Senior AWS Devops Engineer

ROLE & RESPONSIBILITIES:

We are hiring a Senior DevSecOps / Security Engineer with 8+ years of experience securing AWS cloud, on-prem infrastructure, DevOps platforms, MLOps environments, CI/CD pipelines, container orchestration, and data/ML platforms. This role is responsible for creating and maintaining a unified security posture across all systems used by DevOps and MLOps teams — including AWS, Kubernetes, EMR, MWAA, Spark, Docker, GitOps, observability tools, and network infrastructure.

KEY RESPONSIBILITIES:

1.     Cloud Security (AWS)-

• Secure all AWS resources consumed by DevOps/MLOps/Data Science: EC2, EKS, ECS, EMR, MWAA, S3, RDS, Redshift, Lambda, CloudFront, Glue, Athena, Kinesis, Transit Gateway, VPC Peering.
• Implement IAM least privilege, SCPs, KMS, Secrets Manager, SSO & identity governance.
• Configure AWS-native security: WAF, Shield, GuardDuty, Inspector, Macie, CloudTrail, Config, Security Hub.
• Harden VPC architecture, subnets, routing, SG/NACLs, multi-account environments.
• Ensure encryption of data at rest/in transit across all cloud services.

2.     DevOps Security (IaC, CI/CD, Kubernetes, Linux)-

Infrastructure as Code & Automation Security:

• Secure Terraform, CloudFormation, Ansible with policy-as-code (OPA, Checkov, tfsec).
• Enforce misconfiguration scanning and automated remediation.

CI/CD Security:

• Secure Jenkins, GitHub, GitLab pipelines with SAST, DAST, SCA, secrets scanning, image scanning.
• Implement secure build, artifact signing, and deployment workflows.

Containers & Kubernetes:

• Harden Docker images, private registries, runtime policies.
• Enforce EKS security: RBAC, IRSA, PSP/PSS, network policies, runtime monitoring.
• Apply CIS Benchmarks for Kubernetes and Linux.

Monitoring & Reliability:

• Secure observability stack: Grafana, CloudWatch, logging, alerting, anomaly detection.
• Ensure audit logging across cloud/platform layers.

3.     MLOps Security (Airflow, EMR, Spark, Data Platforms, ML Pipelines)-

Pipeline & Workflow Security:

• Secure Airflow/MWAA connections, secrets, DAGs, execution environments.
• Harden EMR, Spark jobs, Glue jobs, IAM roles, S3 buckets, encryption, and access policies.

ML Platform Security:

• Secure Jupyter/JupyterHub environments, containerized ML workspaces, and experiment tracking systems.
• Control model access, artifact protection, model registry security, and ML metadata integrity.

Data Security:

• Secure ETL/ML data flows across S3, Redshift, RDS, Glue, Kinesis.
• Enforce data versioning security, lineage tracking, PII protection, and access governance.

ML Observability:

• Implement drift detection (data drift/model drift), feature monitoring, audit logging.
• Integrate ML monitoring with Grafana/Prometheus/CloudWatch.

4.     Network & Endpoint Security-

• Manage firewall policies, VPN, IDS/IPS, endpoint protection, secure LAN/WAN, Zero Trust principles.
• Conduct vulnerability assessments, penetration test coordination, and network segmentation.
• Secure remote workforce connectivity and internal office networks.

5.     Threat Detection, Incident Response & Compliance-

• Centralize log management (CloudWatch, OpenSearch/ELK, SIEM).
• Build security alerts, automated threat detection, and incident workflows.
• Lead incident containment, forensics, RCA, and remediation.
• Ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA (as applicable).
• Maintain security policies, procedures, RRPs (Runbooks), and audits.

