Cloud Solutions Architect

Job Details

- Job Title: Senior DevOps Engineer

- Industry: Consumer Internet, Technology & Travel and Tourism Platform

- Function - IT

- Experience Required: 4-7 years

- Employment Type: Full Time

- Job Location: Bengaluru

- CTC Range: Best in Industry

Criteria:

• Strong DevOps / Infrastructure Engineer Profiles.
• Must have 4+ years of hands-on experience working as a DevOps Engineer / Infrastructure Engineer / SRE / DevOps Consultant.
• Must have hands-on experience with Kubernetes and Docker, including deployment, scaling, or containerized application management.
• Must have experience with Infrastructure as Code (IaC) or configuration management tools such as Terraform, Ansible, Chef, or Puppet.
• Must have strong automation and scripting experience using Python, Go, Bash, Shell, or similar scripting languages.
• Must have working experience with distributed databases or data systems such as MongoDB, Redis, Cassandra, Elasticsearch, or Kafka.
• Candidate must demonstrate strong expertise in at least one of the following areas - Databases / Distributed Data Systems, Observability & Monitoring, CI/CD Pipelines. Networking Concepts, Kubernetes / Container Platforms
• Candidates must be from B2C Product-based companies only.
• (Education) – BE / B.Tech or equivalent

Preferred

• Experience working with microservices or event-driven architectures.
• Exposure to cloud infrastructure, monitoring, reliability, and scalability practices.
• (Skills) – Understanding of programming languages such as Go, Python, or Java.
• Preferred (Environment) – Experience working in high-scale production or fast-growing product startups.

Job Description 

As a DevOps Engineer, you will be working on building and operating infrastructure at scale, designing and implementing a variety of tools to enable product teams to build and deploy their services independently, improving observability across the board, and designing for security, resiliency, availability, and stability. If the prospect of ensuring system reliability at scale and exploring cutting-edge technology to solve problems, excites you, then this is your fit.

Job Responsibilities:

• Own end-to-end infrastructure right from non-prod to prod environment including self-managed DBs
• Codify our infrastructure
• Do what it takes to keep the uptime above 99.99%
• Understand the bigger picture and sail through the ambiguities
• Scale technology considering cost and observability and manage end-to-end processes
• Understand DevOps philosophy and evangelize the principles across the organization
• Strong communication and collaboration skills to break down the silos

ROLE & RESPONSIBILITIES:

We are hiring a Senior DevSecOps / Security Engineer with 8+ years of experience securing AWS cloud, on-prem infrastructure, DevOps platforms, MLOps environments, CI/CD pipelines, container orchestration, and data/ML platforms. This role is responsible for creating and maintaining a unified security posture across all systems used by DevOps and MLOps teams — including AWS, Kubernetes, EMR, MWAA, Spark, Docker, GitOps, observability tools, and network infrastructure.

KEY RESPONSIBILITIES:

1.     Cloud Security (AWS)-

• Secure all AWS resources consumed by DevOps/MLOps/Data Science: EC2, EKS, ECS, EMR, MWAA, S3, RDS, Redshift, Lambda, CloudFront, Glue, Athena, Kinesis, Transit Gateway, VPC Peering.
• Implement IAM least privilege, SCPs, KMS, Secrets Manager, SSO & identity governance.
• Configure AWS-native security: WAF, Shield, GuardDuty, Inspector, Macie, CloudTrail, Config, Security Hub.
• Harden VPC architecture, subnets, routing, SG/NACLs, multi-account environments.
• Ensure encryption of data at rest/in transit across all cloud services.

2.     DevOps Security (IaC, CI/CD, Kubernetes, Linux)-

Infrastructure as Code & Automation Security:

• Secure Terraform, CloudFormation, Ansible with policy-as-code (OPA, Checkov, tfsec).
• Enforce misconfiguration scanning and automated remediation.

CI/CD Security:

• Secure Jenkins, GitHub, GitLab pipelines with SAST, DAST, SCA, secrets scanning, image scanning.
• Implement secure build, artifact signing, and deployment workflows.

Containers & Kubernetes:

• Harden Docker images, private registries, runtime policies.
• Enforce EKS security: RBAC, IRSA, PSP/PSS, network policies, runtime monitoring.
• Apply CIS Benchmarks for Kubernetes and Linux.

Monitoring & Reliability:

• Secure observability stack: Grafana, CloudWatch, logging, alerting, anomaly detection.
• Ensure audit logging across cloud/platform layers.

3.     MLOps Security (Airflow, EMR, Spark, Data Platforms, ML Pipelines)-

Pipeline & Workflow Security:

• Secure Airflow/MWAA connections, secrets, DAGs, execution environments.
• Harden EMR, Spark jobs, Glue jobs, IAM roles, S3 buckets, encryption, and access policies.

