Principal DevOps Engineer

Octave provides mission-critical software that empowers organizations to make informed decisions across every stage of the asset lifecycle. The Principal DevOps Engineer will own the infrastructure foundation for the Octave Unified Experience platform, designing and operating Kubernetes, PostgreSQL, Microsoft Fabric, Refold MCP, security, CI/CD, and observability infrastructure across multi-tenant customer environments.

Responsibilities:

• Design, deploy, and operate the Kubernetes infrastructure underpinning the OUX platform — cluster configuration, namespace strategy, resource management, autoscaling, and multi-tenancy isolation
• Own the PostgreSQL database layer for the OUX platform — schema design, provisioning, backup and recovery, performance tuning, and migration strategy for the ontology tool and Platform Studio backend services
• Build and maintain the Microsoft Fabric integration infrastructure — service principal configuration, workspace provisioning, lakehouse connectivity, and Fabric API authentication patterns for the platform's data pipeline triggers
• Deploy and operate Refold as the platform's MCP tool configuration service — maintaining the Refold API surface, its integration with the agentic framework, and the infrastructure reliability guarantees the MCP Designer tool depends on
• Design and implement the tenant provisioning infrastructure — automated onboarding of new customer tenants, namespace isolation, credential management, and per-tenant resource quotas
• Own infrastructure security posture: network policies, secrets management (Azure Key Vault), certificate lifecycle, and the ingress/reverse proxy layer
• Build and maintain CI/CD pipelines for infrastructure-as-code (Bicep, Terraform, or Helm) and application deployment across environments
• Instrument the infrastructure layer with observability tooling — metrics, logs, distributed tracing, and cost-per-tenant dashboards feeding the platform's commercial reporting
• Collaborate with the OUX UI Engineer on security architecture — AuthN/AuthZ integration (Ory, Azure AD), CORS policy, and penetration testing remediation

Requirements:

• 4+ years in platform or infrastructure engineering, with hands-on production Kubernetes experience (AKS strongly preferred)
• Strong proficiency with PostgreSQL — schema design, performance tuning, HA configuration, and operational management
• Hands-on experience with Azure infrastructure services: AKS, Azure Key Vault, Azure Container Registry, Azure Monitor, and Azure networking
• Experience with Microsoft Fabric administration — workspace management, capacity configuration, service principal access, and API-based provisioning
• Proficiency with infrastructure-as-code tools (Bicep, Terraform, or Pulumi) and GitOps practices
• Experience designing and operating multi-tenant SaaS infrastructure — namespace isolation, resource quotas, and tenant lifecycle management
• Strong understanding of Kubernetes security primitives — RBAC, network policies, pod security standards, and secrets management
• Experience with CI/CD pipeline design and operation (Azure DevOps, GitHub Actions, or comparable)
• Solid understanding of OAuth2/OIDC and enterprise identity integration patterns
• Experience with Refold or comparable MCP service infrastructure
• Familiarity with Ory (Hydra, Kratos) for identity and access management
• Background in industrial or capital project software infrastructure environments
• Experience with FinOps tooling and cost-per-tenant attribution in cloud environments