Senior DevOps Engineer -I

ROLE & RESPONSIBILITIES:

We are hiring a Senior DevSecOps / Security Engineer with 8+ years of experience securing AWS cloud, on-prem infrastructure, DevOps platforms, MLOps environments, CI/CD pipelines, container orchestration, and data/ML platforms. This role is responsible for creating and maintaining a unified security posture across all systems used by DevOps and MLOps teams — including AWS, Kubernetes, EMR, MWAA, Spark, Docker, GitOps, observability tools, and network infrastructure.

KEY RESPONSIBILITIES:

1.     Cloud Security (AWS)-

• Secure all AWS resources consumed by DevOps/MLOps/Data Science: EC2, EKS, ECS, EMR, MWAA, S3, RDS, Redshift, Lambda, CloudFront, Glue, Athena, Kinesis, Transit Gateway, VPC Peering.
• Implement IAM least privilege, SCPs, KMS, Secrets Manager, SSO & identity governance.
• Configure AWS-native security: WAF, Shield, GuardDuty, Inspector, Macie, CloudTrail, Config, Security Hub.
• Harden VPC architecture, subnets, routing, SG/NACLs, multi-account environments.
• Ensure encryption of data at rest/in transit across all cloud services.

2.     DevOps Security (IaC, CI/CD, Kubernetes, Linux)-

Infrastructure as Code & Automation Security:

• Secure Terraform, CloudFormation, Ansible with policy-as-code (OPA, Checkov, tfsec).
• Enforce misconfiguration scanning and automated remediation.

CI/CD Security:

• Secure Jenkins, GitHub, GitLab pipelines with SAST, DAST, SCA, secrets scanning, image scanning.
• Implement secure build, artifact signing, and deployment workflows.

Containers & Kubernetes:

• Harden Docker images, private registries, runtime policies.
• Enforce EKS security: RBAC, IRSA, PSP/PSS, network policies, runtime monitoring.
• Apply CIS Benchmarks for Kubernetes and Linux.

Monitoring & Reliability:

• Secure observability stack: Grafana, CloudWatch, logging, alerting, anomaly detection.
• Ensure audit logging across cloud/platform layers.

3.     MLOps Security (Airflow, EMR, Spark, Data Platforms, ML Pipelines)-

Pipeline & Workflow Security:

• Secure Airflow/MWAA connections, secrets, DAGs, execution environments.
• Harden EMR, Spark jobs, Glue jobs, IAM roles, S3 buckets, encryption, and access policies.

ML Platform Security:

• Secure Jupyter/JupyterHub environments, containerized ML workspaces, and experiment tracking systems.
• Control model access, artifact protection, model registry security, and ML metadata integrity.

Data Security:

• Secure ETL/ML data flows across S3, Redshift, RDS, Glue, Kinesis.
• Enforce data versioning security, lineage tracking, PII protection, and access governance.

ML Observability:

• Implement drift detection (data drift/model drift), feature monitoring, audit logging.
• Integrate ML monitoring with Grafana/Prometheus/CloudWatch.

4.     Network & Endpoint Security-

• Manage firewall policies, VPN, IDS/IPS, endpoint protection, secure LAN/WAN, Zero Trust principles.
• Conduct vulnerability assessments, penetration test coordination, and network segmentation.
• Secure remote workforce connectivity and internal office networks.

5.     Threat Detection, Incident Response & Compliance-

• Centralize log management (CloudWatch, OpenSearch/ELK, SIEM).
• Build security alerts, automated threat detection, and incident workflows.
• Lead incident containment, forensics, RCA, and remediation.
• Ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA (as applicable).
• Maintain security policies, procedures, RRPs (Runbooks), and audits.

IDEAL CANDIDATE:

• 8+ years in DevSecOps, Cloud Security, Platform Security, or equivalent.
• Proven ability securing AWS cloud ecosystems (IAM, EKS, EMR, MWAA, VPC, WAF, GuardDuty, KMS, Inspector, Macie).
• Strong hands-on experience with Docker, Kubernetes (EKS), CI/CD tools, and Infrastructure-as-Code.
• Experience securing ML platforms, data pipelines, and MLOps systems (Airflow/MWAA, Spark/EMR).
• Strong Linux security (CIS hardening, auditing, intrusion detection).
• Proficiency in Python, Bash, and automation/scripting.
• Excellent knowledge of SIEM, observability, threat detection, monitoring systems.
• Understanding of microservices, API security, serverless security.
• Strong understanding of vulnerability management, penetration testing practices, and remediation plans.

