Senior Information Security Engineer (DevSecOps)

E-Commerce Industry

Senior Information Security Engineer (DevSecOps)

Senior Information Security Engineer (DevSecOps) at E-Commerce Industry · Bengaluru (Bangalore) · 6 - 10 years · ₹30L - ₹50L / yr · Posted 1 Jan 2026

Senior Information Security Engineer (DevSecOps)

at E-Commerce Industry

Agency job

via Peak Hire Solutions

6 - 10 yrs

₹30L - ₹50L / yr

Bengaluru (Bangalore)

Skills

Security Information and Event Management (SIEM)

Information security governance

ISO/IEC 27001:2005

Systems Development Life Cycle (SDLC)

Software Development

Software development methodology

CI/CD

Information security management system

Information security

Amazon Web Services (AWS)

Windows Azure

Microsoft Windows Azure

SQL Azure

Google Cloud Platform (GCP)

IDS

IPS

Kubernetes

RBAC

Network Security

Windows Runtime

GitHub

Encryption

Disk encryption

Identity management

Access control

Web application security

Cyber Security

Security awareness

Spring Security

Security operations

Data security

Report Conversion Tool

SCA

Root cause analysis

RCA

Penetration testing

Cloud Computing

Terraform

AWS CloudFormation

Docker

ISO/IEC 27000-series

NIST

NIST 800-53

NIST SP 800 Series

HIPAA

Threat analysis

Threat modeling

DLP

EMC RSA DLP

Vulnerability assessment

Vulnerability management

Vulnerability scanning

Google Cloud Storage

Oracle Cloud

Automation

Test Automation (QA)

Troubleshooting

Hardware troubleshooting

Software troubleshooting

Mechanical troubleshooting

Electronic troubleshooting

Oracle

Microsoft SQL Server

Microsoft Windows

AWS Lambda

AWS Simple Notification Service (SNS)

AWS RDS

AWS Elastic Beanstalk

AWS Simple Queuing Service (SQS)

AWS ECR

AWS Bedrock

IPsec

SENIOR INFORMATION SECURITY ENGINEER (DEVSECOPS)

Key Skills: Software Development Life Cycle (SDLC), CI/CD

About Company: Consumer Internet / E-Commerce

Company Size: Mid-Sized

Experience Required: 6 - 10 years

Working Days: 5 days/week

Office Location: Bengaluru [Karnataka]

Review Criteria:

Mandatory:

Strong DevSecOps profile
Must have 5+ years of hands-on experience in Information Security, with a primary focus on cloud security across AWS, Azure, and GCP environments.
Must have strong practical experience working with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud, Wiz, or Orca along with SIEM / IDS / IPS platforms
Must have proven experience in securing Kubernetes and containerized environments including image security,runtime protection, RBAC, and network policies.
Must have hands-on experience integrating security within CI/CD pipelines using tools such as Snyk, GitHub Advanced Security,or equivalent security scanning solutions.
Must have solid understanding of core security domains including network security, encryption, identity and access management key management, and security governance including cloud-native security services like GuardDuty, Azure Security Center etc
Must have practical experience with Application Security Testing tools including SAST, DAST, and SCA in real production environments
Must have hands-on experience with security monitoring, incident response, alert investigation, root-cause analysis (RCA), and managing VAPT / penetration testing activities
Must have experience securing infrastructure-as-code and cloud deployments using Terraform, CloudFormation, ARM, Docker, and Kubernetes
B2B SaaS Product companies
Must have working knowledge of globally recognized security frameworks and standards such as ISO 27001, NIST, and CIS with exposure to SOC2, GDPR, or HIPAA compliance environments

Preferred:

Experience with DevSecOps automation, security-as-code, and policy-as-code implementations
Exposure to threat intelligence platforms, cloud security monitoring, and proactive threat detection methodologies, including EDR / DLP or vulnerability management tools
Must demonstrate strong ownership mindset, proactive security-first thinking, and ability to communicate risks in clear business language

Roles & Responsibilities:

We are looking for a Senior Information Security Engineer who can help protect our cloud infrastructure, applications, and data while enabling teams to move fast and build securely.

This role sits deep within our engineering ecosystem. You’ll embed security into how we design, build, deploy, and operate systems—working closely with Cloud, Platform, and Application Engineering teams. You’ll balance proactive security design with hands-on incident response, and help shape a strong, security-first culture across the organization.

