EKS & Splunk SaaS - Engineer II

ROLE & RESPONSIBILITIES:

We are hiring a Senior DevSecOps / Security Engineer with 8+ years of experience securing AWS cloud, on-prem infrastructure, DevOps platforms, MLOps environments, CI/CD pipelines, container orchestration, and data/ML platforms. This role is responsible for creating and maintaining a unified security posture across all systems used by DevOps and MLOps teams — including AWS, Kubernetes, EMR, MWAA, Spark, Docker, GitOps, observability tools, and network infrastructure.

KEY RESPONSIBILITIES:

1.     Cloud Security (AWS)-

• Secure all AWS resources consumed by DevOps/MLOps/Data Science: EC2, EKS, ECS, EMR, MWAA, S3, RDS, Redshift, Lambda, CloudFront, Glue, Athena, Kinesis, Transit Gateway, VPC Peering.
• Implement IAM least privilege, SCPs, KMS, Secrets Manager, SSO & identity governance.
• Configure AWS-native security: WAF, Shield, GuardDuty, Inspector, Macie, CloudTrail, Config, Security Hub.
• Harden VPC architecture, subnets, routing, SG/NACLs, multi-account environments.
• Ensure encryption of data at rest/in transit across all cloud services.

2.     DevOps Security (IaC, CI/CD, Kubernetes, Linux)-

Infrastructure as Code & Automation Security:

• Secure Terraform, CloudFormation, Ansible with policy-as-code (OPA, Checkov, tfsec).
• Enforce misconfiguration scanning and automated remediation.

CI/CD Security:

• Secure Jenkins, GitHub, GitLab pipelines with SAST, DAST, SCA, secrets scanning, image scanning.
• Implement secure build, artifact signing, and deployment workflows.

Containers & Kubernetes:

• Harden Docker images, private registries, runtime policies.
• Enforce EKS security: RBAC, IRSA, PSP/PSS, network policies, runtime monitoring.
• Apply CIS Benchmarks for Kubernetes and Linux.

Monitoring & Reliability:

• Secure observability stack: Grafana, CloudWatch, logging, alerting, anomaly detection.
• Ensure audit logging across cloud/platform layers.

3.     MLOps Security (Airflow, EMR, Spark, Data Platforms, ML Pipelines)-

Pipeline & Workflow Security:

• Secure Airflow/MWAA connections, secrets, DAGs, execution environments.
• Harden EMR, Spark jobs, Glue jobs, IAM roles, S3 buckets, encryption, and access policies.

ML Platform Security:

• Secure Jupyter/JupyterHub environments, containerized ML workspaces, and experiment tracking systems.
• Control model access, artifact protection, model registry security, and ML metadata integrity.

Data Security:

• Secure ETL/ML data flows across S3, Redshift, RDS, Glue, Kinesis.
• Enforce data versioning security, lineage tracking, PII protection, and access governance.

ML Observability:

• Implement drift detection (data drift/model drift), feature monitoring, audit logging.
• Integrate ML monitoring with Grafana/Prometheus/CloudWatch.

4.     Network & Endpoint Security-

• Manage firewall policies, VPN, IDS/IPS, endpoint protection, secure LAN/WAN, Zero Trust principles.
• Conduct vulnerability assessments, penetration test coordination, and network segmentation.
• Secure remote workforce connectivity and internal office networks.

5.     Threat Detection, Incident Response & Compliance-

• Centralize log management (CloudWatch, OpenSearch/ELK, SIEM).
• Build security alerts, automated threat detection, and incident workflows.
• Lead incident containment, forensics, RCA, and remediation.
• Ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA (as applicable).
• Maintain security policies, procedures, RRPs (Runbooks), and audits.

