Senior DevOps Engineer – KX/KDB+ | Trade Surveillance

Job Description

Our client, a top-tier management consulting firm, is seeking an experienced Senior DevOps Engineer with KX/KDB+ and financial services expertise to support the deployment, integration, and ongoing optimization of a sophisticated Trade Surveillance platform for a leading global investment management firm.

This is a highly hands-on technical role requiring deep expertise in Kubernetes, containerized environments, AWS infrastructure, enterprise integrations, and production troubleshooting. The consultant will work directly with the end client's infrastructure teams and remote product engineering teams to ensure successful deployment, configuration, and operational stability of the surveillance platform.

The engagement will begin with a 1-month pilot, with significant potential for a longer-term engagement.

Key Responsibilities

• Lead the deployment, configuration, maintenance, and troubleshooting of a containerized Trade Surveillance platform across UAT and production environments.
• Deploy and manage applications using Kubernetes, Helm Charts, Docker, and Podman, including multi-container pods, initContainers, sidecars, and high-availability configurations.
• Support infrastructure and operational requirements associated with KX/KDB+, OneTick, and trade surveillance environments.
• Troubleshoot complex Kubernetes issues involving pod failures, persistent volumes, storage permissions, container security contexts, and networking.
• Manage AWS infrastructure integrations, including VPCs, Security Groups, ALB/NLB, AWS EFS, storage gateways, and cloud-managed databases.
• Configure and troubleshoot enterprise authentication and SSO integrations using Keycloak, SAML 2.0, OpenID Connect, Azure AD, Okta, or Ping.
• Support Linux-based infrastructure, shared storage systems, NFS, POSIX permissions, UID/GID mappings, and access control configurations.
• Configure application networking, ingress controllers, load balancers, SSL/TLS termination, and secure connectivity.
• Support PostgreSQL/AWS RDS connectivity, connection pooling, database proxies, and related infrastructure components.
• Implement and maintain monitoring, logging, and observability solutions, including Grafana, Loki, and Promtail.
• Develop and maintain automation scripts using Python and Bash.
• Independently investigate production issues, perform root-cause analysis, and coordinate resolution with engineering and infrastructure stakeholders.
• Maintain detailed technical documentation, deployment configurations, troubleshooting reports, and environment-specific changes.

Required Qualifications

• Strong hands-on experience as a DevOps Engineer, Platform Engineer, or Infrastructure Engineer supporting complex enterprise applications.
• Experience with KX/KDB+ or closely related high-performance market data / trade surveillance platforms, preferably within hedge funds, investment banks, or capital markets environments.
• Advanced expertise in Kubernetes administration and Helm Charts, including deployments, upgrades, debugging, orchestration, and production support.
• Strong experience with Docker, Podman, container networking, and containerized application architectures.
• Deep Linux systems administration expertise, including NFS, AWS EFS, POSIX permissions, ACLs, and container security configurations.
• Strong working knowledge of AWS cloud infrastructure, particularly networking, load balancing, storage, and Kubernetes-related services.
• Hands-on experience with Keycloak and federated SSO integrations, including SAML 2.0 and OpenID Connect.
• Experience troubleshooting enterprise networking, application connectivity, ingress routing, and SSL/TLS configurations.
• Proficiency in Python and Bash scripting for automation, configuration, and troubleshooting.
• Working knowledge of PostgreSQL, AWS RDS, PgBouncer, and database connectivity.
• Experience configuring or troubleshooting Apache Tomcat, Nginx, or Apache Web Server.
• Excellent troubleshooting, root-cause analysis, communication, and stakeholder coordination skills.
• Ability to work independently in highly regulated financial services environments.

Preferred Qualifications

• Prior experience supporting trade surveillance, market data, trading platforms, or capital markets technology.
• Familiarity with OneTick or similar time-series database technologies.
• Experience supporting applications within hedge funds, alternative investment firms, or Tier 1 investment banks.
• Exposure to AWS Karpenter, Kubernetes autoscaling, multi-region ingress architectures, and high-availability environments.
• Experience with Grafana, Loki, Promtail, and enterprise observability frameworks.
• Experience collaborating directly with product engineering teams to troubleshoot and resolve complex application and infrastructure issues.

Additional Details

• On-site Requirement: Must be available to work on-site in Midtown Manhattan, New York, five days per week. Remote or hybrid arrangements are not available.
• Engagement Duration: Initial 1-month pilot with potential for a multi-year engagement.
• Work Environment: Fast-paced, technically demanding financial services environment requiring strong independent problem-solving abilities.