Senior Information Security Engineer (DevSecOps)

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

• 5+ years’ experience with AWS orchestration via Terraform script
• 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
• 5+ years’ experience with AWS WAF
• 4+ years’ experience with CloudFlare
• 3+ years’ experience with DataDog
• Experience with PagerDuty
• Ability to make nuanced threat assessments
• Experience in SOPHOS.
• Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
• Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
• Hands-on experience implementing various security tools in CI/CD pipeline
• Strong experience with any cloud service provider (AWS Preferred)
• Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
• Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
• Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
• Penetration testing and container security.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Creating and managing security strategies
• Oversee information security audits, whether performed by organization or third-party personnel
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

• Work independently with vendors and collaborate with colleagues
• Experience negotiating remediation timelines and/or remediate found issues independently
• Ability to implement vendor platforms within CI/CD pipelines
• Experience managing/responding to incidents, collecting evidence, and making decisions.
• Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
• Multitasking and continuous ability to provide a high level of concentration for assigned projects.
• Good working knowledge of AWS security in general and familiarity of the AWS native security tools
• The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
• Ability to create DevSecOps security requirements while working on a project
• Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

Senior Cloud Site Reliability Engineer (CSRE) – Azure

About Searce:

Searce is an AI-native, engineering-led modern technology consultancy that empowers

clients to futurify their businesses by delivering real, intelligent business outcomes. As a

trusted partner for over 3,000 clients globally, Searce specializes in cloud modernization,

data engineering, applied AI, and robust cloud platform security. Driven by a "HAPPIER"

cultural mindset and our proprietary evlos problem-solving framework, we eliminate

bureaucratic fluff to build working prototypes fast and scale enterprise production

environments intelligently. We don't just fix systems; we leverage multi-cloud technologies

to transform client operations into distinct competitive advantages.

Position Overview:

We are looking for a high-caliber Senior or Lead Cloud Site Reliability Engineer (CSRE) to

architect, secure, and stabilize next-generation hybrid and multi-cloud environments.

Operating at the intersection of infrastructure design, security compliance, and production

operations, you will serve as the technical Subject Matter Expert (SME) across GCP, Azure,

and AWS.

Whether optimizing a microservice mesh on GKE, tuning autoscaling on AKS, or driving a

massive disaster recovery drill across AWS regions, your focus will be absolute reliability. For

the Lead path, you will couple this deep engineering toolkit with stakeholder management

and mentorship to drive an elite operational culture.

Experience & Level Expectation:

Years of Experience: 3 to 10 years of intensive, hands-on production operations

experience in a dedicated DevOps, Cloud Platform Engineering, or SRE role.

Associate level (3-5 Years): Expected to show flawless execution of IaC, advanced

triaging of infrastructure failures, and ownership of the CI/CD and deployment

lifecycles.

Intermediate level (5-10 Years): Expected to take architectural ownership, serve as

primary Incident Commander for complex outages, design cross-cloud governance

frameworks, and act as a reliable bridge between technical teams and client

leadership.

Key Responsibilities & Role Expectations:

Multi-Cloud Platforms & Orchestration: Design, configure, and maintain

production-grade Kubernetes clusters across major platforms (AKS).

Manage advanced network routing, service meshes (e.g., Istio), and multi-tenant

isolation.

Infrastructure as Code (IaC) & GitOps: Build declarative, enterprise-grade, reusable

infrastructure components using Terraform or Crossplane. Standardize automated

environment provisioning to eliminate configuration drift across multi-branch

environments.

Incident Management & Reliability (SRE): Own and optimize the production on-call

rotation. Lead rapid mitigation strategies for Sev-1/Sev-2 system outages, reducing

Mean Time to Recovery (MTTR) through centralized log and metric correlation.

Root Cause Analysis (RCA): Facilitate rigorous, blameless post-incident reviews to

identify core architectural vulnerabilities and establish long-term fixes preventing

recurrence.

Lifecycle, Patching & Upgrades: Plan and execute zero-downtime cluster upgrades,

operating system patching strategies (Linux/Windows), database lifecycle updates,

and multi-region Disaster Recovery (DR) failover drills.