If you enjoy solving real-world security problems, working close to systems and code, and influencing how teams build securely at scale, this role is for you.

What You’ll Do-

Cloud & Infrastructure Security:

Design, implement, and operate cloud-native security controls across AWS, Azure, GCP, and Oracle.
Strengthen IAM, network security, and cloud posture using services like GuardDuty, Azure Security Center and others.
Partner with platform teams to secure VPCs, security groups, and cloud access patterns.

Application & DevSecOps Security:

Embed security into the SDLC through threat modeling, secure code reviews, and security-by-design practices.
Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
Secure infrastructure-as-code and containerized workloads using Terraform, CloudFormation, ARM, Docker, and Kubernetes.

Security Monitoring & Incident Response:

Monitor security alerts and investigate potential threats across cloud and application layers.
Lead or support incident response efforts, root-cause analysis, and corrective actions.
Plan and execute VAPT and penetration testing engagements (internal and external), track remediation, and validate fixes.
Conduct red teaming activities and tabletop exercises to test detection, response readiness, and cross-team coordination.
Continuously improve detection, response, and testing maturity.

Security Tools & Platforms:

Manage and optimize security tooling including firewalls, SIEM, EDR, DLP, IDS/IPS, CSPM, and vulnerability management platforms.
Ensure tools are well-integrated, actionable, and aligned with operational needs.

Compliance, Governance & Awareness:

Support compliance with industry standards and frameworks such as SOC2, HIPAA, ISO 27001, NIST, CIS, and GDPR.
Promote secure engineering practices through training, documentation, and ongoing awareness programs.
Act as a trusted security advisor to engineering and product teams.

Continuous Improvement:

Stay ahead of emerging threats, cloud vulnerabilities, and evolving security best practices.
Continuously raise the bar on a company's security posture through automation and process improvement.

Endpoint Security (Secondary Scope):

Provide guidance on endpoint security tooling such as SentinelOne and Microsoft Defender when required.

Ideal Candidate:

Strong hands-on experience in cloud security across AWS and Azure.
Practical exposure to CSPM tools (e.g., Prisma Cloud, Wiz, Orca) and SIEM / IDS / IPS platforms.
Experience securing containerized and Kubernetes-based environments.
Familiarity with CI/CD security integrations (e.g., Snyk, GitHub Advanced Security, or similar).
Solid understanding of network security, encryption, identity, and access management.
Experience with application security testing tools (SAST, DAST, SCA).
Working knowledge of security frameworks and standards such as ISO 27001, NIST, and CIS.
Strong analytical, troubleshooting, and problem-solving skills.

Nice to Have:

Experience with DevSecOps automation and security-as-code practices.
Exposure to threat intelligence and cloud security monitoring solutions.
Familiarity with incident response frameworks and forensic analysis.
Security certifications such as CISSP, CISM, CCSP, or CompTIA Security+.

Perks, Benefits and Work Culture:

A wholesome opportunity in a fast-paced environment that will enable you to juggle between concepts, yet maintain the quality of content, interact and share your ideas and have loads of learning while at work. Work with a team of highly talented young professionals and enjoy the comprehensive benefits that company offers.

SENIOR INFORMATION SECURITY ENGINEER (DEVSECOPS)

Key Skills: Software Development Life Cycle (SDLC), CI/CD

About Company: Consumer Internet / E-Commerce

Company Size: Mid-Sized

Experience Required: 6 - 10 years

Working Days: 5 days/week

Office Location: Bengaluru [Karnataka]

Review Criteria:

Mandatory:

Strong DevSecOps profile
Must have 5+ years of hands-on experience in Information Security, with a primary focus on cloud security across AWS, Azure, and GCP environments.
Must have strong practical experience working with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud, Wiz, or Orca along with SIEM / IDS / IPS platforms
Must have proven experience in securing Kubernetes and containerized environments including image security,runtime protection, RBAC, and network policies.
Must have hands-on experience integrating security within CI/CD pipelines using tools such as Snyk, GitHub Advanced Security,or equivalent security scanning solutions.
Must have solid understanding of core security domains including network security, encryption, identity and access management key management, and security governance including cloud-native security services like GuardDuty, Azure Security Center etc
Must have practical experience with Application Security Testing tools including SAST, DAST, and SCA in real production environments
Must have hands-on experience with security monitoring, incident response, alert investigation, root-cause analysis (RCA), and managing VAPT / penetration testing activities
Must have experience securing infrastructure-as-code and cloud deployments using Terraform, CloudFormation, ARM, Docker, and Kubernetes
B2B SaaS Product companies
Must have working knowledge of globally recognized security frameworks and standards such as ISO 27001, NIST, and CIS with exposure to SOC2, GDPR, or HIPAA compliance environments

