Cloud Architect

ROLE & RESPONSIBILITIES:

We are hiring a Senior DevSecOps / Security Engineer with 8+ years of experience securing AWS cloud, on-prem infrastructure, DevOps platforms, MLOps environments, CI/CD pipelines, container orchestration, and data/ML platforms. This role is responsible for creating and maintaining a unified security posture across all systems used by DevOps and MLOps teams — including AWS, Kubernetes, EMR, MWAA, Spark, Docker, GitOps, observability tools, and network infrastructure.

KEY RESPONSIBILITIES:

1.     Cloud Security (AWS)-

• Secure all AWS resources consumed by DevOps/MLOps/Data Science: EC2, EKS, ECS, EMR, MWAA, S3, RDS, Redshift, Lambda, CloudFront, Glue, Athena, Kinesis, Transit Gateway, VPC Peering.
• Implement IAM least privilege, SCPs, KMS, Secrets Manager, SSO & identity governance.
• Configure AWS-native security: WAF, Shield, GuardDuty, Inspector, Macie, CloudTrail, Config, Security Hub.
• Harden VPC architecture, subnets, routing, SG/NACLs, multi-account environments.
• Ensure encryption of data at rest/in transit across all cloud services.

2.     DevOps Security (IaC, CI/CD, Kubernetes, Linux)-

Infrastructure as Code & Automation Security:

• Secure Terraform, CloudFormation, Ansible with policy-as-code (OPA, Checkov, tfsec).
• Enforce misconfiguration scanning and automated remediation.

CI/CD Security:

• Secure Jenkins, GitHub, GitLab pipelines with SAST, DAST, SCA, secrets scanning, image scanning.
• Implement secure build, artifact signing, and deployment workflows.

Containers & Kubernetes:

• Harden Docker images, private registries, runtime policies.
• Enforce EKS security: RBAC, IRSA, PSP/PSS, network policies, runtime monitoring.
• Apply CIS Benchmarks for Kubernetes and Linux.

Monitoring & Reliability:

• Secure observability stack: Grafana, CloudWatch, logging, alerting, anomaly detection.
• Ensure audit logging across cloud/platform layers.

3.     MLOps Security (Airflow, EMR, Spark, Data Platforms, ML Pipelines)-

Pipeline & Workflow Security:

• Secure Airflow/MWAA connections, secrets, DAGs, execution environments.
• Harden EMR, Spark jobs, Glue jobs, IAM roles, S3 buckets, encryption, and access policies.

ML Platform Security:

• Secure Jupyter/JupyterHub environments, containerized ML workspaces, and experiment tracking systems.
• Control model access, artifact protection, model registry security, and ML metadata integrity.

Data Security:

• Secure ETL/ML data flows across S3, Redshift, RDS, Glue, Kinesis.
• Enforce data versioning security, lineage tracking, PII protection, and access governance.

ML Observability:

• Implement drift detection (data drift/model drift), feature monitoring, audit logging.
• Integrate ML monitoring with Grafana/Prometheus/CloudWatch.

4.     Network & Endpoint Security-

• Manage firewall policies, VPN, IDS/IPS, endpoint protection, secure LAN/WAN, Zero Trust principles.
• Conduct vulnerability assessments, penetration test coordination, and network segmentation.
• Secure remote workforce connectivity and internal office networks.

5.     Threat Detection, Incident Response & Compliance-

• Centralize log management (CloudWatch, OpenSearch/ELK, SIEM).
• Build security alerts, automated threat detection, and incident workflows.
• Lead incident containment, forensics, RCA, and remediation.
• Ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA (as applicable).
• Maintain security policies, procedures, RRPs (Runbooks), and audits.

IDEAL CANDIDATE:

• 8+ years in DevSecOps, Cloud Security, Platform Security, or equivalent.
• Proven ability securing AWS cloud ecosystems (IAM, EKS, EMR, MWAA, VPC, WAF, GuardDuty, KMS, Inspector, Macie).
• Strong hands-on experience with Docker, Kubernetes (EKS), CI/CD tools, and Infrastructure-as-Code.
• Experience securing ML platforms, data pipelines, and MLOps systems (Airflow/MWAA, Spark/EMR).
• Strong Linux security (CIS hardening, auditing, intrusion detection).
• Proficiency in Python, Bash, and automation/scripting.
• Excellent knowledge of SIEM, observability, threat detection, monitoring systems.
• Understanding of microservices, API security, serverless security.
• Strong understanding of vulnerability management, penetration testing practices, and remediation plans.

EDUCATION:

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications (AWS Security Specialty, CISSP, CEH, CKA/CKS) are a plus.

PERKS, BENEFITS AND WORK CULTURE:

• Competitive Salary Package
• Generous Leave Policy
• Flexible Working Hours
• Performance-Based Bonuses
• Health Care Benefits

We’re hiring a DevOps Engineer who’s passionate about automation, reliability, and scaling infrastructure for modern cloud-native applications. If you thrive in dynamic environments and love problem-solving at scale, we’d love to meet you!

🔧 Key Responsibilities

• Manage and support production systems with on-call rotations
• Deploy and maintain scalable infrastructure on AWS (ECS, EC2, EKS, S3, RDS, ELB, IAM, Lambda)
• Build infrastructure using Terraform
• Manage and monitor Kubernetes clusters and Docker containers
• Automate deployment and configuration using Ansible or similar tools
• Ensure systems reliability using robust monitoring and alerting tools
• Work with Linux OS, and network protocols like HTTP, DNS, SMTP, LDAP
• Manage services like Nginx, HAProxy, MySQL, SSH
• Collaborate with development, QA, and product teams
• Document systems and infrastructure best practices

✅ Required Skills

• 4+ years in DevOps, SRE, or Systems Administration
• Hands-on experience with AWS, Kubernetes, Docker
• Proficient with Terraform, Ansible, and Linux systems
• Strong understanding of networking, system logs, and debugging
• Excellent communication and documentation skills

Role Overview:

As a DevOps Engineer (L2), you will play a key role in designing, implementing, and optimizing infrastructure. You will take ownership of automating processes, improving system reliability, and supporting the development lifecycle.