EDUCATION:

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications (AWS Security Specialty, CISSP, CEH, CKA/CKS) are a plus.

PERKS, BENEFITS AND WORK CULTURE:

• Competitive Salary Package
• Generous Leave Policy
• Flexible Working Hours
• Performance-Based Bonuses
• Health Care Benefits

1. Design cloud infrastructure that is secure, scalable, and highly available on AWS, Azure and GCP
2. Work collaboratively with software engineering to define infrastructure and deployment requirements
3. Provision, configure and maintain AWS, Azure, GCP cloud infrastructure defined as code
4. Ensure configuration and compliance with configuration management tools
5. Administer and troubleshoot Linux based systems
6. Troubleshoot problems across a wide array of services and functional areas
7. Build and maintain operational tools for deployment, monitoring, and analysis of AWS, Azure Infrastructure and systems
8. Perform infrastructure cost analysis and optimization

Job Purpose and Impact

The DevOps Engineer is a key position to strengthen the security automation capabilities which have been identified as a critical area for growth and specialization within Global IT’s scope. As part of the Cyber Intelligence Operation’s DevOps Team, you will be helping shape our automation efforts by building, maintaining and supporting our security infrastructure.

Key Accountabilities

• Collaborate with internal and external partners to understand and evaluate business requirements.
• Implement modern engineering practices to ensure product quality.
• Provide designs, prototypes and implementations incorporating software engineering best practices, tools and monitoring according to industry standards.
• Write well-designed, testable and efficient code using full-stack engineering capability.
• Integrate software components into a fully functional software system.
• Independently solve moderately complex issues with minimal supervision, while escalating more complex issues to appropriate staff.
• Proficiency in at least one configuration management or orchestration tool, such as Ansible.
• Experience with cloud monitoring and logging services.

Qualifications

Minimum Qualifications

• Bachelor's degree in a related field or equivalent exp
• Knowledge of public cloud services & application programming interfaces
• Working exp with continuous integration and delivery practices

Preferred Qualifications

• 3-5 years of relevant exp whether in IT, IS, or software development
• Exp in:
•  Code repositories such as Git
• Scripting languages (Python & PowerShell)
• Using Windows, Linux, Unix, and mobile platforms within cloud services such as AWS
• Cloud infrastructure as a service (IaaS) / platform as a service (PaaS), microservices, Docker containers, Kubernetes, Terraform, Jenkins
• Databases such as Postgres, SQL, Elastic

Responsibilities

 Provisioning and de-provisioning AWS accounts for internal customers

 Work alongside systems and development teams to support the transition and operation of client websites/applications in and out of AWS.

 Deploying, managing, and operating AWS environments

 Identifying appropriate use of AWS operational best practices

 Estimating AWS costs and identifying operational cost control mechanisms

 Keep technical documentation up to date

 Proactively keep up to date on AWS services and developments

 Create (where appropriate) automation, in order to streamline provisioning and de-provisioning processes

 Lead certain data/service migration projects

Job Requirements

 Experience provisioning, operating, and maintaining systems running on AWS

 Experience with Azure/AWS.

 Capabilities to provide AWS operations and deployment guidance and best practices throughout the lifecycle of a project

 Experience with application/data migration to/from AWS

 Experience with NGINX and the HTTP protocol.

 Experience with configuration and management software such as GIT  Strong analytical and problem-solving skills

 Deployment experience using common AWS technologies like VPC, and regionally distributed EC2 instances, Docker, and more.

 Ability to work in a collaborative environment

 Detail-oriented, strong work ethic and high standard of excellence

 A fast learner, the Achiever, sets high personal goals

 Must be able to work on multiple projects and consistently meet project deadlines

Responsibilities:

- Design, implement, and maintain cloud infrastructure solutions on Microsoft Azure, with a focus on scalability, security, and cost optimization.