Core Core Operations & Legacy Integration: Manage enterprise-level hybrid

networking architecture (VPCs, Firewalls, Load Balancers, DNS routing, and DHCP

configurations) while effectively connecting cloud native services to legacy

infrastructures like Active Directory.

Security & Governance: Embed Zero Trust policies, secure secrets management

(Secrets Manager/Key Vault), and continuous vulnerability patching into the

automated SDLC pipeline.

Required Technical Skills:

- Microsoft Azure: Azure Virtual Machines, Virtual Networks, Azure Active Directory, Azure Update Management.

- Containers & Orchestration

• Production-level management of GKE, AKS, and EKS.
• Advanced mastery of Docker, Helm, Kubernetes StatefulSets, Pod Disruption

WowPe is a leading fintech company revolutionizing the way businesses handle financial transactions. Our suite of innovative products includes a secure Payment Gateway for seamless online transactions, robust Payouts solutions to streamline bulk payments, and a versatile Point of Sale (POS) system for efficient in-store transactions. At WowPe, we’re dedicated to providing user-friendly, scalable, and reliable solutions that empower businesses to grow and succeed in today’s fast-paced digital economy.

We are looking for a highly skilled Cloud Infrastructure & Cloud Network Engineer to design, build, and manage secure, scalable hybrid cloud environments at WowPe. This role will focus on cloud networking, hybrid connectivity, infrastructure automation, security, reliability, and performance across on-prem and cloud platforms (AWS/Azure). You will play a critical role in ensuring high availability, security, and performance of our fintech platforms.

A Day in the Life

• Design and review cloud network architectures (VPC/VNet, routing, segmentation)
• Troubleshoot latency, connectivity, VPN, and performance issues
• Work with DevOps and application teams to support deployments and scalability
• Automate infrastructure provisioning and security guardrails
• Monitor network health, traffic flow, and system performance
• Ensure security, compliance, and disaster recovery readiness
• Support hybrid connectivity between on-prem data centers and cloud environments.

Key Responsibilities

Cloud Networking & Hybrid Architecture

• Design and implement VPC/VNet architectures, subnetting, routing tables, NAT, gateways, and secure segmentation
• Build and manage hybrid connectivity between on-prem data centers and cloud using Site-to-Site VPN, ExpressRoute, Direct Connect
• Configure and manage Layer 4 & Layer 7 load balancers for high availability and traffic distribution
• Architect DNS, CDN, and edge networking strategies for low-latency global access

Security & Zero-Trust

• Implement Zero-Trust networking using security groups, NACLs, identity-aware proxies, mTLS
• Design secure access controls and network isolation
• Work closely with security teams to ensure PCI, ISO, SOC compliance readiness

Automation, Platform & Reliability

• Automate infrastructure provisioning using Infrastructure as Code (Terraform/ARM/CloudFormation)
• Build self-healing, auto-scaling architectures with health checks and fault tolerance
• Support and manage Kubernetes clusters (EKS/AKS) including networking and service communication
• Integrate infra with CI/CD pipelines for safe and frequent deployments

Operations & Observability

• Perform advanced troubleshooting for latency, packet loss, MTU, routing loops
• Implement and manage monitoring, logging, and observability (Prometheus, Grafana, ELK, Azure Monitor, CloudWatch)
• Design and maintain disaster recovery architectures, multi-region networking, and replication strategies
• Ensure high availability, performance optimization, and cost efficiency

Basic Qualifications & Skills

• 4+ years of experience in Cloud Infrastructure & Cloud Networking
• Strong hands-on experience with AWS and/or Azure
• Deep understanding of VPC/VNet, routing, NAT, gateways, load balancers, DNS
• Experience with Hybrid connectivity (VPN, ExpressRoute, Direct Connect)
• Solid knowledge of network security, firewalls, access control, segmentation
• Hands-on experience with Infrastructure as Code (Terraform preferred)
• Experience in monitoring, troubleshooting, and incident handling
• Strong understanding of high availability, DR, and performance optimization