Key Responsibilities:

• Design and manage scalable, secure, and highly available cloud infrastructure.
• Lead efforts in implementing and optimizing CI/CD pipelines.
• Automate repetitive tasks and develop robust monitoring solutions.
• Ensure the security and compliance of systems, including IAM, VPCs, and network configurations.
• Troubleshoot complex issues across development, staging, and production environments.
• Mentor and guide L1 engineers on best practices.
• Stay updated on emerging DevOps tools and technologies.
• Manage cloud resources efficiently using Infrastructure as Code (IaC) tools like Terraform and AWS CloudFormation.

Qualifications:

• Bachelor’s degree in Computer Science, IT, or a related field.
• Proven experience with CI/CD pipelines and tools like Jenkins, GitLab, or Azure DevOps.
• Advanced knowledge of cloud platforms (AWS, Azure, or GCP) with hands-on experience in deployments, migrations, and optimizations.
• Strong expertise in containerization (Docker) and orchestration tools (Kubernetes).
• Proficiency in scripting languages like Python, Bash, or PowerShell.
• Deep understanding of system security, networking, and load balancing.
• Strong analytical skills and problem-solving mindset.
• Certifications (e.g., AWS Certified Solutions Architect, Kubernetes Administrator) are a plus.

What We Offer:

• Opportunity to work with a cutting-edge tech stack in a product-first company.
• Collaborative and growth-oriented environment.
• Competitive salary and benefits.
• Freedom to innovate and contribute to impactful projects.

5 to 10 years of software development & coding experience

Experience with Infrastructure as Code development (Automation, CICD) AWS CloudFormation, AWS CodeBuild, CodeDeploy are a must have. 

Experience troubleshooting AWS policy or permissions related errors during resource deployments \

Programming experience; preferred Python, PowerShell, bash development experience \

Have Experience with application build automation tools like Apache Maven, Jenkins, Concourse, and Git supporting continuous integration / continuous deployment capabilities (CI/CD) à GitHub and GitHub actions for deployments are must-have skills (Maven, Jenkins, etc. are nice to have)

Have configuration management experience (Chef, Puppet, or Ansible)

Worked in a Development Shop or have SDLC hands on Experience

Familiar with how to write software, test plans, automate and release using modern development methods

AWS certified at an appropriate level

 3-5 years of experience in DevOps, systems administration, or software engineering roles.

 B. Tech. in computer science or related field from top tier engineering colleges.

 Strong technical skills in software development, systems administration, and cloud infrastructure management.

 Experience with infrastructure-as-code tools such as Terra form or Cloud Formation.

 Experience with containerization technologies such as Dockers and Kubernetes.

 Experience with cloud providers such as AWS or Azure.

 Experience with scripting languages such as Bash or Python.

 Strong problem-solving and analytical skills.

 Strong communication and collaboration skills

DevOps Engineer

Job Description:

The position requires a broad set of technical and interpersonal skills that includes deployment technologies, monitoring and scripting from networking to infrastructure. Well versed in troubleshooting Prod issues and should be able to drive till the RCA.

Skills:

• Manage VMs across multiple datacenters and AWS to support dev/test and production workloads.
• Strong hands-on over Ansible is preferred
• Strong knowledge and hands-on experience in Kubernetes Architecture and administration.
• Should have core knowledge in Linux and System operations.
• Proactively and reactively resolve incidents as escalated from monitoring solutions and end users.
• Conduct and automate audits for network and systems infrastructure.
• Do software deployments, per documented processes, with no impact to customers.
• Follow existing devops processes while having flexibility to create and tweak processes to gain efficiency.
• Troubleshoot connectivity problems across network, systems or applications.
• Follow security guidelines, both policy and technical to protect our customers.
• Ability to automate recurring tasks to increase velocity and quality.
• Should have worked on any one of the Database (Postgres/Mongo/Cockroach/Cassandra)
• Should have knowledge and hands-on experience in managing ELK clusters.
• Scripting Knowledge in Shell/Python is added advantage.
• Hands-on Experience over K8s based Microservice Architecture is added advantage.

• Strong communication skills (written and verbal)
• Responsive, reliable and results oriented with the ability to execute on aggressive plans
• A background in software development, with experience of working in an agile product software development environment
• An understanding of modern deployment tools (Git, Bitbucket, Jenkins, etc.), workflow tools (Jira, Confluence) and practices (Agile (SCRUM), DevOps, etc.)
• Expert level experience with AWS tools, technologies and APIs associated with it - IAM, Cloud-Formation, Cloud Watch, AMIs, SNS, EC2, EBS, EFS, S3, RDS, VPC, ELB, IAM, Route 53, Security Groups, Lambda, VPC etc.
• Hands on experience with Kubernetes (EKS preferred)
• Strong DevOps skills across CI/CD and configuration management using Jenkins, Ansible, Terraform, Docker.
• Experience provisioning and spinning up AWS Clusters using Terraform, Helm, Helm Charts
• Ability to work across multiple projects simultaneously
• Ability to manage and work with teams and customers across the globe