Preferred:

Experience with DevSecOps automation, security-as-code, and policy-as-code implementations
Exposure to threat intelligence platforms, cloud security monitoring, and proactive threat detection methodologies, including EDR / DLP or vulnerability management tools
Must demonstrate strong ownership mindset, proactive security-first thinking, and ability to communicate risks in clear business language

Roles & Responsibilities:

We are looking for a Senior Information Security Engineer who can help protect our cloud infrastructure, applications, and data while enabling teams to move fast and build securely.

If you enjoy solving real-world security problems, working close to systems and code, and influencing how teams build securely at scale, this role is for you.

What You’ll Do-

Cloud & Infrastructure Security:

Design, implement, and operate cloud-native security controls across AWS, Azure, GCP, and Oracle.
Strengthen IAM, network security, and cloud posture using services like GuardDuty, Azure Security Center and others.
Partner with platform teams to secure VPCs, security groups, and cloud access patterns.

Application & DevSecOps Security:

Embed security into the SDLC through threat modeling, secure code reviews, and security-by-design practices.
Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
Secure infrastructure-as-code and containerized workloads using Terraform, CloudFormation, ARM, Docker, and Kubernetes.

Security Monitoring & Incident Response:

Monitor security alerts and investigate potential threats across cloud and application layers.
Lead or support incident response efforts, root-cause analysis, and corrective actions.
Plan and execute VAPT and penetration testing engagements (internal and external), track remediation, and validate fixes.
Conduct red teaming activities and tabletop exercises to test detection, response readiness, and cross-team coordination.
Continuously improve detection, response, and testing maturity.

Security Tools & Platforms:

Manage and optimize security tooling including firewalls, SIEM, EDR, DLP, IDS/IPS, CSPM, and vulnerability management platforms.
Ensure tools are well-integrated, actionable, and aligned with operational needs.

Compliance, Governance & Awareness:

Support compliance with industry standards and frameworks such as SOC2, HIPAA, ISO 27001, NIST, CIS, and GDPR.
Promote secure engineering practices through training, documentation, and ongoing awareness programs.
Act as a trusted security advisor to engineering and product teams.

Continuous Improvement:

Stay ahead of emerging threats, cloud vulnerabilities, and evolving security best practices.
Continuously raise the bar on a company's security posture through automation and process improvement.

Endpoint Security (Secondary Scope):

Provide guidance on endpoint security tooling such as SentinelOne and Microsoft Defender when required.

Ideal Candidate:

Strong hands-on experience in cloud security across AWS and Azure.
Practical exposure to CSPM tools (e.g., Prisma Cloud, Wiz, Orca) and SIEM / IDS / IPS platforms.
Experience securing containerized and Kubernetes-based environments.
Familiarity with CI/CD security integrations (e.g., Snyk, GitHub Advanced Security, or similar).
Solid understanding of network security, encryption, identity, and access management.
Experience with application security testing tools (SAST, DAST, SCA).
Working knowledge of security frameworks and standards such as ISO 27001, NIST, and CIS.
Strong analytical, troubleshooting, and problem-solving skills.

Nice to Have:

Experience with DevSecOps automation and security-as-code practices.
Exposure to threat intelligence and cloud security monitoring solutions.
Familiarity with incident response frameworks and forensic analysis.
Security certifications such as CISSP, CISM, CCSP, or CompTIA Security+.

Perks, Benefits and Work Culture:

Users love Cutshort

Read about what our users have to say about finding their next opportunity on Cutshort.

Shubham Vishwakarma

Full Stack Developer - Averlon

I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.

