DevOps Engineer

ROLE & RESPONSIBILITIES:

We are hiring a Senior DevSecOps / Security Engineer with 8+ years of experience securing AWS cloud, on-prem infrastructure, DevOps platforms, MLOps environments, CI/CD pipelines, container orchestration, and data/ML platforms. This role is responsible for creating and maintaining a unified security posture across all systems used by DevOps and MLOps teams — including AWS, Kubernetes, EMR, MWAA, Spark, Docker, GitOps, observability tools, and network infrastructure.

KEY RESPONSIBILITIES:

1.     Cloud Security (AWS)-

• Secure all AWS resources consumed by DevOps/MLOps/Data Science: EC2, EKS, ECS, EMR, MWAA, S3, RDS, Redshift, Lambda, CloudFront, Glue, Athena, Kinesis, Transit Gateway, VPC Peering.
• Implement IAM least privilege, SCPs, KMS, Secrets Manager, SSO & identity governance.
• Configure AWS-native security: WAF, Shield, GuardDuty, Inspector, Macie, CloudTrail, Config, Security Hub.
• Harden VPC architecture, subnets, routing, SG/NACLs, multi-account environments.
• Ensure encryption of data at rest/in transit across all cloud services.

2.     DevOps Security (IaC, CI/CD, Kubernetes, Linux)-

Infrastructure as Code & Automation Security:

• Secure Terraform, CloudFormation, Ansible with policy-as-code (OPA, Checkov, tfsec).
• Enforce misconfiguration scanning and automated remediation.

CI/CD Security:

• Secure Jenkins, GitHub, GitLab pipelines with SAST, DAST, SCA, secrets scanning, image scanning.
• Implement secure build, artifact signing, and deployment workflows.

Containers & Kubernetes:

• Harden Docker images, private registries, runtime policies.
• Enforce EKS security: RBAC, IRSA, PSP/PSS, network policies, runtime monitoring.
• Apply CIS Benchmarks for Kubernetes and Linux.

Monitoring & Reliability:

• Secure observability stack: Grafana, CloudWatch, logging, alerting, anomaly detection.
• Ensure audit logging across cloud/platform layers.

3.     MLOps Security (Airflow, EMR, Spark, Data Platforms, ML Pipelines)-

Pipeline & Workflow Security:

• Secure Airflow/MWAA connections, secrets, DAGs, execution environments.
• Harden EMR, Spark jobs, Glue jobs, IAM roles, S3 buckets, encryption, and access policies.

ML Platform Security:

• Secure Jupyter/JupyterHub environments, containerized ML workspaces, and experiment tracking systems.
• Control model access, artifact protection, model registry security, and ML metadata integrity.

Data Security:

• Secure ETL/ML data flows across S3, Redshift, RDS, Glue, Kinesis.
• Enforce data versioning security, lineage tracking, PII protection, and access governance.

ML Observability:

• Implement drift detection (data drift/model drift), feature monitoring, audit logging.
• Integrate ML monitoring with Grafana/Prometheus/CloudWatch.

4.     Network & Endpoint Security-

• Manage firewall policies, VPN, IDS/IPS, endpoint protection, secure LAN/WAN, Zero Trust principles.
• Conduct vulnerability assessments, penetration test coordination, and network segmentation.
• Secure remote workforce connectivity and internal office networks.

5.     Threat Detection, Incident Response & Compliance-

• Centralize log management (CloudWatch, OpenSearch/ELK, SIEM).
• Build security alerts, automated threat detection, and incident workflows.
• Lead incident containment, forensics, RCA, and remediation.
• Ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA (as applicable).
• Maintain security policies, procedures, RRPs (Runbooks), and audits.

IDEAL CANDIDATE:

• 8+ years in DevSecOps, Cloud Security, Platform Security, or equivalent.
• Proven ability securing AWS cloud ecosystems (IAM, EKS, EMR, MWAA, VPC, WAF, GuardDuty, KMS, Inspector, Macie).
• Strong hands-on experience with Docker, Kubernetes (EKS), CI/CD tools, and Infrastructure-as-Code.
• Experience securing ML platforms, data pipelines, and MLOps systems (Airflow/MWAA, Spark/EMR).
• Strong Linux security (CIS hardening, auditing, intrusion detection).
• Proficiency in Python, Bash, and automation/scripting.
• Excellent knowledge of SIEM, observability, threat detection, monitoring systems.
• Understanding of microservices, API security, serverless security.
• Strong understanding of vulnerability management, penetration testing practices, and remediation plans.

EDUCATION:

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications (AWS Security Specialty, CISSP, CEH, CKA/CKS) are a plus.

PERKS, BENEFITS AND WORK CULTURE:

• Competitive Salary Package
• Generous Leave Policy
• Flexible Working Hours
• Performance-Based Bonuses
• Health Care Benefits

Candidate must be from a product-based company with experience handling large-scale production traffic.

2. Candidate must have strong Linux expertise with hands-on production troubleshooting and working knowledge of databases and middleware (Mongo, Redis, Cassandra, Elasticsearch, Kafka).

3. Candidate must have solid experience with Kubernetes.

4. Candidate should have strong knowledge of configuration management tools like Ansible, Terraform, and Chef / Puppet. Add on- Prometheus & Grafana etc.

5. Candidate must be an individual contributor with strong ownership.

6. Candidate must have hands-on experience with DATABASE MIGRATIONS and observability tools such as Prometheus and Grafana.

7. Candidate must have working knowledge of Go/Python and Java.

8. Candidate should have working experience on Cloud platform - AWS

9. Candidate should have Minimum 1.5 years stability per organization, and a clear reason for relocation

Are you eager to kick-start your career in DevOps and learn the latest technologies to solve complex problems? Do you enjoy hands-on problem-solving, exploring cloud technologies, and supporting innovative solutions? At Aivar, we are looking for a DevOps Engineer to join our team.

