• Platform & infrastructure operations: Help run and maintain the Kubernetes-based hosting environment and AWS infrastructure hosting client Drupal and Laravel applications. • Environment migration & configuration: Help migrate and configure client applications into new Kubernetes environments, standing up, tuning, and validating environments as the estate evolves. • Incident response & on-call: Contribute to the response to outages and security incidents: detection, containment, remediation, and reporting. Monitor alerting daily and ensure nothing is left unhandled. Take part in incident fire drills to keep response sharp. • CI/CD & deployments: Execute go-lives for new and re-platformed sites, resolve pipeline failures, and improve deployment workflows. • Security, access & compliance: Help manage identity and access across Google Workspace, Atlassian, hosting, and version control. Support staff onboarding and secure offboarding, including device management. Contribute to ISO 27001 and SOC 2 compliance work: maintaining controls, evidence, and audit readiness. Operate within segregated-environment boundaries, where access to certain systems is restricted under compliance and client contractual requirements. • Monitoring & observability: Maintain, improve, and stand up monitoring and alerting so problems are caught before clients notice. • Domains, DNS & SSL: Resolve DNS issues and manage domain and SSL/TLS certificate lifecycles for client and internal domains. • Backup & disaster recovery: Run backup restore tests and quarterly DR drills, demonstrating sub-one-hour recovery. • Cost & vendor management: Help stay on top of SaaS and infrastructure spend, vendor relationships, and renewals. • Automation & workflow: Help drive down the automation backlog, turning manual runbooks into scripted, repeatable workflows and applying AI where it earns its place

• Design, implement, and manage scalable and reliable Kubernetes-based infrastructure for personalization services. • Build and own CI/CD pipelines that ship services (and ML models) to production safely — canary, rollback, progressive delivery. • Stand up observability and monitoring with Prometheus, New Relic, OpenTelemetry, and Grafana; define SLIs / SLOs and drive error-budget discipline. • Ensure high availability, security, and performance of production APIs and streaming data pipelines. • Partner with application, data, and ML engineers to integrate their workloads smoothly into the platform. • Implement autoscaling strategies (HPA, KEDA, traffic-driven) for variable, bursty traffic patterns. • Manage Pub/Sub and event-driven architectures for real-time messaging, engagement analytics, and inter-service communication. • Optimize hot-path services using Redis, Memcached, and other caching strategies. • Debug and tackle production issues around latency, scaling, and reliability.

Role Description We're looking for a highly skilled Senior DevOps / Platform Engineer, the kind who could run a hosting platform single-handed, to help run and strengthen the platform behind a digital agency's client websites and applications. Most client sites are Drupal and Laravel applications running on a Kubernetes-based hosting platform backed by AWS. This is a high-trust, senior role at the centre of how the business delivers for clients. You'll bring the depth and self-sufficiency to own problems end-to-end, working alongside a small platform and development team to keep the entire hosting estate online, secure, and shipping: - Responding when a site goes down - Hardening security and access - Running deployment pipelines - Ensuring the business can recover from anything A real, prioritized automation backlog is waiting for someone to drive it forward. We want an engineer who thinks in workflows and treats repetitive manual work as a bug to be fixed: scripting it away, wiring up tooling, and using automation and AI to raise the whole team's leverage over time. If you tinker with this stuff for fun and have personal projects to show for it, we want to hear about them. Responsibilities - Platform & infrastructure operations: Help run and maintain the Kubernetes-based hosting environment and AWS infrastructure hosting client Drupal and Laravel applications. - Environment migration & configuration: Help migrate and configure client applications into new Kubernetes environments, standing up, tuning, and validating environments as the estate evolves. - Incident response & on-call: Contribute to the response to outages and security incidents: detection, containment, remediation, and reporting. Monitor alerting daily and ensure nothing is left unhandled. Take part in incident fire drills to keep response sharp. - CI/CD & deployments: Execute go-lives for new and re-platformed sites, resolve pipeline failures, and improve deployment workflows. - Security, access & compliance: Help manage identity and access across Google Workspace, Atlassian, hosting, and version control. Support staff onboarding and secure offboarding, including device management. Contribute to ISO 27001 and SOC 2 compliance work: maintaining controls, evidence, and audit readiness. Operate within segregated-environment boundaries, where access to certain systems is restricted under compliance and client contractual requirements. - Monitoring & observability: Maintain, improve, and stand up monitoring and alerting so problems are caught before clients notice. - Domains, DNS & SSL: Resolve DNS issues and manage domain and SSL/TLS certificate lifecycles for client and internal domains. - Backup & disaster recovery: Run backup restore tests and quarterly DR drills, demonstrating sub-one-hour recovery. - Cost & vendor management: Help stay on top of SaaS and infrastructure spend, vendor relationships, and renewals. - Automation & workflow: Help drive down the automation backlog, turning manual runbooks into scripted, repeatable workflows and applying AI where it earns its place. Qualifications - Solid Linux systems administration and strong scripting/automation skills (e.g. Bash, Python) - Strong automation instincts and a genuine grasp of workflow design: you see the repetitive process and reach for a way to automate it - Hands-on experience with workflow and automation tooling (e.g. n8n, or similar) - Hands-on experience with Kubernetes and containerized workloads (the hosting platform runs on Kubernetes, so this is central) - Experience migrating and configuring workloads across Kubernetes environments. - Experience with containerized hosting and cloud infrastructure: Docker and AWS - Experience running CI/CD pipelines (Bitbucket Pipelines used here) - A calm, methodical approach to incident response and production troubleshooting under pressure - Sound judgement on security and access control, with a least-privilege mindset - Exposure to compliance frameworks such as ISO 27001 or SOC 2, and the discipline to maintain controls and evidence - Comfortable working within governed access boundaries, where some environments are access-restricted for compliance and contractual reasons - The skill and self-sufficiency to run a platform like this largely on your own, while working within a small team and its governance - Able to point to concrete examples where you've applied automation or AI in a DevOps context and explain the impact Requirements - Personal projects, side builds, or a home lab that show you automate for the love of it - Practical use of AI tooling in day-to-day operational work - Familiarity with Drupal and/or Laravel application hosting - Experience with managed Kubernetes hosting platforms - Experience with on-call/alerting tooling (e.g. OpsGenie), JAMF, and Atlassian / Google Workspace admin - A track record of automating away repetitive operational work - Experience contributing to ISO 27001 or SOC 2 audits and certification - DNS, SSL/TLS, and domain lifecycle know-how Ideal Personality Traits - Stays calm and methodical under pressure - Thinks in workflows and treats repetitive manual work as a problem to be solved - Reaches for automation and AI as a first instinct, not an afterthought - Builds and tinkers outside work because they enjoy it - Could run a platform solo, but works well in a small team and within its boundaries - Doesn't cut corners on security - Respects access boundaries and governance without needing to be told twice