Companies hiring on Cutshort

Similar jobs (10)

Lead/ Architect Security - DevSecOps

at CLOUDSUFI

3 recruiters

Posted by Ayushi Dwivedi

Remote only

8 - 14 yrs

₹40L - ₹50L / yr

Network Security

Application Security

GRC

WAF

SAST

+2 more

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

5+ years’ experience with AWS orchestration via Terraform script
5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
5+ years’ experience with AWS WAF
4+ years’ experience with CloudFlare
3+ years’ experience with DataDog
Experience with PagerDuty
Ability to make nuanced threat assessments
Experience in SOPHOS.
Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
Hands-on experience implementing various security tools in CI/CD pipeline
Strong experience with any cloud service provider (AWS Preferred)
Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
Penetration testing and container security.
Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
Creating and managing security strategies
Oversee information security audits, whether performed by organization or third-party personnel
Develop, maintain and publish up-to-date information security policies, standards and guidelines.
Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

Work independently with vendors and collaborate with colleagues
Experience negotiating remediation timelines and/or remediate found issues independently
Ability to implement vendor platforms within CI/CD pipelines
Experience managing/responding to incidents, collecting evidence, and making decisions.
Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
Multitasking and continuous ability to provide a high level of concentration for assigned projects.
Good working knowledge of AWS security in general and familiarity of the AWS native security tools
The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
Ability to create DevSecOps security requirements while working on a project
Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

About Us

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

5+ years’ experience with AWS orchestration via Terraform script
5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
5+ years’ experience with AWS WAF
4+ years’ experience with CloudFlare
3+ years’ experience with DataDog
Experience with PagerDuty
Ability to make nuanced threat assessments
Experience in SOPHOS.
Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
Hands-on experience implementing various security tools in CI/CD pipeline
Strong experience with any cloud service provider (AWS Preferred)
Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
Penetration testing and container security.
Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
Creating and managing security strategies
Oversee information security audits, whether performed by organization or third-party personnel
Develop, maintain and publish up-to-date information security policies, standards and guidelines.
Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

Work independently with vendors and collaborate with colleagues
Experience negotiating remediation timelines and/or remediate found issues independently
Ability to implement vendor platforms within CI/CD pipelines
Experience managing/responding to incidents, collecting evidence, and making decisions.
Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
Multitasking and continuous ability to provide a high level of concentration for assigned projects.
Good working knowledge of AWS security in general and familiarity of the AWS native security tools
The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
Ability to create DevSecOps security requirements while working on a project
Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

Security Engineer

at Pentabay Softwares

1 recruiter

Posted by Sandhiya M

Chennai

1 - 5 yrs

₹2L - ₹8L / yr

ISO9001

ISO27001

Security Information and Event Management (SIEM)

Cyber Security

Amazon Web Services (AWS)

+4 more

Hi Folks, we are currently Hiring for Security Engineer.

Gemini said

Hiring: Security Engineer

Company : Pentabay Softwares

Location : Anna salai, Mount Road

Mode: Fulltime

Pentabay Softwares INC is looking for a proactive Security Engineer (2–7 Years Exp) to fortify our global digital solutions. As we scale our footprint in the Healthcare IT sector, you will play a critical role in safeguarding sensitive data (ePHI) and ensuring our cloud-native architectures are resilient against evolving threats.

The Mission

You will be the architect of our defense, bridging the gap between high-speed development and rigorous security standards. Your day-to-day will involve "shifting security left" by embedding DevSecOps practices into our CI/CD pipelines and leading our compliance efforts for SOC 2, ISO 27001, and HIPAA.

Key Responsibilities

Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management.

Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus.

DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash.

Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies.

Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients.

What You Bring

Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE).

Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes).

Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks.

Tools: Hands-on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform).

Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows.

Auditing space like ISO27001 , ISO9001 prefered

Why Pentabay?

At Pentabay, we offer more than just a job; we offer a security-first engineering culture.

Growth: A dedicated learning budget for certifications and conferences.

Impact: Work on cutting-edge Healthcare projects that demand the highest levels of data privacy.

Send resumes to : sandhiya.m at pentabay.com

Hi Folks, we are currently Hiring for Security Engineer.

Gemini said

Hiring: Security Engineer

Company : Pentabay Softwares

Location : Anna salai, Mount Road

Mode: Fulltime

The Mission

Key Responsibilities

Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management.

Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus.

DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash.

Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies.

Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients.

What You Bring

Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE).

Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes).

Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks.

Tools: Hands-on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform).

Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows.