IDEAL CANDIDATE:

• 8+ years in DevSecOps, Cloud Security, Platform Security, or equivalent.
• Proven ability securing AWS cloud ecosystems (IAM, EKS, EMR, MWAA, VPC, WAF, GuardDuty, KMS, Inspector, Macie).
• Strong hands-on experience with Docker, Kubernetes (EKS), CI/CD tools, and Infrastructure-as-Code.
• Experience securing ML platforms, data pipelines, and MLOps systems (Airflow/MWAA, Spark/EMR).
• Strong Linux security (CIS hardening, auditing, intrusion detection).
• Proficiency in Python, Bash, and automation/scripting.
• Excellent knowledge of SIEM, observability, threat detection, monitoring systems.
• Understanding of microservices, API security, serverless security.
• Strong understanding of vulnerability management, penetration testing practices, and remediation plans.

EDUCATION:

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications (AWS Security Specialty, CISSP, CEH, CKA/CKS) are a plus.

PERKS, BENEFITS AND WORK CULTURE:

• Competitive Salary Package
• Generous Leave Policy
• Flexible Working Hours
• Performance-Based Bonuses
• Health Care Benefits

Azure DevOps engineer should have a deep understanding of container principles and hands-on experience with Docker. 

They should also be able to set-up and manage clusters using Azure Kubernetes Service (AKS). Additionally, understanding of API management, Azure Key-Vaults, ACR, networking concepts like virtual networks, subnets, NSG, route tables. Awareness of any one of the software like Apigee, Kong, or APIM in Azure is a must. Strong experience with IaC technologies like Terraform, ARM/ Bicep Templates, GitHub Pipelines, Sonar etc.

• Designing DevOps strategies: Recommending strategies for migrating and consolidating DevOps tools, designing an Agile work management approach, and creating a secure development process
• Implementing DevOps development processes: Designing version control strategies, integrating source control, and managing build infrastructure
• Managing application configuration and secrets: Ensuring system and infrastructure availability, stability, scalability, and performance
• Automating processes: Overseeing code releases and deployments with an emphasis on continuous integration and delivery
• Collaborating with teams: Working with architect and developers to ensure smooth code integration and collaborating with development and operations teams to define pipelines.
• Documentation: Producing detailed Development Architecture design, setting up the DevOps tools and working together with the CI/CD specialist in integrating the automated CI and CD pipelines with those tools
• Ensuring security and compliance/DevSecOps: Managing code quality and security policies
• Troubleshooting issues: Investigating issues and responding to customer queries
• Core Skills: Azure DevOps engineer should have a deep understanding of container principles and hands-on experience with Docker. They should also be able to set-up and manage clusters using Azure Kubernetes Service (AKS). Additionally, understanding of API management, Azure Key-Vaults, ACR, networking concepts like virtual networks, subnets, NSG, route tables. Awareness of any one of the software like Apigee, Kong, or APIM in Azure is a must. Strong experience with IaC technologies like Terraform, ARM/ Bicep Templates, GitHub Pipelines, Sonar,
• Additional Skills: Self-starter and ability to execute tasks on time, Excellent communication skills, ability to come up with multiple solutions for problems, interact with client-side experts to resolve issues by providing correct pointers, excellent debugging skills, ability to breakdown tasks into smaller steps.

Key Responsibilities

• As a part of the DevOps team, you will be responsible for the configuration, optimization, documentation, and support of the CI/CD components.

• Creating and managing build and release pipelines with Azure DevOps and Jenkins.

• Assist in planning and reviewing application architecture and design to promote an efficient deployment process.

• Troubleshoot server performance issues & handle the continuous integration system.

• Automate infrastructure provisioning using ARM Templates and Terraform.

• Monitor and Support deployment, Cloud-based and On-premises Infrastructure.

• Diagnose and develop root-cause solutions for failures and performance issues in the production environment.

• Deploy and manage Infrastructure for production applications

• Configure security best practices for application and infrastructure

Essential Requirements

• Good hands-on experience with cloud platforms like Azure, AWS & GCP. (Preferably Azure)

• Strong knowledge of CI/CD principles.