- Collaborate with development teams to streamline the deployment process, ensuring smooth and efficient delivery of software applications.

- Develop and maintain CI/CD pipelines using tools like Azure DevOps, Jenkins, or GitLab CI to automate build, test, and deployment processes.

- Utilize infrastructure-as-code (IaC) principles to create and manage infrastructure deployments using Terraform, ARM templates, or similar tools.

- Manage and monitor containerized applications using Azure Kubernetes Service (AKS) or other container orchestration platforms.

- Implement and maintain monitoring, logging, and alerting solutions for cloud-based infrastructure and applications.

- Troubleshoot and resolve infrastructure and deployment issues, working closely with development and operations teams.

- Ensure high availability, performance, and security of cloud infrastructure and applications.

- Stay up-to-date with the latest industry trends and best practices in cloud infrastructure, DevOps, and automation.

Requirements:

- Bachelor's degree in Computer Science, Engineering, or a related field (or equivalent work experience).

- Minimum of four years of proven experience working as a DevOps Engineer or similar role, with a focus on cloud infrastructure and deployment automation.

- Strong expertise in Microsoft Azure services, including but not limited to Azure Virtual Machines, Azure App Service, Azure Storage, Azure Networking, Azure Security, and Azure Monitor.

- Proficiency in infrastructure-as-code (IaC) tools such as Terraform or ARM templates.

- Hands-on experience with containerization and orchestration platforms, preferably Azure Kubernetes Service (AKS) or Docker Swarm.

- Solid understanding of CI/CD principles and experience with relevant tools such as Azure DevOps, Jenkins, or GitLab CI.

- Experience with scripting languages like PowerShell, Bash, or Python for automation tasks.

- Strong problem-solving and troubleshooting skills with a proactive and analytical mindset.

- Excellent communication and collaboration skills, with the ability to work effectively in a team environment.

- Azure certifications (e.g., Azure Administrator, Azure DevOps Engineer, Azure Solutions Architect) are a plus.

A.P.T Portfolio, a high frequency trading firm that specialises in Quantitative Trading & Investment Strategies.Founded in November 2009, it has been a major liquidity provider in global Stock markets. 

As a manager, you would be incharge of managing the devops team and your remit shall include the following

• Private Cloud - Design & maintain a high performance and reliable network architecture to support  HPC applications
• Scheduling Tool - Implement and maintain a HPC scheduling technology like Kubernetes, Hadoop YARN  Mesos, HTCondor or Nomad for processing & scheduling analytical jobs. Implement controls which allow analytical jobs to seamlessly utilize ideal capacity on the private cloud. 
• Security - Implementing best security practices and implementing data isolation policy between different divisions internally. 
• Capacity Sizing - Monitor private cloud usage and share details with different teams. Plan capacity enhancements on a quarterly basis. 
• Storage solution - Optimize storage solutions like NetApp, EMC, Quobyte for analytical jobs. Monitor their performance on a daily basis to identify issues early.
• NFS - Implement and optimize latest version of NFS for our use case. 
• Public Cloud - Drive AWS/Google-Cloud utilization in the firm for increasing efficiency, improving collaboration and for reducing cost. Maintain the environment for our existing use cases. Further explore potential areas of using public cloud within the firm. 
• BackUps  - Identify and automate  back up of all crucial data/binary/code etc in a secured manner at such duration warranted by the use case. Ensure that recovery from back-up is tested and seamless. 
•  Access Control  - Maintain password less access control and improve security over time. Minimize failures for automated job due to unsuccessful logins. 
•  Operating System  -Plan, test and roll out new operating system for all production, simulation and desktop environments. Work closely with developers to highlight new performance enhancements capabilities of new versions. 
•  Configuration management  -Work closely with DevOps/ development team to freeze configurations/playbook for various teams & internal applications. Deploy and maintain standard tools such as Ansible, Puppet, chef etc for the same. 
•  Data Storage & Security Planning  - Maintain a tight control of root access on various devices. Ensure root access is rolled back as soon the desired objective is achieved.
• Audit access logs on devices. Use third party tools to put in a monitoring mechanism for early detection of any suspicious activity. 
• Maintaining all third party tools used for development and collaboration - This shall include maintaining a fault tolerant   environment for GIT/Perforce, productivity tools such as Slack/Microsoft team, build tools like Jenkins/Bamboo etc

