DevOps Engineer

Role & Responsibilities

Responsibilities:

• Infrastructure at Scale
• Design and evolve our cloud-native infrastructure (AWS/Kubernetes), ensuring availability, performance, and cost efficiency across regions and products.
• Platform & Developer Experience
• Build internal tools and platforms that help engineers deploy, monitor, and scale their services independently — with minimal friction and maximum confidence.
• CI/CD & Release Automation
• Architect secure, fast, and scalable CI/CD pipelines across multiple environments using tools like GitHub Actions, and Jenkins.
• Reliability Engineering
• Champion observability, SLOs, and incident response practices. Drive a culture of proactive performance monitoring and resilient system design.
• Security & Governance
• Integrate DevSecOps practices — from policy-as-code and automated audits to secure secrets management and vulnerability scanning.
• Mentorship & Thought Leadership
• Guide and mentor DevOps and SRE engineers. Partner closely with platform developers on infrastructure strategy, deployment patterns, and production readiness.

Ideal Candidate

• Strong Principal DevOps Engineer Profile
• Mandatory (Experience 1): Must have 10+ years in DevOps / SRE / Infrastructure roles with hands-on experience (clear scale signals like traffic, uptime, latency, infra size should be mentioned) in B2B SAAS companies
• Mandatory (Experience 2): Must have worked in Principal / Staff / Lead DevOps / SRE / Platform Engineer role and demonstrated org-level ownership - setting infra roadmap, defining DevOps charter, or structuring the platform function not just domain-level technical ownership
• Mandatory (Experience 3): Must show evidence of strategic authorship, defined multi-year infra/platform strategy, drove company-wide architectural shifts as an initiator (not implementer), or directly interfaced with VP Eng / CTO / product leadership on infra direction
• Mandatory (Experience 4): Must have B2B SaaS company experience with multi-tenant architecture OR multiple production stacks (multi-env / multi-client systems)
• Mandatory (Tech Skills 1 - Cloud & Infra): AWS (VPC, EKS, EC2, RDS, networking), Kubernetes (EKS) at scale, Designing high availability, multi-region systems
• Mandatory (Tech Skills 2 - Automation & IaC): Terraform (must-have), Helm / GitOps, Strong scripting (Python / Go / Bash)
• Mandatory (Tech Skills 4 - Reliability & Observability): SRE principles (SLOs, SLIs, error budgets), Monitoring tools (Prometheus, Grafana, Datadog), Alerting, on-call, incident management
• Mandatory (Leadership): Must demonstrate leadership experience in an individual contributor capacity having mentored senior engineers, driven cross-team technical alignment, or anchored org-wide initiatives without having moved into a people management or engineering manager role
• Mandatory (Company): Strong B2B SaaS product companies only
• Preferred (Education): B.Tech in Computer Science or related fields

ROLE & RESPONSIBILITIES:

We are hiring a Senior DevSecOps / Security Engineer with 8+ years of experience securing AWS cloud, on-prem infrastructure, DevOps platforms, MLOps environments, CI/CD pipelines, container orchestration, and data/ML platforms. This role is responsible for creating and maintaining a unified security posture across all systems used by DevOps and MLOps teams — including AWS, Kubernetes, EMR, MWAA, Spark, Docker, GitOps, observability tools, and network infrastructure.

KEY RESPONSIBILITIES:

1.     Cloud Security (AWS)-

• Secure all AWS resources consumed by DevOps/MLOps/Data Science: EC2, EKS, ECS, EMR, MWAA, S3, RDS, Redshift, Lambda, CloudFront, Glue, Athena, Kinesis, Transit Gateway, VPC Peering.
• Implement IAM least privilege, SCPs, KMS, Secrets Manager, SSO & identity governance.
• Configure AWS-native security: WAF, Shield, GuardDuty, Inspector, Macie, CloudTrail, Config, Security Hub.
• Harden VPC architecture, subnets, routing, SG/NACLs, multi-account environments.
• Ensure encryption of data at rest/in transit across all cloud services.

2.     DevOps Security (IaC, CI/CD, Kubernetes, Linux)-

Infrastructure as Code & Automation Security:

• Secure Terraform, CloudFormation, Ansible with policy-as-code (OPA, Checkov, tfsec).
• Enforce misconfiguration scanning and automated remediation.

CI/CD Security:

• Secure Jenkins, GitHub, GitLab pipelines with SAST, DAST, SCA, secrets scanning, image scanning.
• Implement secure build, artifact signing, and deployment workflows.

Containers & Kubernetes:

• Harden Docker images, private registries, runtime policies.
• Enforce EKS security: RBAC, IRSA, PSP/PSS, network policies, runtime monitoring.
• Apply CIS Benchmarks for Kubernetes and Linux.