• Strong work experience with CI/CD implementation tools like Azure DevOps, Team City, Octopus Deploy, AWS Code Deploy, and Jenkins.

• Experience of writing automation scripts with PowerShell, Bash, Python, etc.

• GitHub, JIRA, Confluence, and Continuous Integration (CI) system.

• Understanding of secure DevOps practices

Good to Have -

•Knowledge of scripting languages such as PowerShell, Bash

• Experience with project management and workflow tools such as Agile, Jira, Scrum/Kanban, etc.

• Experience with Build technologies and cloud services. (Jenkins, TeamCity, Azure DevOps, Bamboo, AWS Code Deploy)

• Strong communication skills and ability to explain protocol and processes with team and management.

• Must be able to handle multiple tasks and adapt to a constantly changing environment.

• Must have a good understanding of SDLC.

• Knowledge of Linux, Windows server, Monitoring tools, and Shell scripting.

• Self-motivated; demonstrating the ability to achieve in technologies with minimal supervision.

• Organized, flexible, and analytical ability to solve problems creatively

We are looking for a DevOps Engineer (individual contributor) to maintain and build upon our next-generation infrastructure. We aim to ensure that our systems are secure, reliable and high-performing by constantly striving to achieve best-in-class infrastructure and security by:

• Leveraging a variety of tools to ensure all configuration is codified (using tools like Terraform and Flux) and applied in a secure, repeatable way (via CI)
• Routinely identifying new technologies and processes that enable us to streamline our operations and improve overall security
• Holistically monitoring our overall DevOps setup and health to ensure our roadmap constantly delivers high-impact improvements
• Eliminating toil by automating as many operational aspects of our day-to-day work as possible using internally created, third party and/or open-source tools
• Maintain a culture of empowerment and self-service by minimizing friction for developers to understand and use our infrastructure through a combination of innovative tools, excellent documentation and teamwork

Tech stack: Microservices primarily written in JavaScript, Kotlin, Scala, and Python. The majority of our infrastructure sits within EKS on AWS, using Istio. We use Terraform and Helm/Flux when working with AWS and EKS (k8s). Deployments are managed with a combination of Jenkins and Flux. We rely heavily on Kafka, Cassandra, Mongo and Postgres and are increasingly leveraging AWS-managed services (e.g. RDS, lambda).

We are looking for an experienced DevOps (Development and Operations) professional to join our growing organization. In this position, you will be responsible for finding and reporting bugs in web and mobile apps & assist Sr DevOps to manage infrastructure projects and processes. Keen attention to detail, problem-solving abilities, and a solid knowledge base are essential.

As a DevOps, you will work in a Kubernetes based microservices environment. 

Experience in Microsoft Azure cloud and Kubernetes is preferred, not mandatory.

Ultimately, you will ensure that our products, applications and systems work correctly.  

Responsibilities:

• Detect and track software defects and inconsistencies
• Apply quality engineering principals throughout the Agile product lifecycle
• Handle code deployments in all environments
• Monitor metrics and develop ways to improve
• Consult with peers for feedback during testing stages
• Build, maintain, and monitor configuration standards
• Maintain day-to-day management and administration of projects
• Manage CI and CD tools with team
• Follow all best practices and procedures as established by the company
• Provide support and documentation  

Required Technical and Professional Expertise

• Minimum 2+ years if DevOps
• Have experience in SaaS infrastructure development and Web Apps
• Experience in delivering microservices at scale; designing microservices solutions
• Proven Cloud experience/delivery of applications on Azure
• Proficient in configuration Management tools such as Ansible or any of Terraform Puppet, Chef, Salt, etc
• Hands-on experience in Networking/network configuration, Application performance monitoring, Container performance, and security.
• Understanding of Kubernetes, Python along with scripting languages like bash/shell
• Good to have experience in Linux internals, Linux packaging, Release Engineering (Branching, versioning, tagging), Artifact repository, Artifactory, Nexus, and CI/CD tooling (Concourse CI, Travis, Jenkins)
• Must be a proactive person  
• You love collaborative environments that use agile methodologies to encourage creative design thinking and find innovative ways to develop with cutting edge technologies
• An ambitious individual who can work under their own direction towards agreed targets/goals and with a creative approach to work.
• An intuitive individual with an ability to manage change and proven time management
• Proven interpersonal skills while contributing to team effort by accomplishing related results as needed.