Preferred Qualifications

• Experience in fintech, BFSI, or high-compliance environments
• Exposure to Zero-Trust architecture and security best practices
• Experience with Kubernetes (EKS/AKS), service mesh, microservices networking
• Familiarity with CI/CD pipelines and DevOps practices
• Knowledge of CDN, edge networking, and global traffic management
• Experience with compliance frameworks (PCI-DSS, ISO 27001, SOC2)
• Ability to design large-scale, resilient, production-grade architectures

Job Title : Senior AWS DevSecOps & AI Platform Engineer

Experience Required : 5+ Years in AWS / Cloud Engineering

Terraform Experience : 4+ Years

Location : Gurugram

Work Mode : Onsite

Employment Type : Full-time

About the Role :

We are looking for an experienced Senior AWS DevSecOps & AI Platform Engineer with strong expertise in AWS cloud infrastructure, Kubernetes, Infrastructure as Code (IaC), CI/CD automation, cloud security, and database administration.

The ideal candidate will be responsible for designing and maintaining secure, scalable, reliable, and cost-efficient cloud environments while supporting microservices-based applications and implementing DevSecOps best practices. The role also involves building and deploying AI agents using Amazon Bedrock and Bedrock AgentCore, along with managing enterprise development and collaboration tools.

Mandatory Skills :

AWS (EC2, EKS, ECS, Lambda, S3, CloudWatch), Kubernetes, Terraform, Jenkins, Bitbucket Pipelines, CI/CD, DevSecOps, AWS Security Services (IAM, WAF, GuardDuty, Security Hub, KMS, Secrets Manager), Microservices, Helm, PostgreSQL, Oracle SQL, RDS, Jira, Confluence, Amazon Bedrock, Bedrock AgentCore, AWS Networking, and Cloud Cost Optimization.

Key Responsibilities :

• AWS Cloud Infrastructure : Design, implement, and maintain AWS infrastructure with a focus on scalability, availability, security, reliability, and cost optimization.
• Microservices & Containerization : Manage and support distributed microservices architectures, including deployment, monitoring, troubleshooting, performance optimization, service meshes, and API gateways.
• Kubernetes Administration : Administer and optimize Kubernetes clusters, including Amazon EKS and self-managed environments, covering upgrades, networking, workload management, scaling, and resource optimization.
• Cloud Security & Compliance : Implement and manage AWS security services, including IAM, GuardDuty, Security Hub, WAF, KMS, Secrets Manager, AWS Config, and CloudTrail.
• DevSecOps Implementation : Integrate security testing, vulnerability scanning, container security, and compliance-as-code tools into CI/CD pipelines.
• CI/CD & Source Control : Manage Bitbucket repositories, branching strategies, permissions, and Bitbucket Pipelines. Build and optimize Jenkins pipelines using declarative and scripted approaches.
• Infrastructure as Code : Develop and maintain Terraform modules, manage remote state and workspaces, detect infrastructure drift, and implement reusable infrastructure provisioning practices.
• Database Administration : Provision, manage, secure, and optimize AWS RDS databases, particularly PostgreSQL and Oracle, including backups, replication, patching, performance tuning, and migrations.
• Jira & Confluence Administration : Manage projects, workflows, automation rules, permissions, user access, spaces, schemes, and plugins.
• Monitoring & Reliability : Define and monitor SLIs, SLOs, and SLAs; implement observability best practices; and participate in incident management, root cause analysis, and post-incident reviews.
• AI Agent Development : Design, build, and deploy AI agents using Amazon Bedrock and Bedrock AgentCore, including agent runtime, memory, tools, gateway integration, identity and access management, guardrails, and lifecycle management across environments.
• Cloud Connectivity : Support hybrid cloud connectivity using AWS Direct Connect, VPN, and Transit Gateway.
• Cost Optimization : Apply FinOps practices to monitor cloud expenditure, optimize resource utilization, and improve infrastructure efficiency.
• API Integrations : Integrate third-party APIs while implementing authentication, rate limiting, error handling, and webhook management.

