL — schema design, performance tuning, HA configuration, and operational management
• Hands‑on experience with Azure infrastructure services: AKS, Azure Key Vault, Azure Container Registry, Azure Monitor, and Azure networking
• Experience with Microsoft Fabric administration — workspace management, capacity configuration, service principal access, and API-based provisioning
• Proficiency with infrastructure-as-code tools (Bicep, Terraform, or Pulumi) and GitOps practices
• Experience designing and operating multi-tenant SaaS infrastructure — namespace isolation, resource quotas, and tenant lifecycle management
• Strong understanding of Kubernetes security primitives — RBAC, network policies, pod security standards, and secrets management
• Experience with CI/CD pipeline design and operation (Azure DevOps, GitHub Actions, or comparable)
• Solid understanding of OAuth2/OIDC and enterprise identity integration patterns

Preferred:

• Experience with Refold or comparable MCP service infrastructure
• Familiarity with Ory (Hydra, Kratos) for identity and access management
• Background in industrial or capital project software infrastructure environments
• Experience with FinOps tooling and cost-per-tenant attribution in cloud environments

About Octave

Octave provides mission‑critical software that empowers organizations to make informed decisions across every stage of the asset lifecycle - Design, Build, Operate and Protect - where performance, safety, and reliability are non‑negotiable and failure is not an option.

Turning complex operational data into actionable intelligence, Octave connects expertise, real-world conditions and enterprise‑scale insight to improve performance, resilience and incident response where it matters most.

Octave has more than 7,000 employees in 45 countries. Learn more at octave.com and follow us on LinkedIn .

Why work for Octave?

All in. Always forward. That's the way we do things around here. We put trust in our people because we believe it's the best way to unleash potential, bring ideas to life, and keep moving ahead. And it's why we're committed to creating an environment that's truly supportive, providing you with the resources you need to support your ambitions, no matter who you are or where you are in the world.

Everyone is welcome

At Octave, we believe that diverse and inclusive teams are critical to the success of our people and our business. Here, everyone is welcome. As an inclusive workplace, we don't discriminate. In fact, we embrace differences and are fully committed to creating equal opportunities, an inclusive environment, and fairness for all.

Respect is the cornerstone of how we operate, so speak up and be yourself. You're valued here.

Recruitment Fraud Alert

Octave posts all official job opportunities on either https://careers.octave.com/ or https://www.octave.com/about/careers and communicates only from email addresses ending [e-mail]. We never request payment or personal banking information during recruitment. No offers will ever be extended without a proper interview via Teams or in person, never done over email alone. If you suspect fraud, it probably is, and contact us at [e-mail]