• Develop and Maintain IAC using Terraform and Ansible
• Draft design documents that translate requirements into code.
• Deal with challenges associated with scale.
• Assume responsibilities from technical design through technical client support.
• Manage expectations with internal stakeholders and context-switch in a fast paced environment.
• Thrive in an environment that uses Elasticsearch extensively.
• Keep abreast of technology and contribute to the engineering strategy.
• Champion best development practices and provide mentorship

• Terraform o Ansible
• *nix and shell scripting
• Elasticsearch
• Circle CI
• CloudFormation
• Python
• Packer
• Docker
• Prometheus and Grafana
• Challenges of scale
• Production support
• Sharp analytical and problem-solving skills.
• Strong sense of ownership.
• Demonstrable desire to learn and grow.
• Excellent written and oral communication skills.
• Mature collaboration and mentoring abilities.

As DevOps Engineer, you are responsible to setup and maintain GIT repository, DevOps tools like Jenkins, UCD, Docker, Kubernetes, Jfrog Artifactory, Cloud monitoring tools, Cloud security.

• Setup, configure, and maintain GIT repos, Jenkins, UCD, etc. for multi hosting cloud environments.
• Architect and maintain the server infrastructure in AWS. Build highly resilient infrastructure following industry best practices.
• Working on Docker images and maintaining Kubernetes clusters.
• Develop and maintain the automation scripts using Ansible or other available tools.
• Maintain and monitor cloud Kubernetes Clusters and patching when necessary.
• Working on Cloud security tools to keep applications secured.
• Participate in software development lifecycle, specifically infra design, execution, and debugging required to achieve successful implementation of integrated solutions within the portfolio.
• Required Technical and Professional Expertise.
• Minimum 4-6 years of experience in IT industry.
• Expertise in implementing and managing Devops CI/CD pipeline.
• Experience in DevOps automation tools. And Very well versed with DevOps Frameworks, Agile.
• Working knowledge of scripting using shell, Python, Terraform, Ansible or puppet or chef.
• Experience and good understanding in any of Cloud like AWS, Azure, Google cloud.
• Knowledge of Docker and Kubernetes is required.
• Proficient in troubleshooting skills with proven abilities in resolving complex technical issues.
• Experience with working with ticketing tools.
• Middleware technologies knowledge or database knowledge is desirable.
• Experience and well versed with Jira tool is a plus.

If you are looking for good opportunity in Cloud Development/Devops. Here is the right opportunity.

EXP: 4-10 YRs
Location:Pune
Job Type: Permanent
Minimum qualifications:

• Education: Bachelor-Master degree 
• Proficient in English language. 

Relevant experience:

• Should have been working for at least four years as a DevOps/Cloud Engineer 
• Should have worked on AWS Cloud Environment in depth 
• Should have been working in an Infrastructure as code environment or understands it very clearly. 
• Has done Infrastructure coding using Cloudformation/Terraform and Configuration Management using Chef/Ansibleand Enterprise Bus(RabbitMQ/Kafka) 
• Deep understanding of the microservice design and aware of centralized Caching(Redis), centralizedconfiguration(Consul/Zookeeper)
  
  

• Expertise in Infrastructure & Application design & architecture
• Expertise in AWS, OS & networking
• Having good exposure on Infra & Application security
• Expertise in Python, Shell scripting
• Proficient with Devops tools Terraform, Jenkins, Ansible, Docker, GIT
• Solid background in systems engineering and operations
• Strong in Devops methodologies and processes
• Strong in CI/CD pipeline & SDLC.