ML Platform Security:

• Secure Jupyter/JupyterHub environments, containerized ML workspaces, and experiment tracking systems.
• Control model access, artifact protection, model registry security, and ML metadata integrity.

Data Security:

• Secure ETL/ML data flows across S3, Redshift, RDS, Glue, Kinesis.
• Enforce data versioning security, lineage tracking, PII protection, and access governance.

ML Observability:

• Implement drift detection (data drift/model drift), feature monitoring, audit logging.
• Integrate ML monitoring with Grafana/Prometheus/CloudWatch.

4.     Network & Endpoint Security-

• Manage firewall policies, VPN, IDS/IPS, endpoint protection, secure LAN/WAN, Zero Trust principles.
• Conduct vulnerability assessments, penetration test coordination, and network segmentation.
• Secure remote workforce connectivity and internal office networks.

5.     Threat Detection, Incident Response & Compliance-

• Centralize log management (CloudWatch, OpenSearch/ELK, SIEM).
• Build security alerts, automated threat detection, and incident workflows.
• Lead incident containment, forensics, RCA, and remediation.
• Ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA (as applicable).
• Maintain security policies, procedures, RRPs (Runbooks), and audits.

IDEAL CANDIDATE:

• 8+ years in DevSecOps, Cloud Security, Platform Security, or equivalent.
• Proven ability securing AWS cloud ecosystems (IAM, EKS, EMR, MWAA, VPC, WAF, GuardDuty, KMS, Inspector, Macie).
• Strong hands-on experience with Docker, Kubernetes (EKS), CI/CD tools, and Infrastructure-as-Code.
• Experience securing ML platforms, data pipelines, and MLOps systems (Airflow/MWAA, Spark/EMR).
• Strong Linux security (CIS hardening, auditing, intrusion detection).
• Proficiency in Python, Bash, and automation/scripting.
• Excellent knowledge of SIEM, observability, threat detection, monitoring systems.
• Understanding of microservices, API security, serverless security.
• Strong understanding of vulnerability management, penetration testing practices, and remediation plans.

EDUCATION:

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications (AWS Security Specialty, CISSP, CEH, CKA/CKS) are a plus.

PERKS, BENEFITS AND WORK CULTURE:

• Competitive Salary Package
• Generous Leave Policy
• Flexible Working Hours
• Performance-Based Bonuses
• Health Care Benefits

• He has to perform architectural analysis, and he should know how to design enterprise-level systems.
• He should know how to design and simulate tools for the perfect delivery of systems.
• He should know how to design, develop, and maintain systems, processes, procedures to deliver a high-quality service design.
• He has to work with other members of a team and other departments to establish healthy communication and information flow.
• He should know how to deliver a high-performing solution architecture that can support the development efforts of a business.
• He has to plan, design, and configure the most typical business solutions as needed.
• He has to prepare technical documents and other presentations for multiple solutions areas.
• He has to be sure that the best practices for configuration management are carried our as it was needed.
• He has to work on customer specifications, analyze them, and conduct the best product recommendations associated with the platform

Requirements

• AWS Solution Architect 9-10 Years
• Responsible for managing applications on public cloud (AWS) infrastructure.
• Responsible for larger migrations of applications from VM to cloud/cloud-native.
• Responsible for setting up monitoring for cloud/cloud-native-based infrastructure and applications.
• MUST: AWS Solution Architect Professional certification.

• Mandatory: Docker, AWS, Linux, Kubernete or ECS
• Prior experience provisioning and spinning up AWS Clusters / Kubernetes
• Production experience to build scalable systems (load balancers, memcached, master/slave architectures)
• Experience supporting a managed cloud services infrastructure
• Ability to maintain, monitor and optimise production database servers
• Prior work with Cloud Monitoring tools (Nagios, Cacti, CloudWatch etc.)
• Experience with Docker, Kubernetes, Mesos, NoSQL databases (DynamoDB, Cassandra, MongoDB, etc)
• Other Open Source tools used in the infrastructure space (Packer, Terraform, Vagrant, etc.)
• In-depth knowledge on Linux Environment.
• Prior experience leading technical teams through the design and implementation of systems infrastructure projects.
• Working knowledge of Configuration Management (Chef, Puppet or Ansible preferred) Continuous Integration Tools (Jenkins preferred)
• Experience in handling large production deployments and infrastructure.
• DevOps based infrastructure and application deployments experience.
• Working knowledge of the AWS network architecture including designing VPN solutions between regions and subnets
• Hands-on knowledge with the AWS AMI architecture including the development of machine templates and blueprints
• He/she should be able to validate that the environment meets all security and compliance controls.
• Good working knowledge of AWS services such as Messaging, Application Services, Migration Services, Cost Management Platform.
• Proven written and verbal communication skills.
• Understands and can serve as the technical team lead to oversee the build of the Cloud environment based on customer requirements.
• Previous NOC experience.
• Client Facing Experience with excellent Customer Communication and Documentation Skills