Role Description We're looking for a highly skilled Senior DevOps / Platform Engineer, the kind who could run a hosting platform single-handed, to help run and strengthen the platform behind a digital agency's client websites and applications. Most client sites are Drupal and Laravel applications running on a Kubernetes-based hosting platform backed by AWS. This is a high-trust, senior role at the centre of how the business delivers for clients. You'll bring the depth and self-sufficiency to own problems end-to-end, working alongside a small platform and development team to keep the entire hosting estate online, secure, and shipping: - Responding when a site goes down - Hardening security and access - Running deployment pipelines - Ensuring the business can recover from anything A real, prioritized automation backlog is waiting for someone to drive it forward. We want an engineer who thinks in workflows and treats repetitive manual work as a bug to be fixed: scripting it away, wiring up tooling, and using automation and AI to raise the whole team's leverage over time. If you tinker with this stuff for fun and have personal projects to show for it, we want to hear about them. Responsibilities - Platform & infrastructure operations: Help run and maintain the Kubernetes-based hosting environment and AWS infrastructure hosting client Drupal and Laravel applications. - Environment migration & configuration: Help migrate and configure client applications into new Kubernetes environments, standing up, tuning, and validating environments as the estate evolves. - Incident response & on-call: Contribute to the response to outages and security incidents: detection, containment, remediation, and reporting. Monitor alerting daily and ensure nothing is left unhandled. Take part in incident fire drills to keep response sharp. - CI/CD & deployments: Execute go-lives for new and re-platformed sites, resolve pipeline failures, and improve deployment workflows. - Security, access & compliance: Help manage identity and access across Google Workspace, Atlassian, hosting, and version control. Support staff onboarding and secure offboarding, including device management. Contribute to ISO 27001 and SOC 2 compliance work: maintaining controls, evidence, and audit readiness. Operate within segregated-environment boundaries, where access to certain systems is restricted under compliance and client contractual requirements. - Monitoring & observability: Maintain, improve, and stand up monitoring and alerting so problems are caught before clients notice. - Domains, DNS & SSL: Resolve DNS issues and manage domain and SSL/TLS certificate lifecycles for client and internal domains. - Backup & disaster recovery: Run backup restore tests and quarterly DR drills, demonstrating sub-one-hour recovery. - Cost & vendor management: Help stay on top of SaaS and infrastructure spend, vendor relationships, and renewals. - Automation & workflow: Help drive down the automation backlog, turning manual runbooks into scripted, repeatable workflows and applying AI where it earns its place. Qualifications - Solid Linux systems administration and strong scripting/automation skills (e.g. Bash, Python) - Strong automation instincts and a genuine grasp of workflow design: you see the repetitive process and reach for a way to automate it - Hands-on experience with workflow and automation tooling (e.g. n8n, or similar) - Hands-on experience with Kubernetes and containerized workloads (the hosting platform runs on Kubernetes, so this is central) - Experience migrating and configuring workloads across Kubernetes environments. - Experience with containerized hosting and cloud infrastructure: Docker and AWS - Experience running CI/CD pipelines (Bitbucket Pipelines used here) - A calm, methodical approach to incident response and production troubleshooting under pressure - Sound judgement on security and access control, with a least-privilege mindset - Exposure to compliance frameworks such as ISO 27001 or SOC 2, and the discipline to maintain controls and evidence - Comfortable working within governed access boundaries, where some environments are access-restricted for compliance and contractual reasons - The skill and self-sufficiency to run a platform like this largely on your own, while working within a small team and its governance - Able to point to concrete examples where you've applied automation or AI in a DevOps context and explain the impact Requirements - Personal projects, side builds, or a home lab that show you automate for the love of it - Practical use of AI tooling in day-to-day operational work - Familiarity with Drupal and/or Laravel application hosting - Experience with managed Kubernetes hosting platforms - Experience with on-call/alerting tooling (e.g. OpsGenie), JAMF, and Atlassian / Google Workspace admin - A track record of automating away repetitive operational work - Experience contributing to ISO 27001 or SOC 2 audits and certification - DNS, SSL/TLS, and domain lifecycle know-how Ideal Personality Traits - Stays calm and methodical under pressure - Thinks in workflows and treats repetitive manual work as a problem to be solved - Reaches for automation and AI as a first instinct, not an afterthought - Builds and tinkers outside work because they enjoy it - Could run a platform solo, but works well in a small team and within its boundaries - Doesn't cut corners on security - Respects access boundaries and governance without needing to be told twice

