KODE Labs
Senior DevOps Engineer
- Compensation
- Not disclosed
- Location
- United States
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Devops
- Posted
Skills
Must have
- Deep Kubernetes & Helm Experience: You are comfortable building complex Helm charts from scratch and managing K8s clusters in production.
- Stateful Services Expertise: You have experience running databases and message queues (Kafka, Postgres, etc.) inside containers and understand the nuances of persistence, backups, and high availabilit
- The "Doer" Mindset: You enjoy a startup environment where you can move fast, make architectural decisions, and see immediate results.
- Security Intuition: You have worked in regulated environments (FedRAMP, HIPAA, PCI, SOC 2) and understand the why behind the rules. You understand concepts like FIPS and container hardening, even if y
- Observability: Experience designing full-stack monitoring (metrics, logs, traces) to give us visibility into isolated environments.
- Tech Agility: We are a diverse shop. Whether it's picking up a new CI/CD tool, learning a new database, or scripting in Go/Python/Bash, you learn fast and adapt.
Full description
We are looking for a Senior DevOps Engineer who wants to take the lessons learned from previous roles and build it the right way. You will be working under seasoned DevSecOps leadership with a proven track record of delivering FedRAMP-authorized SaaS and PaaS solutions on AWS GovCloud (US).
This role focuses on building and operating secure, scalable infrastructure using AWS-native services, EKS-based Kubernetes platforms, and modern CI/CD and security automation aligned with FedRAMP Moderate/High requirements.
- Own the FedRAMP Build: Deploy, manage, and maintain our application within the Palantir FedStart ecosystem (a secure Kubernetes PaaS). You will master the Apollo deployment platform to manage releases across these isolated environments.
- Migrate the Legacy: Support the existing GSA on-premise deployment to ensure stability, while actively engineering its replacement. You will be the one to flip the switch and retire the legacy hardware.
- Manage Critical Data Infrastructure: You won’t just manage stateless apps. You will manage the orchestration and pipelines for stateful services on Kubernetes. Familiarity with Kafka, PostgreSQL, and other stateful services is a plus.
- Hardening with Purpose: Implement "security as code." You will handle container hardening, vulnerability remediation, and ensure our stack remains compliant—not because a clipboard auditor said so, but because we believe in secure engineering.
- Solve the Hard Problems: Working in a secure environment means you can't always just "Google it" or open a support tunnel. You need to be a deep troubleshooter capable of diagnosing network, kernel, and application issues independently.
Requirements
- Deep Kubernetes & Helm Experience: You are comfortable building complex Helm charts from scratch and managing K8s clusters in production.
- Stateful Services Expertise: You have experience running databases and message queues (Kafka, Postgres, etc.) inside containers and understand the nuances of persistence, backups, and high availability.
- The "Doer" Mindset: You enjoy a startup environment where you can move fast, make architectural decisions, and see immediate results.
- Security Intuition: You have worked in regulated environments (FedRAMP, HIPAA, PCI, SOC 2) and understand the why behind the rules. You understand concepts like FIPS and container hardening, even if you haven't implemented them from scratch.
- Observability: Experience designing full-stack monitoring (metrics, logs, traces) to give us visibility into isolated environments.