Auditing space like ISO27001 , ISO9001 prefered

Why Pentabay?

At Pentabay, we offer more than just a job; we offer a security-first engineering culture.

Growth: A dedicated learning budget for certifications and conferences.

Impact: Work on cutting-edge Healthcare projects that demand the highest levels of data privacy.

Send resumes to : sandhiya.m at pentabay.com

Sr Engineer - Cloud Reliability Engineer

at Searce Inc

3 recruiters

Posted by Mohammed Rabidheen

Coimbatore

3 - 8 yrs

Best in industry

Windows Azure

AKS

DevOps

Microsoft Windows Azure

Senior Cloud Site Reliability Engineer (CSRE) – Azure

About Searce:

Searce is an AI-native, engineering-led modern technology consultancy that empowers

clients to futurify their businesses by delivering real, intelligent business outcomes. As a

trusted partner for over 3,000 clients globally, Searce specializes in cloud modernization,

data engineering, applied AI, and robust cloud platform security. Driven by a "HAPPIER"

cultural mindset and our proprietary evlos problem-solving framework, we eliminate

bureaucratic fluff to build working prototypes fast and scale enterprise production

environments intelligently. We don't just fix systems; we leverage multi-cloud technologies

to transform client operations into distinct competitive advantages.

Position Overview:

We are looking for a high-caliber Senior or Lead Cloud Site Reliability Engineer (CSRE) to

architect, secure, and stabilize next-generation hybrid and multi-cloud environments.

Operating at the intersection of infrastructure design, security compliance, and production

operations, you will serve as the technical Subject Matter Expert (SME) across GCP, Azure,

and AWS.

Whether optimizing a microservice mesh on GKE, tuning autoscaling on AKS, or driving a

massive disaster recovery drill across AWS regions, your focus will be absolute reliability. For

the Lead path, you will couple this deep engineering toolkit with stakeholder management

and mentorship to drive an elite operational culture.

Experience & Level Expectation:

Years of Experience: 3 to 10 years of intensive, hands-on production operations

experience in a dedicated DevOps, Cloud Platform Engineering, or SRE role.

Associate level (3-5 Years): Expected to show flawless execution of IaC, advanced

triaging of infrastructure failures, and ownership of the CI/CD and deployment

lifecycles.

Intermediate level (5-10 Years): Expected to take architectural ownership, serve as

primary Incident Commander for complex outages, design cross-cloud governance

frameworks, and act as a reliable bridge between technical teams and client

leadership.

Key Responsibilities & Role Expectations:

Multi-Cloud Platforms & Orchestration: Design, configure, and maintain

production-grade Kubernetes clusters across major platforms (AKS).

Manage advanced network routing, service meshes (e.g., Istio), and multi-tenant

isolation.

Infrastructure as Code (IaC) & GitOps: Build declarative, enterprise-grade, reusable

infrastructure components using Terraform or Crossplane. Standardize automated

environment provisioning to eliminate configuration drift across multi-branch

environments.

Incident Management & Reliability (SRE): Own and optimize the production on-call

rotation. Lead rapid mitigation strategies for Sev-1/Sev-2 system outages, reducing

Mean Time to Recovery (MTTR) through centralized log and metric correlation.

Root Cause Analysis (RCA): Facilitate rigorous, blameless post-incident reviews to

identify core architectural vulnerabilities and establish long-term fixes preventing

recurrence.

Lifecycle, Patching & Upgrades: Plan and execute zero-downtime cluster upgrades,

operating system patching strategies (Linux/Windows), database lifecycle updates,

and multi-region Disaster Recovery (DR) failover drills.

Core Core Operations & Legacy Integration: Manage enterprise-level hybrid

networking architecture (VPCs, Firewalls, Load Balancers, DNS routing, and DHCP

configurations) while effectively connecting cloud native services to legacy

infrastructures like Active Directory.

Security & Governance: Embed Zero Trust policies, secure secrets management

(Secrets Manager/Key Vault), and continuous vulnerability patching into the

automated SDLC pipeline.

Required Technical Skills:

- Microsoft Azure: Azure Virtual Machines, Virtual Networks, Azure Active Directory, Azure Update Management.

- Containers & Orchestration

Production-level management of GKE, AKS, and EKS.
Advanced mastery of Docker, Helm, Kubernetes StatefulSets, Pod Disruption