Monitoring & Reliability:

• Secure observability stack: Grafana, CloudWatch, logging, alerting, anomaly detection.
• Ensure audit logging across cloud/platform layers.

3.     MLOps Security (Airflow, EMR, Spark, Data Platforms, ML Pipelines)-

Pipeline & Workflow Security:

• Secure Airflow/MWAA connections, secrets, DAGs, execution environments.
• Harden EMR, Spark jobs, Glue jobs, IAM roles, S3 buckets, encryption, and access policies.

ML Platform Security:

• Secure Jupyter/JupyterHub environments, containerized ML workspaces, and experiment tracking systems.
• Control model access, artifact protection, model registry security, and ML metadata integrity.

Data Security:

• Secure ETL/ML data flows across S3, Redshift, RDS, Glue, Kinesis.
• Enforce data versioning security, lineage tracking, PII protection, and access governance.

ML Observability:

• Implement drift detection (data drift/model drift), feature monitoring, audit logging.
• Integrate ML monitoring with Grafana/Prometheus/CloudWatch.

4.     Network & Endpoint Security-

• Manage firewall policies, VPN, IDS/IPS, endpoint protection, secure LAN/WAN, Zero Trust principles.
• Conduct vulnerability assessments, penetration test coordination, and network segmentation.
• Secure remote workforce connectivity and internal office networks.

5.     Threat Detection, Incident Response & Compliance-

• Centralize log management (CloudWatch, OpenSearch/ELK, SIEM).
• Build security alerts, automated threat detection, and incident workflows.
• Lead incident containment, forensics, RCA, and remediation.
• Ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA (as applicable).
• Maintain security policies, procedures, RRPs (Runbooks), and audits.

IDEAL CANDIDATE:

• 8+ years in DevSecOps, Cloud Security, Platform Security, or equivalent.
• Proven ability securing AWS cloud ecosystems (IAM, EKS, EMR, MWAA, VPC, WAF, GuardDuty, KMS, Inspector, Macie).
• Strong hands-on experience with Docker, Kubernetes (EKS), CI/CD tools, and Infrastructure-as-Code.
• Experience securing ML platforms, data pipelines, and MLOps systems (Airflow/MWAA, Spark/EMR).
• Strong Linux security (CIS hardening, auditing, intrusion detection).
• Proficiency in Python, Bash, and automation/scripting.
• Excellent knowledge of SIEM, observability, threat detection, monitoring systems.
• Understanding of microservices, API security, serverless security.
• Strong understanding of vulnerability management, penetration testing practices, and remediation plans.

EDUCATION:

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications (AWS Security Specialty, CISSP, CEH, CKA/CKS) are a plus.

PERKS, BENEFITS AND WORK CULTURE:

• Competitive Salary Package
• Generous Leave Policy
• Flexible Working Hours
• Performance-Based Bonuses
• Health Care Benefits

REVIEW CRITERIA:

MANDATORY:

• Strong Hands-On AWS Cloud Engineering / DevOps Profile
• Mandatory (Experience 1): Must have 12+ years of experience in AWS Cloud Engineering / Cloud Operations / Application Support
• Mandatory (Experience 2): Must have strong hands-on experience supporting AWS production environments (EC2, VPC, IAM, S3, ALB, CloudWatch)
• Mandatory (Infrastructure as a code): Must have hands-on Infrastructure as Code experience using Terraform in production environments
• Mandatory (AWS Networking): Strong understanding of AWS networking and connectivity (VPC design, routing, NAT, load balancers, hybrid connectivity basics)
• Mandatory (Cost Optimization): Exposure to cost optimization and usage tracking in AWS environments
• Mandatory (Core Skills): Experience handling monitoring, alerts, incident management, and root cause analysis
• Mandatory (Soft Skills): Strong communication skills and stakeholder coordination skills

ROLE & RESPONSIBILITIES:

We are looking for a hands-on AWS Cloud Engineer to support day-to-day cloud operations, automation, and reliability of AWS environments. This role works closely with the Cloud Operations Lead, DevOps, Security, and Application teams to ensure stable, secure, and cost-effective cloud platforms.

