DevOps Engineer(AWS)

ROLE & RESPONSIBILITIES:

We are hiring a Senior DevSecOps / Security Engineer with 8+ years of experience securing AWS cloud, on-prem infrastructure, DevOps platforms, MLOps environments, CI/CD pipelines, container orchestration, and data/ML platforms. This role is responsible for creating and maintaining a unified security posture across all systems used by DevOps and MLOps teams — including AWS, Kubernetes, EMR, MWAA, Spark, Docker, GitOps, observability tools, and network infrastructure.

KEY RESPONSIBILITIES:

1.     Cloud Security (AWS)-

• Secure all AWS resources consumed by DevOps/MLOps/Data Science: EC2, EKS, ECS, EMR, MWAA, S3, RDS, Redshift, Lambda, CloudFront, Glue, Athena, Kinesis, Transit Gateway, VPC Peering.
• Implement IAM least privilege, SCPs, KMS, Secrets Manager, SSO & identity governance.
• Configure AWS-native security: WAF, Shield, GuardDuty, Inspector, Macie, CloudTrail, Config, Security Hub.
• Harden VPC architecture, subnets, routing, SG/NACLs, multi-account environments.
• Ensure encryption of data at rest/in transit across all cloud services.

2.     DevOps Security (IaC, CI/CD, Kubernetes, Linux)-

Infrastructure as Code & Automation Security:

• Secure Terraform, CloudFormation, Ansible with policy-as-code (OPA, Checkov, tfsec).
• Enforce misconfiguration scanning and automated remediation.

CI/CD Security:

• Secure Jenkins, GitHub, GitLab pipelines with SAST, DAST, SCA, secrets scanning, image scanning.
• Implement secure build, artifact signing, and deployment workflows.

Containers & Kubernetes:

• Harden Docker images, private registries, runtime policies.
• Enforce EKS security: RBAC, IRSA, PSP/PSS, network policies, runtime monitoring.
• Apply CIS Benchmarks for Kubernetes and Linux.

Monitoring & Reliability:

• Secure observability stack: Grafana, CloudWatch, logging, alerting, anomaly detection.
• Ensure audit logging across cloud/platform layers.

3.     MLOps Security (Airflow, EMR, Spark, Data Platforms, ML Pipelines)-

Pipeline & Workflow Security:

• Secure Airflow/MWAA connections, secrets, DAGs, execution environments.
• Harden EMR, Spark jobs, Glue jobs, IAM roles, S3 buckets, encryption, and access policies.

ML Platform Security:

• Secure Jupyter/JupyterHub environments, containerized ML workspaces, and experiment tracking systems.
• Control model access, artifact protection, model registry security, and ML metadata integrity.

Data Security:

• Secure ETL/ML data flows across S3, Redshift, RDS, Glue, Kinesis.
• Enforce data versioning security, lineage tracking, PII protection, and access governance.

ML Observability:

• Implement drift detection (data drift/model drift), feature monitoring, audit logging.
• Integrate ML monitoring with Grafana/Prometheus/CloudWatch.

4.     Network & Endpoint Security-

• Manage firewall policies, VPN, IDS/IPS, endpoint protection, secure LAN/WAN, Zero Trust principles.
• Conduct vulnerability assessments, penetration test coordination, and network segmentation.
• Secure remote workforce connectivity and internal office networks.

5.     Threat Detection, Incident Response & Compliance-

• Centralize log management (CloudWatch, OpenSearch/ELK, SIEM).
• Build security alerts, automated threat detection, and incident workflows.
• Lead incident containment, forensics, RCA, and remediation.
• Ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA (as applicable).
• Maintain security policies, procedures, RRPs (Runbooks), and audits.

IDEAL CANDIDATE:

• 8+ years in DevSecOps, Cloud Security, Platform Security, or equivalent.
• Proven ability securing AWS cloud ecosystems (IAM, EKS, EMR, MWAA, VPC, WAF, GuardDuty, KMS, Inspector, Macie).
• Strong hands-on experience with Docker, Kubernetes (EKS), CI/CD tools, and Infrastructure-as-Code.
• Experience securing ML platforms, data pipelines, and MLOps systems (Airflow/MWAA, Spark/EMR).
• Strong Linux security (CIS hardening, auditing, intrusion detection).
• Proficiency in Python, Bash, and automation/scripting.
• Excellent knowledge of SIEM, observability, threat detection, monitoring systems.
• Understanding of microservices, API security, serverless security.
• Strong understanding of vulnerability management, penetration testing practices, and remediation plans.

