Cloud Engineer

ROLE & RESPONSIBILITIES:

We are hiring a Senior DevSecOps / Security Engineer with 8+ years of experience securing AWS cloud, on-prem infrastructure, DevOps platforms, MLOps environments, CI/CD pipelines, container orchestration, and data/ML platforms. This role is responsible for creating and maintaining a unified security posture across all systems used by DevOps and MLOps teams — including AWS, Kubernetes, EMR, MWAA, Spark, Docker, GitOps, observability tools, and network infrastructure.

KEY RESPONSIBILITIES:

1.     Cloud Security (AWS)-

• Secure all AWS resources consumed by DevOps/MLOps/Data Science: EC2, EKS, ECS, EMR, MWAA, S3, RDS, Redshift, Lambda, CloudFront, Glue, Athena, Kinesis, Transit Gateway, VPC Peering.
• Implement IAM least privilege, SCPs, KMS, Secrets Manager, SSO & identity governance.
• Configure AWS-native security: WAF, Shield, GuardDuty, Inspector, Macie, CloudTrail, Config, Security Hub.
• Harden VPC architecture, subnets, routing, SG/NACLs, multi-account environments.
• Ensure encryption of data at rest/in transit across all cloud services.

2.     DevOps Security (IaC, CI/CD, Kubernetes, Linux)-

Infrastructure as Code & Automation Security:

• Secure Terraform, CloudFormation, Ansible with policy-as-code (OPA, Checkov, tfsec).
• Enforce misconfiguration scanning and automated remediation.

CI/CD Security:

• Secure Jenkins, GitHub, GitLab pipelines with SAST, DAST, SCA, secrets scanning, image scanning.
• Implement secure build, artifact signing, and deployment workflows.

Containers & Kubernetes:

• Harden Docker images, private registries, runtime policies.
• Enforce EKS security: RBAC, IRSA, PSP/PSS, network policies, runtime monitoring.
• Apply CIS Benchmarks for Kubernetes and Linux.

Monitoring & Reliability:

• Secure observability stack: Grafana, CloudWatch, logging, alerting, anomaly detection.
• Ensure audit logging across cloud/platform layers.

3.     MLOps Security (Airflow, EMR, Spark, Data Platforms, ML Pipelines)-

Pipeline & Workflow Security:

• Secure Airflow/MWAA connections, secrets, DAGs, execution environments.
• Harden EMR, Spark jobs, Glue jobs, IAM roles, S3 buckets, encryption, and access policies.

ML Platform Security:

• Secure Jupyter/JupyterHub environments, containerized ML workspaces, and experiment tracking systems.
• Control model access, artifact protection, model registry security, and ML metadata integrity.

Data Security:

• Secure ETL/ML data flows across S3, Redshift, RDS, Glue, Kinesis.
• Enforce data versioning security, lineage tracking, PII protection, and access governance.

ML Observability:

• Implement drift detection (data drift/model drift), feature monitoring, audit logging.
• Integrate ML monitoring with Grafana/Prometheus/CloudWatch.

4.     Network & Endpoint Security-

• Manage firewall policies, VPN, IDS/IPS, endpoint protection, secure LAN/WAN, Zero Trust principles.
• Conduct vulnerability assessments, penetration test coordination, and network segmentation.
• Secure remote workforce connectivity and internal office networks.

5.     Threat Detection, Incident Response & Compliance-

• Centralize log management (CloudWatch, OpenSearch/ELK, SIEM).
• Build security alerts, automated threat detection, and incident workflows.
• Lead incident containment, forensics, RCA, and remediation.
• Ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA (as applicable).
• Maintain security policies, procedures, RRPs (Runbooks), and audits.

IDEAL CANDIDATE:

• 8+ years in DevSecOps, Cloud Security, Platform Security, or equivalent.
• Proven ability securing AWS cloud ecosystems (IAM, EKS, EMR, MWAA, VPC, WAF, GuardDuty, KMS, Inspector, Macie).
• Strong hands-on experience with Docker, Kubernetes (EKS), CI/CD tools, and Infrastructure-as-Code.
• Experience securing ML platforms, data pipelines, and MLOps systems (Airflow/MWAA, Spark/EMR).
• Strong Linux security (CIS hardening, auditing, intrusion detection).
• Proficiency in Python, Bash, and automation/scripting.
• Excellent knowledge of SIEM, observability, threat detection, monitoring systems.
• Understanding of microservices, API security, serverless security.
• Strong understanding of vulnerability management, penetration testing practices, and remediation plans.

EDUCATION:

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications (AWS Security Specialty, CISSP, CEH, CKA/CKS) are a plus.

PERKS, BENEFITS AND WORK CULTURE:

• Competitive Salary Package
• Generous Leave Policy
• Flexible Working Hours
• Performance-Based Bonuses
• Health Care Benefits

Who We Are

We're a DevOps and Automation company based in Bengaluru, India. We have delivered over 170 automation projects for 65+ global clients, including Fortune 500 enterprises that trust us with mission-critical infrastructure and operations. We're bootstrapped, profitable, and scaling quickly by consistently solving complex engineering challenges with precision and reliability.

What We Value

• Ownership: As part of our team, you're responsible for strategy and outcomes, not just completing assigned tasks.
• High Velocity: We move fast, iterate faster, and amplify our impact, always prioritizing quality over speed.

Who We Seek

We are hiring DevOps Engineers (6 months - 1 year experience) to join our DevOps team. You will work on infrastructure automation, CI/CD pipelines, cloud deployments, container orchestration, and system reliability.

This role is ideal for someone who wants to work with modern DevOps tooling and contribute to high-impact engineering decisions.