In this role, you will assist in the implementation and support of DevOps practices, including containerization, orchestration, and CI/CD pipelines, while learning from industry experts.

This is an exciting opportunity to grow your skills and work on transformative projects in a collaborative environment.

Requirements

Preferred Technical Qualifications

• 2 – 5 years of experience in DevOps, system administration, or software development (internship experience is acceptable).
• Familiarity with container technologies such as Docker and Kubernetes.
• Understanding of Infrastructure as Code (IaC) tools like Terraform or CloudFormation.
• Knowledge of CI/CD tools like Jenkins, GitLab CI, or GitHub Actions.
• Programming experience in Python, Java, or another language used in DevOps workflows.
• Understanding of cloud platforms such as AWS, Azure, or GCP
• Willingness to learn advanced Kubernetes concepts and troubleshooting techniques.Preferred Soft Skills

Collaboration Skills:

• Willingness to work in cross-functional teams and support the alignment of technical solutions with business goals.
• Eager to learn how to work effectively with customers, engineers, and architects to deliver DevOps solutions.

Effective Communication:

• Ability to communicate technical concepts clearly to team members and stakeholders.
• Desire to improve documentation and presentation skills to share ideas effectively.

Problem-Solving Mindset:

• Curiosity to explore and learn solutions for infrastructure challenges in DevOps environments.
• Interest in learning how to diagnose and resolve issues in containerized and
•  distributed systems.

Adaptability and Continuous Learning:

• Strong desire to learn emerging DevOps tools and practices in a dynamic environment.
• Commitment to staying updated with trends in cloud computing, DevOps, and

Team-Oriented Approach:

• Enthusiastic about contributing to a collaborative team environment and supporting
• overall project goals.
• Open to feedback and actively sharing knowledge to help the team grow.

Certifications (Optional but Preferred)

• Certified Kubernetes Application Developer (CKAD) or equivalent Linux Foundation
• certification
• Any beginner-level certifications in DevOps or cloud services are a plus. 
• Any AWS Certification

Why Join Aivar?

At Aivar, we are re-imagining analytics consulting by integrating AI and machine learning to create repeatable solutions that deliver measurable business outcomes. With a culture centered on innovation, collaboration, and growth, we provide opportunities to work on transformative projects across industries.

About Diversity and Inclusion

We believe diversity drives innovation and growth. Our inclusive environment encourages individuals of all backgrounds to contribute their unique perspectives to shape the future and analytics.

• Candidate should be able to write the sample programs using the Tools (Bash, PowerShell, Python or Shell scripting)
• Analytical/logical reasoning
• GitHub Actions
• Should have good working experience with GitHub Actions
• Repository/Workflow Dispatch, writing reusable workflows, etc
• AZ CLI commands
• Hands-on experience with AZ CLI commands

A network of the world's best developers - full-time, long-term remote software jobs with better compensation and career growth.  We enable our clients to accelerate their Cloud Offering, and Capitalize on Cloud.  We have our own IOT/AI platform and we provide professional services on that platform to build custom clouds for their IOT devices.  We also build mobile apps, run 24x7 devops/site reliability engineering for our clients.

This person MUST have:

• B.E Computer Science or equivalent
• 2+ Years of hands-on experience troubleshooting/setting up of the Linux environment, who can write shell scripts for any given requirement.
• 1+ Years of hands-on experience setting up/configuring AWS or GCP services from SCRATCH and maintaining them.
• 1+ Years of hands-on experience setting up/configuring Kubernetes & EKS and ensuring high availability of container orchestration.
• 1+ Years of hands-on experience setting up CICD from SCRATCH in Jenkins & Gitlab.
• Experience configuring/maintaining one monitoring tool.
• Excellent verbal & written communication skills.
• Candidates with certifications - AWS, GCP, CKA, etc will be preferred
• Hands-on experience with databases (Cassandra, MongoDB, MySQL, RDS).

Experience:

• Min 3 years of experience as SRE automation engineer building, running, and maintaining production sites. Not looking for candidates who have experience only as L1/L2 or Build & Deploy..

Location:

• Remotely, anywhere in India

Timings:

• The person is expected to deliver with both high speed and high quality as well as work for 40 Hours per week (~6.5 hours per day, 6 days per week) in shifts which will rotate every month.

Position:

• Full time/Direct
• We have great benefits such as PF, medical insurance, 12 annual company holidays, 12 PTO leaves per year, annual increments, Diwali bonus, spot bonuses and other incentives etc.
• We dont believe in locking in people with large notice periods.  You will stay here because you love the company.  We have only a 15 days notice period.

• Development and maintenance of Continuous Integration System on JENKINS.
• Build management for the planned major/minor releases
• Release process management and maintenance
• Enhancement and development of build/release system features.
  
  

Required Qualifications:

• 2 - 3 years relevant work experience in Jenkins / Scripting / C / Linux
• Expertise in scripting languages like a shell, python, etc
• Work experience in handling Make/CMake build systems
• Expertise in GIT source revision control
• Experience with Yocto build systems and recipes

• 3-6 years of relevant work experience in a DevOps role.
• Deep understanding of Amazon Web Services or equivalent cloud platforms.
• Proven record of infra automation and programming skills in any of these languages - Python, Ruby, Perl, Javascript.
• Implement DevOps Industry best practices and the application of procedures to achieve a continuously deployable system
• Continuously improve and increase the capabilities of the CI/CD pipeline
• Support engineering teams in the implementation of life-cycle infrastructure solutions and documentation operations in order to meet the engineering departments quality and standards
• Participate in production outages and handle complex issues and works towards resolution