EDUCATION:

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications (AWS Security Specialty, CISSP, CEH, CKA/CKS) are a plus.

PERKS, BENEFITS AND WORK CULTURE:

• Competitive Salary Package
• Generous Leave Policy
• Flexible Working Hours
• Performance-Based Bonuses
• Health Care Benefits

Objectives of this role

•Building and implementing new development tools and infrastructure

•Understanding the needs of stakeholders and conveying them to developers

•Working on ways to automate and improve development and release processes

•Testing and examining code written by others and analysing results

•Ensuring that systems are safe and secure against cybersecurity threats

•Identifying technical problems and developing software updates and fixes

•Working with software developers and software engineers to ensure that development follows established processes and works as intended

•Planning projects and being involved in project management decisions

Responsibilities:

• Set up CI/CD pipelines for automated deployment and delivery

•Setup and management of new and Existing cloud-based Kubernetes cluster services

•Write Ad/Hoc Bash/Python scripts to automate certain operational tasks.

•Designing, maintenance and management of tools for automation of different operational processes.

•Provision of critical system security by leveraging best practices and prolific cloud security solutions.

•System troubleshooting and problem resolution across various application domains and platforms

•Support/maintain development, UAT and production infrastructure.

•Providing recommendations for architecture and process improvements.

•Respond to L2 calls and emails.

•Help administer monitoring systems, alerting, log management, and other IT infrastructure systems.

•Perform root cause analysis of production errors and resolve technical issues

•Design procedures for system troubleshooting and maintenance

Technical Skill Requirements:

•Experience in a DevOps role in AWS/OCI cloud environment.

•Must have experience with CI/CD Pipelines and hands-on experience with DevOps tools such as, Jenkins, Git, Docker, Kubernetes, Ansible, etc.

•Strong knowledge in Terraform for multi-stack cloud infrastructure provisioning.

•Strong knowledge in OCI/AWS-based Kubernetes service management.

•Must have experience with Python/Bash as a scripting language.

•Good knowledge in software debugging, web applications and services (Apache, Nginx, HAProxy)

•Must have knowledge in monitoring setup with Prometheus, Alertmanager, Grafana, Thanos, Loki, Fluentbit, etc.

Good To Have Skills

•PostgreSQL, MySQL, MongoDB, Redis, Keycloak.

•Migrating application from one cloud to another; OCI certifications

•Test Driven Development

Soft Skill Requirements:

•Able to learn new skills and technology quickly.

•Energetic with amazing customer service skills and a team-oriented approach.

•Strong verbal and written communication skills

We are looking for an experienced Sr.Devops Consultant Engineer to join our team. The ideal candidate should have at least 5+ years of experience.

We are retained by a promising startup located in Silicon valley backed by Fortune 50 firm with veterans from firms as Zscaler, Salesforce & Oracle. Founding team has been part of three unicorns and two successful IPO’s in the past and well funded by Dell Technologies and Westwave Capital. The company has been widely recognized as an industry innovator in the Data Privacy, Security space and being built by proven Cybersecurity executives who have successfully built and scaled high growth Security companies and built Privacy programs as executives.

Responsibilities:

• Develop and maintain infrastructure as code using tools like Terraform, CloudFormation, and Ansible
• Manage and maintain Kubernetes clusters on EKS and EC2 instances
• Implement and maintain automated CI/CD pipelines for microservices
• Optimize AWS costs by identifying cost-saving opportunities and implementing cost-effective solutions
• Implement best security practices for microservices, including vulnerability assessments, SOC2 compliance, and network security
• Monitor the performance and availability of our cloud infrastructure using observability tools such as Prometheus, Grafana, and Elasticsearch
• Implement backup and disaster recovery solutions for our microservices and databases
• Stay up to date with the latest AWS services and technologies and provide recommendations for improving our cloud infrastructure
• Collaborate with cross-functional teams, including developers, and product managers, to ensure the smooth operation of our cloud infrastructure
• Experience with large scale system design and scaling services is highly desirable

Requirements:

• Bachelor's degree in Computer Science, Engineering, or a related field
• At least 5 years of experience in AWS DevOps and infrastructure engineering
• Expertise in Kubernetes management, Docker, EKS, EC2, Queues, Python Threads, Celery Optimization, Load balancers, AWS cost optimizations, Elasticsearch, Container management, and observability best practices
• Experience with SOC2 compliance and vulnerability assessment best practices for microservices
• Familiarity with AWS services such as S3, RDS, Lambda, and CloudFront
• Strong scripting skills in languages like Python, Bash, and Go
• Excellent communication skills and the ability to work in a collaborative team environment
• Experience with agile development methodologies and DevOps practices
• AWS certification (e.g. AWS Certified DevOps Engineer, AWS Certified Solutions Architect) is a plus.