Required Skills & Qualifications :

• 5+ years of hands-on experience with AWS cloud services, including EC2, ECS, EKS, Lambda, ALB, CDN, S3, CloudWatch, Amazon Bedrock, and Bedrock AgentCore.
• Strong understanding of AWS networking, multi-account strategies, landing zone architecture, and hybrid connectivity.
• 4+ years of practical experience with Terraform, including module development, remote state management, workspaces, drift detection, and state operations.
• Extensive experience administering Kubernetes, preferably Amazon EKS, including Helm, Kustomize, operators, RBAC, network policies, autoscaling, and multi-tenancy.
• Proven experience managing distributed microservices, service meshes, API gateways, and inter-service communication.
• Strong knowledge of AWS security services, including IAM, Service Control Policies (SCPs), WAF, KMS, Secrets Manager, AWS Config, and CloudTrail.
• Experience implementing least-privilege access, zero-trust principles, and cloud security compliance controls.
• Hands-on experience integrating DevSecOps tools such as Snyk, Trivy, Checkov, and SonarQube into CI/CD pipelines.
• Understanding of OWASP security principles, CIS benchmarks, vulnerability management, and container security.
• Proficiency in Bitbucket repository administration, branch permissions, and YAML-based Bitbucket Pipelines.
• Strong experience developing and maintaining Jenkins CI/CD pipelines, shared libraries, plugins, and build agents.
• Experience administering AWS RDS databases, particularly PostgreSQL and Oracle SQL, including backup, replication, performance tuning, and migration activities.
• Experience administering Jira and Confluence, including workflows, permissions, automation, and plugin management.
• Working knowledge of Azure services, particularly Web Apps and Logic Apps/Workflows.
• Practical experience with Amazon Bedrock, including model invocation, guardrails, and AI agent development and deployment using Bedrock AgentCore.
• Understanding of third-party API integration, authentication mechanisms, rate limiting, error handling, and webhook management.
• Familiarity with FinOps practices and cloud cost optimization.

Good-to-Have Skills :

• Additional Azure experience, including networking, Azure SQL Managed Instance, and Azure Kubernetes Service (AKS).
• Hands-on experience with AI-driven Development Lifecycle (AI-DLC) methodologies and tools such as Kiro.

Relevant certifications, such as :

• AWS Certified Solutions Architect
• AWS Certified DevOps Engineer – Professional
• AWS Machine Learning or Generative AI certifications
• Certified Kubernetes Administrator (CKA)
• HashiCorp Terraform certifications

Ideal Candidate Profile :

The ideal candidate is a hands-on cloud and DevSecOps professional who can manage enterprise-scale AWS infrastructure, automate deployments, strengthen security controls, troubleshoot complex distributed systems, and support AI agent development. Strong problem-solving skills, an automation-first mindset, and the ability to collaborate across development, security, and infrastructure teams are essential.

Cloud Infrastructure Engineer – BANG | 10+ Years

Location: Bangalore

Experience: 10+ Years

Job Description:

• Design, implement, and manage cloud infrastructure across AWS/Azure/GCP environments.
• Strong experience in cloud architecture, compute, storage, networking, and security.
• Manage VMs, VPC/VNet, load balancers, DNS, DHCP, firewalls, and IAM.
• Hands-on experience with Windows/Linux servers, VMware, virtualization, and infrastructure operations.
• Automate infrastructure provisioning and configuration using Terraform, Ansible, or similar tools.
• Monitor infrastructure performance, availability, and capacity using tools such as Grafana, Prometheus, or CloudWatch/Azure Monitor.
• Handle incident management, troubleshooting, disaster recovery, backup, and high-availability requirements.
• Work with cross-functional teams to support cloud migration, infrastructure upgrades, and production environments.
• Ensure infrastructure follows security, compliance, and operational best practices.

Must-Have Skills:

Cloud Infrastructure | AWS/Azure/GCP | Networking | Linux/Windows | VMware | Terraform | Ansible | DNS/DHCP | IAM | Monitoring | Backup & DR

Job Title: AppSec / AI Security Engineer

Employment Type: Full-time/ Permanent

Location: Indore (Work from Office)

About the Role

We're embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards.