Role Description Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced ICAM Cloud DevOps Engineer with a Secret Security clearance to support KITS and our government customer. The position is remote. The ideal candidate is a technically skilled and innovative professional with deep expertise in cloud infrastructure, DevOps practices, and the deployment and operation of enterprise ICAM platforms within a federal government environment. This individual will play a critical role in designing, building, and maintaining the cloud infrastructure, automation pipelines, and operational tooling that underpin ICAM services, ensuring that identity and access management solutions are deployed securely, reliably, and efficiently at enterprise scale. The ICAM Cloud DevOps Engineer will be responsible for: - Designing, implementing, and maintaining cloud infrastructure supporting ICAM platforms and services. - Building, maintaining, and optimizing CI/CD pipelines for automated deployment, testing, and release of ICAM platform configurations. - Implementing and managing infrastructure-as-code (IaC) solutions using tools such as Terraform, AWS CloudFormation, or Ansible. - Supporting the deployment, configuration, and operational management of ICAM platform components in cloud environments. - Collaborating with ICAM architects and platform engineers to design cloud architectures that meet federal security requirements. - Implementing and maintaining DevSecOps practices across the ICAM platform delivery lifecycle. - Developing and maintaining automated testing frameworks for ICAM platform deployments. - Designing and implementing cloud monitoring, logging, and alerting solutions for ICAM platform infrastructure. - Managing and maintaining cloud-based secrets management, certificate management, and key management solutions. - Supporting the configuration and management of cloud networking components relevant to ICAM platform operations. - Collaborating with security teams to ensure compliance with federal security standards. - Contributing to ATO documentation and continuous monitoring activities. - Implementing and maintaining disaster recovery (DR) and business continuity capabilities. - Participating in change management processes. - Developing and maintaining comprehensive technical documentation for ICAM cloud infrastructure. - Providing Tier 3 infrastructure support for ICAM platform incidents. - Evaluating and recommending emerging cloud technologies and DevOps tools. - Supporting the continuous improvement of ICAM cloud operations. Qualifications - Bachelor's degree in Computer Science, Information Technology, Cloud Computing, Cybersecurity, or a related field; equivalent work experience may be considered. - 4+ years of hands-on experience in cloud engineering, DevOps, or infrastructure automation roles. - 2+ years of experience supporting the deployment and operation of enterprise identity and access management platforms. - Demonstrated hands-on experience with at least one major cloud platform (AWS, Azure, or Google Cloud). - Active Secret Clearance required. Requirements - Exceptional communication skills in English – both written and oral. - Hands-on experience designing, implementing, and managing cloud infrastructure on AWS, Azure, or Google Cloud. - Demonstrated proficiency with infrastructure-as-code (IaC) tools. - Strong experience building and maintaining CI/CD pipelines. - Experience implementing DevSecOps practices. - Proficiency with containerization and container orchestration technologies. - Experience with configuration management tools. - Strong knowledge of cloud networking concepts. - Experience implementing and managing cloud monitoring, logging, and alerting solutions. - Knowledge of secrets management, certificate management, and key management best practices. - Familiarity with Okta and SailPoint platform deployment and configuration management. - Understanding federal cloud security requirements. - Experience contributing to ATO processes and continuous monitoring programs. - Proficiency with scripting languages for automation of cloud infrastructure management. - Demonstrated ability to develop and maintain comprehensive technical documentation. Benefits - Competitive compensation. - Extraordinary benefits package including health, dental, and vision insurance. - 401K with company matching. - Flexible spending accounts. - Paid holidays. - Three weeks paid time off. - And more.

• Own infrastructure architecture and standards — naming, tagging, resource sizing, lifecycle management, and documentation — while auditing and closing gaps across environments • Own internal and customer-facing cloud networking (VPCs, subnets, security groups, Transit Gateway, VPN/Direct Connect) and define standards for secure inter-service connectivity • Manage database infrastructure including clustering, failover, encryption, backups, and performance tuning, with multi-AZ high-availability strategies to meet recovery objectives • Design and maintain high-availability and disaster recovery strategies (RTO/RPO targets, runbooks, tested recovery processes), plus build cost/FinOps reporting to drive AWS spend visibility • Administer AWS IAM (roles, policies, least-privilege, cross-account access) and enforce infrastructure security baselines in partnership with IT Security • Co-own Terraform HCL infrastructure with SRE, writing modular, production-grade IaC and engaging with evolving workflow tooling (Terragrunt, Spacelift, etc.) • Manage IT-layer AWS footprint (RPA server infrastructure, VDI) and co-own GitHub administration, and partner with Full Stack engineers on AWS service selection (Lambda, Fargate, App Runner, ElastiCache)

• Gerenciar e administrar ambientes Cloud utilizando AWS e Oracle Cloud Infrastructure (OCI); • Administrar e manter ambientes Kubernetes, com foco em OpenShift; • Automatizar provisionamento de infraestrutura utilizando Terraform (Infrastructure as Code); • Administrar servidores Linux em ambientes produtivos; • Apoiar processos de Integração Contínua (CI) e automação de testes; • Implementar melhorias voltadas para disponibilidade, performance e escalabilidade; • Desenvolver scripts para automação utilizando Shell Script e Python; • Atuar na administração de API Gateway, filas e serviços distribuídos; • Implementar boas práticas de observabilidade (APM), monitoramento e resposta a incidentes; • Aplicar conceitos de FinOps visando otimização de custos em Cloud; • Participar da definição e evolução da arquitetura seguindo os princípios AWS Well-Architected Framework; • Colaborar com equipes multidisciplinares em ambiente Ágil; • Conduzir iniciativas técnicas de missão crítica, garantindo estabilidade e confiabilidade dos serviços.