IDEAL CANDIDATE:

• 8+ years in DevSecOps, Cloud Security, Platform Security, or equivalent.
• Proven ability securing AWS cloud ecosystems (IAM, EKS, EMR, MWAA, VPC, WAF, GuardDuty, KMS, Inspector, Macie).
• Strong hands-on experience with Docker, Kubernetes (EKS), CI/CD tools, and Infrastructure-as-Code.
• Experience securing ML platforms, data pipelines, and MLOps systems (Airflow/MWAA, Spark/EMR).
• Strong Linux security (CIS hardening, auditing, intrusion detection).
• Proficiency in Python, Bash, and automation/scripting.
• Excellent knowledge of SIEM, observability, threat detection, monitoring systems.
• Understanding of microservices, API security, serverless security.
• Strong understanding of vulnerability management, penetration testing practices, and remediation plans.

EDUCATION:

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications (AWS Security Specialty, CISSP, CEH, CKA/CKS) are a plus.

PERKS, BENEFITS AND WORK CULTURE:

• Competitive Salary Package
• Generous Leave Policy
• Flexible Working Hours
• Performance-Based Bonuses
• Health Care Benefits

●              Work with application development teams to identify and understand their operational pain points.

●              Document these challenges and define goals to be achieved by the infrastructure team.

●              Prototype and evaluate multiple solutions, often by experimenting with various vendors and tools available, to achieve the goals undertaken.

●              Rollout tools and processes with heavy focus on automation.

●              Evangelize and help onboard application development teams on the platforms provided by the infrastructure team.

●              Co-own the responsibility with application development teams to ensure the reliability of services.

●              Design and implement solutions around observability to ensure ease of maintenance and quick debugging of services

●              Establish and implement administrative and operational best practices in the application development teams.

●              Find avenues to reduce infrastructure costs and drive optimization in all services.

●              5+ years of experience as a DevOps / Infrastructure engineer with cloud platforms (preferably AWS)

●              Experience with git, CI / CD, Docker, etc

●              Experience in working with infrastructure as code (Terraform, etc).

●              Strong Linux Shell scripting experience

●              Experience with one of the programming languages like Python, Java, Kotlin, etc.

Key Skills Required:

·         You will be part of the DevOps engineering team, configuring project environments, troubleshooting integration issues in different systems also be involved in building new features for next generation of cloud recovery services and managed services. 

·         You will directly guide the technical strategy for our clients and build out a new capability within the company for DevOps to improve our business relevance for customers. 

·         You will be coordinating with Cloud and Data team for their requirements and verify the configurations required for each production server and come with Scalable solutions.

·         You will be responsible to review infrastructure and configuration of micro services and packaging and deployment of application

To be the right fit, you'll need:

·         Expert in Cloud Services like AWS.

·         Experience in Terraform Scripting.

·         Experience in container technology like Docker and orchestration like Kubernetes.

·         Good knowledge of frameworks such as Jenkins, CI/CD pipeline, Bamboo Etc.

·         Experience with various version control system like GIT, build tools (Mavan, ANT, Gradle ) and cloud automation tools (Chef, Puppet, Ansible)

Please find the JD below: 

• Candidate should have good Platform experience on Azure with Terraform. 
• The devops engineer needs to help developers, create the Pipelines and K8s Deployment Manifests. 
• Good to have experience on migrating data from (AWS) to Azure. 

• To manage/automate infrastructure automatically using Terraforms. Jenkins is the key CI/CD tool which we uses and it will be used to run these Terraforms. 
• VMs to be provisioned on Azure Cloud and managed. 
• Good hands-on experience of Networking on Cloud is required. 
• Ability to setup Database on VM as well as managed DB and Proper set up of cloud hosted microservices needs to be done to communicate with the db services. 
• Kubernetes, Storage, KeyValult, Networking (load balancing and routing) and VMs are the key infrastructure expertise which are essential. 

• Requirement is to administer Kubernetes cluster end to end. (Application deployment, managing namespaces, load balancing, policy setup, using blue green/canary deployment models etc). 
• The experience in AWS is desirable. 
• Python experience is optional however Power shell is mandatory. 
• Know-how on the use of GitHub 
• Administration of Azure Kubernetes services 

Responsibilities

● Be a hands-on engineer, ensure frameworks/infrastructure built is well designed,

scalable & are of high quality.

● Build and/or operate platforms that are highly available, elastic, scalable, operable and

observable.

● Build/Adapt and implement tools that empower the TI AI engineering teams to

self-manage the infrastructure and services owned by them.