If you're a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.

Key Responsibilities

• Build and integrate security controls into CI/CD pipelines — including automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC) — with enforcement gates on every merge.
• Design and implement code provenance tracking to capture AI-generated code, the AI models used, and reviewer approvals as part of the development pipeline.
• Develop structured code review workflows incorporating specifications, scan results, and code provenance.
• Optimize security scanning tools to reduce false positives and drive developer adoption.
• Investigate and manage security findings using established remediation and documentation processes.
• Contribute to AI governance standards, including secure usage of AI tools and governance of AI-generated code.
• Conduct independent security reviews of internally developed, third-party, and vendor-supplied code to ensure compliance with security standards.

Required Skills & Experience

• Strong hands-on experience in Application Security, with proven expertise securing CI/CD pipelines.
• Experience implementing automated security scanning and enforcement — not just operating existing tools.
• Strong knowledge of SAST, SCA, secret scanning, DAST, and IaC security scanning.
• Strong understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure, is preferred.
• Ability to design, build, and own security automation and governance solutions from the ground up.
• Strong judgment in balancing security with developer productivity by minimizing unnecessary alerts.
• Excellent communication skills, with the ability to explain security risks in clear, business-friendly language.
• Strong analytical mindset and ability to independently assess security risk across internal and external codebases.

Preferred Qualifications

• ~4+ years of experience in Application Security, Security Engineering, DevSecOps, or a related field.
• Experience with AI-generated code security, LLM security risks, prompt injection, code provenance, or AI governance.
• Hands-on experience with tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar.
• AWS certification (Solutions Architect Associate preferred), or willingness to obtain one within 90 days.
• Security certifications such as OSCP, GWAPT, CSSLP, or equivalent.
• Experience writing custom detection rules or security policies (e.g., custom Semgrep rules).

About Company:

Five Exceptions Software Solutions Private Limited is an offshore software development company run by a 15+ year experience team. We are a software development team with extensive experience in developing amazing products, websites, and mobile apps. The company has expertise in different technology spectrums. We provide a better work environment to grow technically and professionally.

For more info, please visit our website:  https://5exceptions.com

About the company:

We empower US healthcare payers with a truly next-generation, cloud-native, holistic, and customizable platform designed to prevent and adapt to the ever-evolving inaccuracies in healthcare claims and payments. By reducing complexity and administrative costs, we offer a unified, healthcare-dedicated platform backed by top VCs like BeeNext, 3One4 Capital, and Saison Capital.

Position Overview:

We are looking for an experienced DevOps Engineer to join our team in Bengaluru. In this role, you will be responsible for building, optimizing, and maintaining scalable, secure, and highly available multi-cloud infrastructure that supports our engineering teams. The ideal candidate brings strong hands-on experience with Kubernetes, Infrastructure as Code (Terraform), and robust monitoring/observability stacks to enable seamless, reliable, and automated deployments.

Key Responsibilities:

• Container Orchestration: Deploy, scale, and manage containerized workloads on Kubernetes (EKS, AKS, and GKE).
• Infrastructure as Code (IaC): Build and maintain modular, reusable, and version-controlled infrastructure using Terraform across AWS, Azure, and GCP.
• Monitoring & Observability: Set up, manage, and optimize monitoring, logging, and alerting stacks (e.g., Prometheus, Grafana, ELK/EFK, Loki, Datadog).
• CI/CD Pipeline Management: Own, improve, and automate CI/CD pipelines to enable fast, reliable, and frictionless software releases.
• System Reliability & SRE Practices: Implement best practices for system reliability, including defining SLIs/SLOs, managing incident response, and participating in on-call support.
• Troubleshooting & Support: Diagnose and resolve complex production issues across infrastructure, networking, and application layers.
• Security & Compliance: Implement infrastructure security best practices, including IAM policies, secrets management, and network security.
• Automation: Eliminate repetitive operational tasks by writing clean, efficient scripts in Python, Bash, or Go.
• Operations & Planning: Participate in capacity planning, cost optimization, disaster recovery, and infrastructure scaling initiatives while maintaining clear documentation and runbooks.