Qualifications 

• Bachelors or Masters Level Degree, preferably in CSE/IT
• 10+ years of relevant experience in sys-admin function
• Must have strong knowledge of IT Infrastructure, Linux, Networking and grid.
• Must have strong grasp of automation & Data management tools.
• Efficient in scripting languages and python

Desirables

• Professional attitude, co-operative and mature approach to work, must be focused, structured and well considered, troubleshooting skills.
•  Exhibit a high level of individual initiative and ownership, effectively collaborate with other team members.

APT Portfolio is an equal opportunity employer

About the client :

Asia’s largest global sports media property in history with a global broadcast to 150+ countries. As the world’s largest martial arts organization, they are a celebration of Asia’s greatest cultural treasure, and its deep-rooted Asian values of integrity, humility, honor, respect, courage, discipline, and compassion. Has achieved some of the highest TV ratings and social media engagement metrics across Asia with its unique brand of Asian values, world-class athletes, and world-class production. Broadcast partners include Turner Sports, Star India, TV Tokyo, Fox Sports, ABS-CBN, Astro, ClaroSports, Bandsports, Startimes, Premier Sports, Thairath TV, Skynet, Mediacorp, OSN, and more. Institutional investors include Sequoia Capital, Temasek Holdings, GIC, Iconiq Capital, Greenoaks Capital, and Mission Holdings. Currently has offices in Singapore, Tokyo, Los Angeles, Shanghai, Milan, Beijing, Bangkok, Manila, Jakarta, and Bangalore.

Position : Devops Engineer – SDE3

As part of the engineering team, you would be expected to have deep technology expertise with a passion for building highly scalable products. This is a unique opportunity where you can impact the lives of people across 150+ countries!

Responsibilities

• Develop Collaborate in large-scale systems design discussions.

• Deploying and maintaining in-house/customer systems ensuring high availability, performance and optimal cost.

• Automate build pipelines. Ensuring right architecture for CI/CD

• Work with engineering leaders to ensure cloud security

• Develop standard operating procedures for various facets of Infrastructure services (CI/CD, Git Branching, SAST, Quality gates, Auto Scaling)

• Perform & automate regular backups of servers & databases. Ensure rollback and restore capabilities are Realtime and with zero-downtime.

• Lead the entire DevOps charter for ONE Championship. Mentor other DevOps engineers. Ensure industry standards are followed.

Requirements

• Overall 5+ years of experience in as DevOps Engineer/Site Reliability Engineer

• B.E/B.Tech in CS or equivalent streams from institute of repute

• Experience in Azure is a must. AWS experience is a plus

• Experience in Kubernetes, Docker, and containers

• Proficiency in developing and deploying fully automated environments using Puppet/Ansible and Terraform

• Experience with monitoring tools like Nagios/Icinga, Prometheus, AlertManager, Newrelic

• Good knowledge of source code control (git)

• Expertise in Continuous Integration and Continuous Deployment setup using Azure Pipeline or Jenkins

• Strong experience in programming languages. Python is preferred

• Experience in scripting and unit testing

• Basic knowledge of SQL & NoSQL databases

• Strong Linux fundamentals

• Experience in SonarQube, Locust & Browserstack is a plus

• You have a Bachelor's degree in computer science or equivalent
• You have at least 7 years of DevOps experience.
• You have deep understanding of AWS and cloud architectures/services.
• You have expertise within the container and container orchestration space (Docker, Kubernetes, etc.).
• You have experience working with infrastructure provisioning tools like CloudFormation, Terraform, Chef, Puppet, or others.
• You have experience enabling CI/CD pipelines using tools such as Jenkins, AWS Code Pipeline, Gitlab, or others.
• You bring a deep understanding and application of computer science fundamentals: data structures, algorithms, and design patterns.
• You have a track record of delivering successful solutions and collaborating with others.
• You take security into account when building new systems.