Cloud Solution Architect

ROLE & RESPONSIBILITIES:

We are hiring a Senior DevSecOps / Security Engineer with 8+ years of experience securing AWS cloud, on-prem infrastructure, DevOps platforms, MLOps environments, CI/CD pipelines, container orchestration, and data/ML platforms. This role is responsible for creating and maintaining a unified security posture across all systems used by DevOps and MLOps teams — including AWS, Kubernetes, EMR, MWAA, Spark, Docker, GitOps, observability tools, and network infrastructure.

KEY RESPONSIBILITIES:

1.     Cloud Security (AWS)-

• Secure all AWS resources consumed by DevOps/MLOps/Data Science: EC2, EKS, ECS, EMR, MWAA, S3, RDS, Redshift, Lambda, CloudFront, Glue, Athena, Kinesis, Transit Gateway, VPC Peering.
• Implement IAM least privilege, SCPs, KMS, Secrets Manager, SSO & identity governance.
• Configure AWS-native security: WAF, Shield, GuardDuty, Inspector, Macie, CloudTrail, Config, Security Hub.
• Harden VPC architecture, subnets, routing, SG/NACLs, multi-account environments.
• Ensure encryption of data at rest/in transit across all cloud services.

2.     DevOps Security (IaC, CI/CD, Kubernetes, Linux)-

Infrastructure as Code & Automation Security:

• Secure Terraform, CloudFormation, Ansible with policy-as-code (OPA, Checkov, tfsec).
• Enforce misconfiguration scanning and automated remediation.

CI/CD Security:

• Secure Jenkins, GitHub, GitLab pipelines with SAST, DAST, SCA, secrets scanning, image scanning.
• Implement secure build, artifact signing, and deployment workflows.

Containers & Kubernetes:

• Harden Docker images, private registries, runtime policies.
• Enforce EKS security: RBAC, IRSA, PSP/PSS, network policies, runtime monitoring.
• Apply CIS Benchmarks for Kubernetes and Linux.

Monitoring & Reliability:

• Secure observability stack: Grafana, CloudWatch, logging, alerting, anomaly detection.
• Ensure audit logging across cloud/platform layers.

3.     MLOps Security (Airflow, EMR, Spark, Data Platforms, ML Pipelines)-

Pipeline & Workflow Security:

• Secure Airflow/MWAA connections, secrets, DAGs, execution environments.
• Harden EMR, Spark jobs, Glue jobs, IAM roles, S3 buckets, encryption, and access policies.

ML Platform Security:

• Secure Jupyter/JupyterHub environments, containerized ML workspaces, and experiment tracking systems.
• Control model access, artifact protection, model registry security, and ML metadata integrity.

Data Security:

• Secure ETL/ML data flows across S3, Redshift, RDS, Glue, Kinesis.
• Enforce data versioning security, lineage tracking, PII protection, and access governance.

ML Observability:

• Implement drift detection (data drift/model drift), feature monitoring, audit logging.
• Integrate ML monitoring with Grafana/Prometheus/CloudWatch.

4.     Network & Endpoint Security-

• Manage firewall policies, VPN, IDS/IPS, endpoint protection, secure LAN/WAN, Zero Trust principles.
• Conduct vulnerability assessments, penetration test coordination, and network segmentation.
• Secure remote workforce connectivity and internal office networks.

5.     Threat Detection, Incident Response & Compliance-

• Centralize log management (CloudWatch, OpenSearch/ELK, SIEM).
• Build security alerts, automated threat detection, and incident workflows.
• Lead incident containment, forensics, RCA, and remediation.
• Ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA (as applicable).
• Maintain security policies, procedures, RRPs (Runbooks), and audits.

IDEAL CANDIDATE:

• 8+ years in DevSecOps, Cloud Security, Platform Security, or equivalent.
• Proven ability securing AWS cloud ecosystems (IAM, EKS, EMR, MWAA, VPC, WAF, GuardDuty, KMS, Inspector, Macie).
• Strong hands-on experience with Docker, Kubernetes (EKS), CI/CD tools, and Infrastructure-as-Code.
• Experience securing ML platforms, data pipelines, and MLOps systems (Airflow/MWAA, Spark/EMR).
• Strong Linux security (CIS hardening, auditing, intrusion detection).
• Proficiency in Python, Bash, and automation/scripting.
• Excellent knowledge of SIEM, observability, threat detection, monitoring systems.
• Understanding of microservices, API security, serverless security.
• Strong understanding of vulnerability management, penetration testing practices, and remediation plans.

EDUCATION:

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications (AWS Security Specialty, CISSP, CEH, CKA/CKS) are a plus.

