Senior Platform Infra Engineer: Kubernetes & Azure (Remote)

Geomatik; Madison, Northern (AL, KY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Octave is seeking an OUX Infra Engineer to own and evolve the Kubernetes-based infrastructure that powers the Octave Unified Experience platform. You will design, deploy, and operate multi-tenant, scalable infrastructure spanning Kubernetes, PostgreSQL, and the Microsoft Fabric integration points.

In this role you will implement IaC pipelines (Bicep/Terraform), manage security posture (RBAC, secrets, ingress), and ensure observability and cost controls across environments while collaborating

Qualifications

• 3+ years in platform or infrastructure engineering with hands-on production Kubernetes experience.
• Strong proficiency with PostgreSQL — schema design, performance tuning, HA configuration and operational management.
• Hands‑on experience with Azure infrastructure services: AKS, Azure Key Vault, Azure Container Registry, Azure Monitor, and Azure networking.
• Experience with Microsoft Fabric administration — workspace management, capacity configuration, API-based provisioning.
• Proficiency with infrastructure-as-code tools (Bicep, Terraform, or Pulumi) and GitOps practices.
• Experience designing and operating multi-tenant SaaS infrastructure — namespace isolation, resource quotas, and tenant lifecycle management.
• Strong understanding of Kubernetes security primitives — RBAC, network policies, pod security standards, and secrets management.
• Experience with CI/CD pipeline design and operation (Azure DevOps, GitHub Actions, or comparable).
• Solid understanding of OAuth2/OIDC and enterprise identity integration patterns.

Responsibilities

• Design, deploy, and operate the Kubernetes infrastructure underpinning the OUX platform — cluster configuration, namespace strategy, resource management, autoscaling, and multi-tenancy isolation.
• Own the PostgreSQL database layer for the OUX platform — schema design, provisioning, backup and recovery, performance tuning, and migration strategy for the ontology tool and Platform Studio backend services.
• Build and maintain the Microsoft Fabric integration infrastructure — service principal configuration, workspace provisioning, lakehouse connectivity, and Fabric API authentication patterns for the platform's data pipeline triggers.
• Deploy and operate Refold as the platform's MCP tool configuration service — maintaining the Refold API surface, its integration with the agentic framework, and the infrastructure reliability guarantees the MCP Designer tool depends on.
• Design and implement the tenant provisioning infrastructure — automated onboarding of new customer tenants, namespace isolation, credential management, and per-tenant resource quotas.
• Own infrastructure security posture: network policies, secrets management (Azure Key Vault), certificate lifecycle, and the ingress/reverse proxy layer.
• Build and maintain CI/CD pipelines for infrastructure-as-code (Bicep, Terraform, or Helm) and application deployment across environments.
• Instrument the infrastructure layer with observability tooling — metrics, logs, distributed tracing, and cost-per-tenant dashboards feeding the platform's commercial reporting.
• Collaborate with the OUX UI Engineer on security architecture — AuthN/AuthZ integration (Ory, Azure AD), CORS policy, and penetration testing remediation.

Skills

Kubernetes

PostgreSQL

Azure

GitOps

Terraform

Bicep

OAuth2/OIDC

CI/CD

Security (RBAC)

Multi-tenant SaaS

Tools

AKS

Azure Key Vault

Azure Container Registry

Azure Monitor

Azure Networking

Microsoft Fabric

Refold MCP

Ory Hydra/Kratos

Job description

Octave is seeking an OUX Infra Engineer to own and evolve the Kubernetes-based infrastructure that powers the Octave Unified Experience platform. You will design, deploy, and operate multi-tenant, scalable infrastructure spanning Kubernetes, PostgreSQL, and the Microsoft Fabric integration points.

In this role you will implement IaC pipelines (Bicep/Terraform), manage security posture (RBAC, secrets, ingress), and ensure observability and cost controls across environments while collaborating