Role Description Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced ICAM Cloud DevOps Engineer with a Secret Security clearance to support KITS and our government customer. The position is remote. The ideal candidate is a technically skilled and innovative professional with deep expertise in cloud infrastructure, DevOps practices, and the deployment and operation of enterprise ICAM platforms within a federal government environment. This individual will play a critical role in designing, building, and maintaining the cloud infrastructure, automation pipelines, and operational tooling that underpin ICAM services, ensuring that identity and access management solutions are deployed securely, reliably, and efficiently at enterprise scale. The ICAM Cloud DevOps Engineer will be responsible for: - Designing, implementing, and maintaining cloud infrastructure supporting ICAM platforms and services. - Building, maintaining, and optimizing CI/CD pipelines for automated deployment, testing, and release of ICAM platform configurations. - Implementing and managing infrastructure-as-code (IaC) solutions using tools such as Terraform, AWS CloudFormation, or Ansible. - Supporting the deployment, configuration, and operational management of ICAM platform components in cloud environments. - Collaborating with ICAM architects and platform engineers to design cloud architectures that meet federal security requirements. - Implementing and maintaining DevSecOps practices across the ICAM platform delivery lifecycle. - Developing and maintaining automated testing frameworks for ICAM platform deployments. - Designing and implementing cloud monitoring, logging, and alerting solutions for ICAM platform infrastructure. - Managing and maintaining cloud-based secrets management, certificate management, and key management solutions. - Supporting the configuration and management of cloud networking components relevant to ICAM platform operations. - Collaborating with security teams to ensure compliance with federal security standards. - Contributing to ATO documentation and continuous monitoring activities. - Implementing and maintaining disaster recovery (DR) and business continuity capabilities. - Participating in change management processes. - Developing and maintaining comprehensive technical documentation for ICAM cloud infrastructure. - Providing Tier 3 infrastructure support for ICAM platform incidents. - Evaluating and recommending emerging cloud technologies and DevOps tools. - Supporting the continuous improvement of ICAM cloud operations. Qualifications - Bachelor's degree in Computer Science, Information Technology, Cloud Computing, Cybersecurity, or a related field; equivalent work experience may be considered. - 4+ years of hands-on experience in cloud engineering, DevOps, or infrastructure automation roles. - 2+ years of experience supporting the deployment and operation of enterprise identity and access management platforms. - Demonstrated hands-on experience with at least one major cloud platform (AWS, Azure, or Google Cloud). - Active Secret Clearance required. Requirements - Exceptional communication skills in English – both written and oral. - Hands-on experience designing, implementing, and managing cloud infrastructure on AWS, Azure, or Google Cloud. - Demonstrated proficiency with infrastructure-as-code (IaC) tools. - Strong experience building and maintaining CI/CD pipelines. - Experience implementing DevSecOps practices. - Proficiency with containerization and container orchestration technologies. - Experience with configuration management tools. - Strong knowledge of cloud networking concepts. - Experience implementing and managing cloud monitoring, logging, and alerting solutions. - Knowledge of secrets management, certificate management, and key management best practices. - Familiarity with Okta and SailPoint platform deployment and configuration management. - Understanding federal cloud security requirements. - Experience contributing to ATO processes and continuous monitoring programs. - Proficiency with scripting languages for automation of cloud infrastructure management. - Demonstrated ability to develop and maintain comprehensive technical documentation. Benefits - Competitive compensation. - Extraordinary benefits package including health, dental, and vision insurance. - 401K with company matching. - Flexible spending accounts. - Paid holidays. - Three weeks paid time off. - And more.