-
Execute deployments using helm syntax commands and manage custom values files structured for specific customer environments.
-
Manage high-availability scaling topologies, orchestrate multi-container pods (e.g., Tomcat application web dashboards paired with local OneTick network servers), and maintain backend architectures.
-
Actively debug runtime failures within the cluster (e.g., handling volume mount failures, subPath initialization blockages, and pod restarts).
-
Analyze complex file system and share-level access permissions. Solve subtle storage issues, such as aligning container runtime users (runAsUser/securityContext) with strict corporate Network File System (NFS/AWS EFS/SGW) POSIX permissions (e.g., 775/777 path-traversal mandates).
-
Investigate multi-container sidecar data syncing behaviors, such as tracing rsync permission-denied errors (Code 13) within persistent memory spaces or shared directories.
-
Any security related concerns should be either identified and addresses on-site or, if product change is needed, being proactively packed for the OMD DevOps team to resolve.
-
Configure and troubleshoot Federated Single Sign-On (SSO) infrastructure, mapping the Customer's Identity Provider (IdP - such as Azure AD, Okta, or Ping) to our products brokerage via SAML 2.0 or OpenID Connect protocols.
-
Implement secure metadata exchanges, map user attributes, and establish group-based access control leveraging enterprise Object IDs.
-
Manage secure connection protocols for cloud-managed architectures, including the deployment and routing of CloudSQL Auth Proxies, database string vaulting, and cloud storage integrations.
-
Configure Application Load Balancers (AWS ALB), managing ingress annotations, SSL/TLS termination, pass-through targets, and HTTP-to-HTTPS redirection rules.
-
Manage, isolate, and maintain specific tenant deviations and infrastructure overrides stored within the decoupled configuration directories.
-
Own the continuous calibration of bespoke environmental layers for dedicated accounts; this includes designing, deploying, and validating sophisticated Load Balancer mappings, multi-region ingress architectures, and fine-tuning automated pod-scaling behaviors.
-
Maintain localized log collection and log shipping sidecars (e.g., Grafana Promtail/Loki) to capture and store multi-container logs that do not natively pipe to standard output.
-
Isolate platform dependencies from infrastructure limits by maintaining container-level requests, limits, and priority states.
-
Independently solve all infrastructure, network, and environmental anomalies native to the customer's tenancy.
-
When an application bug is suspected, compile deterministic diagnostic data (kubectl describe pod/kubectl logs outputs, engine trace dumps, OS stack traces, product logs) into highly analytical bug reports for our remote engineering organization.