KEY RESPONSIBILITIES:

• Operate and support AWS production environments across multiple accounts
• Manage infrastructure using Terraform and support CI/CD pipelines
• Support Amazon EKS clusters, upgrades, scaling, and troubleshooting
• Build and manage Docker images and push to Amazon ECR
• Monitor systems using CloudWatch and third-party tools; respond to incidents
• Support AWS networking (VPCs, NAT, Transit Gateway, VPN/DX)
• Assist with cost optimization, tagging, and governance standards
• Automate operational tasks using Python, Lambda, and Systems Manager

IDEAL CANDIDATE:

• Strong hands-on AWS experience (EC2, VPC, IAM, S3, ALB, CloudWatch)
• Experience with Terraform and Git-based workflows
• Hands-on experience with Kubernetes / EKS
• Experience with CI/CD tools (GitHub Actions, Jenkins, etc.)
• Scripting experience in Python or Bash
• Understanding of monitoring, incident management, and cloud security basics

NICE TO HAVE:

• AWS Associate-level certifications
• Experience with Karpenter, Prometheus, New Relic
• Exposure to FinOps and cost optimization practices

Objectives of this role

•Building and implementing new development tools and infrastructure

•Understanding the needs of stakeholders and conveying them to developers

•Working on ways to automate and improve development and release processes

•Testing and examining code written by others and analysing results

•Ensuring that systems are safe and secure against cybersecurity threats

•Identifying technical problems and developing software updates and fixes

•Working with software developers and software engineers to ensure that development follows established processes and works as intended

•Planning projects and being involved in project management decisions

Responsibilities:

• Set up CI/CD pipelines for automated deployment and delivery

•Setup and management of new and Existing cloud-based Kubernetes cluster services

•Write Ad/Hoc Bash/Python scripts to automate certain operational tasks.

•Designing, maintenance and management of tools for automation of different operational processes.

•Provision of critical system security by leveraging best practices and prolific cloud security solutions.

•System troubleshooting and problem resolution across various application domains and platforms

•Support/maintain development, UAT and production infrastructure.

•Providing recommendations for architecture and process improvements.

•Respond to L2 calls and emails.

•Help administer monitoring systems, alerting, log management, and other IT infrastructure systems.

•Perform root cause analysis of production errors and resolve technical issues

•Design procedures for system troubleshooting and maintenance

Technical Skill Requirements:

•Experience in a DevOps role in AWS/OCI cloud environment.

•Must have experience with CI/CD Pipelines and hands-on experience with DevOps tools such as, Jenkins, Git, Docker, Kubernetes, Ansible, etc.

•Strong knowledge in Terraform for multi-stack cloud infrastructure provisioning.

•Strong knowledge in OCI/AWS-based Kubernetes service management.

•Must have experience with Python/Bash as a scripting language.

•Good knowledge in software debugging, web applications and services (Apache, Nginx, HAProxy)

•Must have knowledge in monitoring setup with Prometheus, Alertmanager, Grafana, Thanos, Loki, Fluentbit, etc.

Good To Have Skills

•PostgreSQL, MySQL, MongoDB, Redis, Keycloak.

•Migrating application from one cloud to another; OCI certifications

•Test Driven Development

Soft Skill Requirements:

•Able to learn new skills and technology quickly.

•Energetic with amazing customer service skills and a team-oriented approach.

•Strong verbal and written communication skills

Challenging opportunity to Improve and manage a complicated AWS Infrastructure built for ECG wearable, for live ecg streaming and monitoring Patients

The AWS Cloud/Devops Engineer will be working with the engineering team and focusing on AWS infrastructure and automation.  A key part of the role is championing and leading infrastructure as code.  The Engineer will work closely with the Manager of Operations and Devops to build, manage and automate our AWS infrastructure. 

Duties & Responsibilities:

• Design cloud infrastructure that is secure, scalable, and highly available on AWS
• Work collaboratively with software engineering to define infrastructure and deployment requirements
• Provision, configure and maintain AWS cloud infrastructure defined as code
• Ensure configuration and compliance with configuration management tools
• Administer and troubleshoot Linux based systems
• Troubleshoot problems across a wide array of services and functional areas
• Build and maintain operational tools for deployment, monitoring, and analysis of AWS infrastructure and systems
• Perform infrastructure cost analysis and optimization

Qualifications:

• At least 1-5 years of experience building and maintaining AWS infrastructure (VPC, EC2, Security Groups, IAM, ECS, CodeDeploy, CloudFront, S3)
• Strong understanding of how to secure AWS environments and meet compliance requirements
• Expertise using Chef for configuration management
• Hands-on experience deploying and managing infrastructure with Terraform
• Solid foundation of networking and Linux administration
• Experience with CI-CD, Docker, GitLab, Jenkins, ELK and deploying applications on AWS
• Ability to learn/use a wide variety of open source technologies and tools
• Strong bias for action and ownership

1. GCP Cloud experience mandatory
2. CICD - Azure DevOps
3. IaC tools – Terraform
4. Experience with IAM / Access Management within cloud
5. Networking / Firewalls
6. Kubernetes / Helm / Istio