PERKS, BENEFITS AND WORK CULTURE:

• Competitive Salary Package
• Generous Leave Policy
• Flexible Working Hours
• Performance-Based Bonuses
• Health Care Benefits

Role Overview:

We are looking for a skilled DevOps Engineer to join our team. You will be responsible for managing and automating the deployment, monitoring, and scaling of our applications, ensuring high availability, security, and performance. The ideal candidate is passionate about automation, CI/CD, and cloud infrastructure.

Key Responsibilities:

• Design, implement, and maintain CI/CD pipelines for development, testing, and production environments.
• Manage cloud infrastructure (AWS, Azure, GCP, or others) and ensure scalability, reliability, and security.
• Automate deployment, configuration management, and infrastructure provisioning using tools like Terraform, Ansible, or Chef.
• Monitor application performance and infrastructure health using tools like Prometheus, Grafana, ELK Stack, or Datadog.
• Collaborate with development and QA teams to streamline workflows and resolve deployment issues.
• Implement security best practices in pipelines, infrastructure, and cloud environments.
• Maintain version control and manage release cycles.
• Troubleshoot and resolve production issues efficiently.

Required Skills & Qualifications:

• Bachelor’s degree in Computer Science, IT, or related field.
• Proven experience in DevOps, system administration, or cloud engineering.
• Strong knowledge of CI/CD tools (Jenkins, GitLab CI/CD, CircleCI, etc.).
• Hands-on experience with containerization (Docker, Kubernetes).
• Experience with cloud platforms (AWS, Azure, or GCP).
• Scripting skills (Python, Bash, or PowerShell).
• Knowledge of infrastructure as code (Terraform, CloudFormation).
• Familiarity with monitoring and logging tools.
• Strong problem-solving, communication, and teamwork skills.

Preferred Qualifications:

• Experience with microservices architecture.
• Knowledge of networking, load balancing, and firewalls.
• Exposure to Agile/Scrum methodologies.

What We Offer:

• Competitive salary
• Flexible working hours and remote options.
• Learning and development opportunities.
• Collaborative and inclusive work environment.

Key Responsibilities:

• Build and Automation: Utilize Gradle for building and automating software projects. Ensure efficient and reliable build processes.
• Scripting: Develop and maintain scripts using Python and Shell scripting to automate tasks and improve workflow efficiency.
• CI/CD Tools: Implement and manage Continuous Integration and Continuous Deployment (CI/CD) pipelines using tools such as Harness, Github Actions, Jenkins, and other relevant technologies. Ensure seamless integration and delivery of code changes.
• Cloud Platforms: Demonstrate proficiency in working with cloud platforms including OpenShift, Azure, and Google Cloud Platform (GCP). Deploy, manage, and monitor applications in cloud environments.

Share Cv to

Thirega@ vysystems dot com - WhatsApp - 91Five0033Five2Three

5 to 10 years of software development & coding experience

Experience with Infrastructure as Code development (Automation, CICD) AWS CloudFormation, AWS CodeBuild, CodeDeploy are a must have. 

Experience troubleshooting AWS policy or permissions related errors during resource deployments \

Programming experience; preferred Python, PowerShell, bash development experience \

Have Experience with application build automation tools like Apache Maven, Jenkins, Concourse, and Git supporting continuous integration / continuous deployment capabilities (CI/CD) à GitHub and GitHub actions for deployments are must-have skills (Maven, Jenkins, etc. are nice to have)

Have configuration management experience (Chef, Puppet, or Ansible)

Worked in a Development Shop or have SDLC hands on Experience

Familiar with how to write software, test plans, automate and release using modern development methods

AWS certified at an appropriate level

Role Introduction

• This role involves guiding the DevOps team towards successful delivery of Governance and

toolchain initiatives by removing manual tasks.

• Operate toolchain applications to empower engineering teams by providing, reliable, governed

self-service tools and supporting their adoption

• Driving good practice for consumption and utilisation of the engineering toolchain, with a focus

on DevOps practices

• Drive good governance for cloud service consumption

• Involves working in a collaborative environment and focus on leading team and providing

technical leadership to team members.

• Involves setting up process and improvements for teams on supporting various DevOps tooling

and governing the tooling.

• Co-ordinating with multiple teams within organization

• Lead on handovers from architecture teams to support major project rollouts which require the

Toolchain governance DevOps team to operationally support tooling

What you will do

• Identify and implement best practices, process improvement and automation initiatives for

improvement towards quicker delivery by removing manual tasks

• Ensure best practices and process are documented for reusability and keeping up-to date on

good practices and standards.

• Re-usable automation and compliance service, tools and processes

• Support and management of toolchain, toolchain changes and selection

• Identify and implement risk mitigation plans, avoid escalations, resolve blockers for teams.

Toolchain governance will involve operating and responding to alerts, enforcing good tooling

governance by driving automation, remediating technical debt and ensuring the latest tools

are utilised and on the latest versions

• Triage product pipelines, performance issues, SLA/SLO breaches, service unavailable along

with ancillary actions such as providing access to logs, tools, environments.