● You will identify, articulate, and lead various long-term tech vision, strategies,

cross-cutting initiatives and architecture redesigns.

● Design systems and make decisions that will keep pace with the rapid growth of TI AI.

● Document your work and decision-making processes, and lead presentations and

discussions in a way that is easy for others to understand.

● Available for on-call during emergencies to handle and resolve problems in a quick and

efficient manner.

Requirements

● 2+ years of Hands-on experience as a DevOps / Infrastructure engineer with AWS and

Kubernetes or similar infrastructure platforms. (preferably AWS)

● Hands-on with DevOps principles and practices ( Everything-as-a-code, CI/CD, Test

everything, proactive monitoring etc).

● Experience in building and operating distributed systems.

● Understanding of operating systems, virtualization, containerization and networks

preferable

● Hands-on coding on any of the languages like Python or GoLang.

● Familiarity with software engineering practices including unit testing, code reviews, and

design documentation.

● Strong debugging and problem-solving skills Curiosity about how things work and love to

share that knowledge with others.

Benefits :

● Work with a world class team working on a very forward looking problem

● Competitive Pay

● Flat hierarchy

● Health insurance for the family

• Ensure reliable operation of CI/CD pipelines
• Orchestrate the provisioning, load balancing, configuration, monitoring and billing of resources in the cloud environment in a highly automated manner
• Logging, metrics and alerting management.
• Creation of Bash/Python scripts for automation
• Performing root cause analysis for production errors.

• 2 years experience as Team Lead.
• Good Command on kubernetes.
• Proficient in Linux Commands line and troubleshooting.
• Proficient in AWS Services. Deployment, Monitoring and troubleshooting applications in AWS.
• Hands-on experience with CI tooling preferably with Jenkins.
• Proficient in deployment using Ansible.
• Knowledge of infrastructure management tools (Infrastructure as cloud) such as terraform, AWS cloud formation etc.
• Proficient in deployment of applications behind load balancers and proxy servers such as nginx, apache.
• Scripting languages: Bash, Python, Groovy.
• Experience with Logging, Monitoring, and Alerting tools like ELK(Elastic-search, Logstash, Kibana), Nagios. Graylog, splunk Prometheus, Grafana is a plus.

Responsibilities

- Building and maintenance of resilient and scalable production infrastructure 

- Improvement of monitoring systems

- Creation and support of development automation processes (CI / CD)

- Participation in infrastructure development 

- Detection of problems in architecture and proposing of solutions for solving them 

- Creation of tasks for system improvements for system scalability, performance and monitoring

- Analysis of product requirements in the aspect of devops 

- Managing a team of DevOps, control of task deliveries 

- Incident analysis and fixing 

Technology stack

Linux, Bash, Salt/Ansible, LXC, libvirt, IPsec, VXLAN, Open vSwitch, OpenVPN, OSPF, BIRD, Cisco NX-OS, Multicast, PIM, LVM, software RAID, LUKS, PostgreSQL, nginx, haproxy, Prometheus, Grafana, Zabbix, GitLab, Capistrano

Skills and Experience

- Understanding of the distributed systems principles 

- Understanding of principles for building a resistant network infrastructure 

- Experience of Ubuntu Linux administration (Debian-like will be a plus)

- Strong knowledge of Bash

- Experience of working with LXC-containers 

- Understanding and experience with infrastructure as a code approach 

- Experience of development idempotent Ansible roles

- Experience with relational databases (PostgeSQL), ability to create simple SQL queries 

- Experience with git

- Experience with monitoring and metric collect systems (Prometheus, Grafana, Zabbix)

- Understanding of dynamic routing (OSPF)  

Preferred experience

- Experience of working with highload zero-downtown environments 

- Experience of coding on Python

- Experience of working with IPsec, VXLAN, Open vSwitch

- Knowledge and experience of working with network equipment Cisco

- Experience of working with Cisco NX-OS

- Knowledge of principles of multicast protocols IGMP, PIM

- Experience of setting multicast on Cisco equipment

- Experience of working with Solarflare Onload

- Experience administering Atlassian products