🌏 Job Location: Bengaluru (Work From Office)

What You Will Be Doing

CI/CD Pipeline Management

• Design, implement, and maintain efficient CI/CD pipelines using Jenkins, GitLab CI, Azure DevOps, or similar tools.
• Automate build, test, and deployment processes to increase delivery speed and reliability.

Infrastructure as Code (IaC)

• Provision and manage infrastructure on AWS, Azure, or GCP using Terraform, CloudFormation, or Ansible.
• Maintain scalable, secure, and cost-optimized environments.

Containerization & Orchestration

• Build and manage Docker-based environments.
• Deploy and scale workloads using Kubernetes.

Monitoring & Alerting

• Implement monitoring, logging, and alerting systems using Prometheus, Grafana, ELK Stack, Datadog, or similar.
• Develop dashboards and alerts to detect issues proactively.

System Reliability & Performance

• Implement systems for high availability, disaster recovery, and fault tolerance.
• Troubleshoot and optimize infrastructure performance.

Scripting & Automation

• Write automation scripts in Python, Bash, or Shell to streamline operations.
• Automate repetitive workflows to reduce manual intervention.

Collaboration & Best Practices

• Work closely with Development, QA, and Security teams to embed DevOps best practices into the SDLC.
• Follow security standards for deployments and infrastructure.
• Work efficiently with Unix/Linux systems and understand core networking concepts (DNS, DHCP, NAT, VPN, TCP/IP).

What We’re Looking For

• Strong understanding of Linux distributions (Ubuntu, CentOS, RHEL) and Windows environments.
• Proficiency with Git and experience using GitHub, GitLab, or Bitbucket.
• Ability to write automation scripts using Bash/Shell or Python.
• Basic knowledge of relational databases like MySQL or PostgreSQL.
• Familiarity with web servers such as NGINX or Apache2.
• Experience working with AWS, Azure, GCP, or DigitalOcean.
• Foundational understanding of Ansible for configuration management.
• Basic knowledge of Terraform or CloudFormation for IaC.
• Hands-on experience with Jenkins or GitLab CI/CD pipelines.
• Strong knowledge of Docker for containerization.
• Basic exposure to Kubernetes for orchestration.
• Familiarity with at least one programming language (Java, Node.js, or Python).

Benefits

🤝 Work directly with founders and engineering leaders.

💪 Drive projects that create real business impact, not busywork.

💡 Gain practical, industry-relevant skills you won’t learn in college.

🚀 Accelerate your growth by working on meaningful engineering challenges.

📈 Learn continuously with mentorship and structured development opportunities.

🤗 Be part of a collaborative, high-energy workplace that values innovation.

Job Responsibilities:

Work & Deploy updates and fixes Provide Level 2 technical support Support implementation of fully automated CI/CD pipelines as per dev requirement Follow the escalation process through issue completion, including providing documentation after resolution Follow regular Operations procedures and complete all assigned tasks during the shift. Assist in root cause analysis of production issues and help write a report which includes details about the failure, the relevant log entries, and likely root cause Setup of CICD frameworks (Jenkins / Azure DevOps Server), Containerization using Docker, etc Implement continuous testing, Code Quality, Security using DevOps tooling Build a knowledge base by creating and updating documentation for support

Skills Required:

DevOps, Linux, AWS, Ansible, Jenkins, GIT, Terraform, CI, CD, Cloudformation, Typescript

• Public clouds, such as AWS, Azure, or Google Cloud Platform
• Automation technologies, such as Kubernetes or Jenkins
• Configuration management tools, such as Puppet or Chef
• Scripting languages, such as Python or Ruby

As a DevOps Engineer with experience in Kubernetes, you will be responsible for leading and managing a team of DevOps engineers in the design, implementation, and maintenance of the organization's infrastructure. You will work closely with software developers, system administrators, and other IT professionals to ensure that the organization's systems are efficient, reliable, and scalable. 

Specific responsibilities will include: 

• Leading the team in the development and implementation of automation and continuous delivery pipelines using tools such as Jenkins, Terraform, and Ansible. 
• Managing the organization's infrastructure using Kubernetes, including deployment, scaling, and monitoring of applications. 

• Ensuring that the organization's systems are secure and compliant with industry standards. 
• Collaborating with software developers to design and implement infrastructure as code. 
• Providing mentorship and technical guidance to team members. 
• Troubleshooting and resolving technical issues in collaboration with other IT professionals. 
• Participating in the development and maintenance of the organization's disaster recovery and incident response plans. 

To be successful in this role, you should have strong leadership skills and experience with a variety of DevOps and infrastructure tools and technologies. You should also have excellent communication and problem-solving skills, and be able to work effectively in a fast-paced, dynamic environment. 

What you need to have:

Araali Networks is seeking a highly driven DevOps engineer to help streamline the release and deployment process, while assuring high quality.

Responsibilities:

Use best practices to streamline the release process

Use IaC methods to manage cloud infrastructure

Use test automation for release qualification

Skills and Qualifications:

Hands-on experience in managing release pipelines

Good understanding of public cloud infrastructure

Working knowledge of python test frameworks like pyunit, and automation tools like Selenium, Cucumber etc

Strong analytical and debugging skills

Bachelor’s degree in Computer Science

About Araali:

Araali Networks is a SaaS based cybersecurity startup that has raised a total of $10M from well known investors like A Capital, Firebolt Ventures and SV Angels, and and through a strategic investment by a publicly traded security company.

The company is disrupting the cloud firewall market by auto-creating nano-perimeters around every cloud app. The Araali solution enables developers to focus on features and improves the security posture through simplification and automation. 

The security controls are embedded at the time of DevOps. The precision of Araali controls also helps with security operations where alerts are precise and intelligently routed to the right app team, making it actionable in real-time.