• Involve in initial / detailed estimates during roadmap planning or feature

estimation/planning of any automation identified for a given toolset.

• Develop, refine, and tune integrations between various tools

• Discuss with Product Owner/team on any challenges from implementation, deployment

perspective and assist in arriving probable solution and escalate any risks to get them

resolved w.r.t DevOps toolchain.

• In consultation with Head of DevOps and other stake holders, prioritization of items, item-

task breakdown; accountable for squad deliverables for sprint

• Involve in reviewing current components and plan for upgrade and ensure its communicated

to wider audience within Organization

• Involve in reviewing access / role and enhance and automate provisioning.

• Identify and encourage areas for growth and improvement within the team e.g conducts

regular 1-2-1’s with squad members to provide support, mentoring and goal setting

• Involve in performance management ,rewards and recognition of team members, Involve in

hiring process.• Plan for upskill of team to know about tools and perform tasks. Ensure quicker onboarding

of new joiners/freshers to team to be productive.

• Review ticket metrics to measure the health of the project including SLAs and plan for

improvement.

• Requirement for on call for critical incidents that happen Out of Hours, based on tooling SLA.

This may include planning standby schedule for squad, carrying out retrospective for every

callout and reviewing SLIs/SLOs.

• Owns the tech/repair debt, risk and compliance for the tooling with respect to

infrastructure, pipelines, access etc

• Track optimum utilization of resources and monitor/track the delivery schedule

• Review solutions designs with the Architects / Principal DevOps Engineers as required

• Provide monthly reporting which align to DevOps Tooling KPIs

What you will have

• Candidate should have 8+ years of experience and Hands-on DevOps experience and

experience in team management.

• Strong communication and interpersonal skills, Team player

• Good working experience of CI/CD tools like Jenkins, SonarQube, FOSSA, Harness, Jira, JSM,

ServiceNow etc.

• Good hands on knowledge of AWS Services like EC2, ECS, S3, IAM, SNS, SQS, VPC, Lambda,

API Gateway, Cloud Watch, Cloud Formation etc.

• Experience in operating and governing DevOps Toolchain

• Experience in operational monitoring, alerting and identifying and delivering on both repair

and technical debt

• Experience and background in ITIL/ITSM processes. The candidate will ensure development

of the appropriate (ITSM) model and processes, based on the ITIL Service Management

framework. This includes the strategic, design, transition, and operation services and

continuous service improvement

• Provide ITSM leadership experience and coaching processes

• Experience on various tools like Jenkins, Harness, Fossa,

• Experience of hosting and managing applications on AWS/AZURE•

• Experience in CI/CD pipeline (Jenkins build pipelines)

• Experience in containerization (Docker/Kubernetes)

• Experience in any programming language (Node.js or Python is preferred)

• Experience in Architecting and supporting cloud based products will be a plus

• Experience in PowerShell & Bash will be a plus

• Able to self manage multiple concurrent small projects, including managing priorities

between projects

• Able to quickly learn new tools

• Should be able to mentor/drive junior team members to achieve desired outcome of

roadmap-

• Ability to analyse information to identify problems and issues, and make effective decisions

within short span

• Excellent problem solving and critical thinking

• Experience in integrating various components including unit testing / CI/CD configuration.

• Experience to review current toolset and plan for upgrade.

• Experience with Agile framework/Jira/JSM tool.• Good communication skills and ability to communicate/work independently with external

teams.

• Highly motivated, able to work proficiently both independently and in a team environment

Good knowledge and experience with security constructs –

DevOps Architect 

Experience:  10 - 12+ year relevant experience on DevOps
Locations : Bangalore, Chennai, Pune, Hyderabad, Jaipur.

Qualification:
• Bachelors or advanced degree in Computer science, Software engineering or equivalent is required.
• Certifications in specific areas are desired

Technical Skillset: Skills Proficiency level

• Build tools (Ant or Maven) - Expert
• CI/CD tool (Jenkins or Github CI/CD) - Expert
• Cloud DevOps (AWS CodeBuild, CodeDeploy, Code Pipeline etc) or Azure DevOps. - Expert
• Infrastructure As Code (Terraform, Helm charts etc.) - Expert
• Containerization (Docker, Docker Registry) - Expert
• Scripting (linux) - Expert
• Cluster deployment (Kubernetes) & maintenance - Expert
• Programming (Java) - Intermediate
• Application Types for DevOps (Streaming like Spark, Kafka, Big data like Hadoop etc) - Expert
• Artifactory (JFrog) - Expert
• Monitoring & Reporting (Prometheus, Grafana, PagerDuty etc.) - Expert
• Ansible, MySQL, PostgreSQL - Intermediate