Notice period : Can join within a month

As an Infrastructure Engineer at Navi, you will be building a resilient infrastructure platform, using modern Infrastructure engineering practices.

You will be responsible for the availability, scaling, security, performance and monitoring of the navi Cloud platform. You’ll be joining a team that follows best practices in infrastructure as code

• Build out the Infrastructure components like API Gateway, Service Mesh, Service Discovery, container orchestration platform like kubernetes.
• Developing reusable Infrastructure code and testing frameworks
• Build meaningful abstractions to hide the complexities of provisioning modern infrastructure components
• Design a scalable Centralized Logging and Metrics platform
• Drive solutions to reduce Mean Time To Recovery(MTTR), enable High Availability.

• Good to have experience in managing large scale cloud infrastructure, preferable AWS and Kubernetes
• Experience in developing applications using programming languages like Java, Python and Go
• Experience in handling logs and metrics at a high scale.
• Systematic problem-solving approach, coupled with strong communication skills and a sense of ownership and drive.

• Define and document best practices and strategies regarding application deployment and infrastructure maintenance.
• Ensure limited system failure and increase up-time and availability of the various company apps.
• Understand the current application infrastructure and strive for making it better.
• Automate infrastructure and develop tools and processes to improve the customer experience and reduce support time.
• Work closely with a team of developers and solution strategists to develop, deploy and troubleshoot the deployment and infrastructure issues.
• Manage full application stacks from the OS through custom applications using Amazon cloud-based computing environments.
• Set up a monitoring stack.
• Implement the application’s CI/CD pipeline using the AWS stack. Increasingly automate and improve the testing plans and development workflows and tools.
• Work closely with the engineers to design networks, systems, and storage environments that effectively reflect business needs, security requirements, and service level requirements.
• Manage a continuous integration/continuous deployment methodology for the server-based technologies.
• Proficient in leveraging CI and CD tools to automate testing and deployment. Experience working in an Agile, fast-paced, DevOps environment.
• Support internal and external customers on multiple platforms.
• First point of contact for handling customer issues, providing guidance and recommendations to increase efficiency and reduce customer incidents.
• Learn on the job and explore new technologies with little supervision.
• In addition to providing customer support, will be responsible for helping build tools and processes necessary for excellent customer outcomes.

Skills:

• Experience with the core AWS services, plus the specifics mentioned in this job description.
• Experience working with at least one of the following languages: Node.js, Python, PHP, Ruby, Kotlin or Java.
• Proficient with Git and Git workflows and hosted enterprise Git solutions like GitHub.
• Ability to troubleshoot distributed systems.
• Experience with. AWS EKS Kubernetes infrastructure setup.
• Experience creating Cloud Formation Template to create Auto Scaling Groups, Route 53, DNS, back-end database, Elastic load balancer, VPCs, Subnets, Security Groups, Cloud Watch, S3, IAM roles, RDS DB instances, and to provide those instances and configure those resources to work together reducing the manual effort.
• Experience in deploying and monitoring microservices on Kubernetes, AWS ECS, and AWS EKS
• Security aware and ensures that all systems are security standards-compliant.
• Good background in Linux/Unix administration.
• Experience with building or maintaining cloud-native applications.
• Minimum 3-5 years of cloud development experience, preferably AWS
• Experience with CI/CD tools like Jenkins preferred.
• Good analytical and communication skills
• Bachelor’s Degree in Computer Science, Engineering or a related technical discipline

Job Description :

- The engineer should be highly motivated, able to work independently, work and guide other engineers within and outside the team. 

- The engineer should possess varied software skills in Shell scripting, Linux, Oracle database, WebLogic, GIT, ANT, Hudson, Jenkins, Docker and Maven

- Work is super fun, non-routine, and, challenging, involving the application of advanced skills in area of specialization.

Key responsibilities :

- Design, develop, troubleshoot and debug software programs for Hudson monitoring, installing Cloud Software, Infra and cloud application usage monitoring.

Required Knowledge :

- Source Configuration management, Docker, Puppet, Ansible, Application and Server Monitoring, AWS, Database Administration, Kubernetes, Log monitoring, CI/CD, Design and implement build, deployment, and configuration management, Improve infrastructure development, Scripting language.

- Good written and verbal communication skills

Qualification :

Education and Experience : Bachelors/Masters in Computer Science

Open for 24- 7 shifts