Requirements :

• Solid working experience with cloud providers, specifically AWS, Azure, or GCP.
• Strong understanding of containerization (Docker) and container orchestration concepts.
• Familiarity with Linux system administration and networking fundamentals.
• Experience with version control systems (Git) and GitOps workflows (ArgoCD/Flux is a plus).
• Strong problem-solving skills and the ability to thrive in a fast-paced, collaborative environment.

Qualifications :

Bachelor’s or Master’s degree in Computer Science, Information Technology, or a related technical field (or equivalent practical experience)

Key Skills:

• The ideal candidate must possess deep expertise in container orchestration, specifically hands-on experience managing Kubernetes ecosystems—including Helm charts, cluster networking, and RBAC policies—alongside a foundational mastery of Docker containerization.
• Proficiency in managing cloud architecture as software is essential, with a heavy emphasis on Terraform execution, including advanced module creation, state management, and multi-environment workspaces.
• A strong capability to implement full-stack visibility is required, utilizing tools like Prometheus, the Grafana LGMT stack, ELK/EFK, or Loki to build highly optimized monitoring, alerting, and logging systems.
• Candidates should have a proven track record of constructing and scaling automated deployment pipelines using industry-standard platforms such as Jenkins, GitLab CI, GitHub Actions, or Azure DevOps to minimize release friction. .
• Strong core programming fundamentals are required to automate repetitive infrastructure tasks, with practical proficiency in Python, Bash, or Go.
• Familiarity with cutting-edge cloud-native technologies is highly desirable, including enterprise service meshes (Istio, Linkerd), comprehensive cloud security frameworks (HashiCorp Vault, OPA, Trivy), and a data-driven approach to cloud cost management and FinOps practices.

Work Location: Jayanagar - Bangalore.

Work Mode: Work from Office, hybrid- 3 days WFO

Note: We are looking for immediate joiners & Bangalore Candidates only

Benefits:

• Best-in-class compensation
• Health insurance for Family
• Personal Accident Insurance
• Friendly and Flexible Leave Policy
• Certification and Course Reimbursement
• Medical Coding CEUs and Membership Renewals
• Health checkup
• And many more!

We are looking for a hands-on Senior AWS Cloud Engineer to lead the infrastructure build, optimization, automation, and production deployment of a Multi-Agent AI Chatbot Platform hosted on AWS. The development environment is already in place, and the successful candidate will drive the solution through testing, integrations, and production go-live.

Key Responsibilities

• Review, validate, and optimize existing Terraform code and AWS infrastructure.
• Establish and manage integrations with enterprise platforms such as ServiceNow, Workday, and other third-party systems.
• Design, build, and support secure, scalable, and highly available AWS environments.
• Implement and automate CI/CD pipelines and Infrastructure-as-Code practices.
• Lead infrastructure testing, performance tuning, and production readiness activities.
• Drive deployment and operationalization of the platform in the Production environment.
• Implement cloud governance, security, monitoring, and FinOps best practices.
• Troubleshoot and resolve complex cloud infrastructure issues.

Required Skills & Experience

• 10+ years of IT experience with strong expertise in AWS Cloud Engineering.
• Proven experience designing, deploying, and managing AWS production environments.
• Strong hands-on experience with Terraform and Infrastructure-as-Code.
• Experience with CI/CD pipeline automation and DevOps practices.
• Expertise in AWS services including VPC, IAM, EC2, S3, Lambda, CloudWatch, and networking.
• Experience in performance optimization, reliability, and cloud cost management (FinOps).
• Strong scripting and automation skills.
• Experience integrating enterprise applications through APIs and secure connectivity patterns.

At Shipthis, we are building a better future for freight forwarders by evolving traditional operations into fully digital, efficient, and scalable systems. We’re a fast-growing product company where every individual has the opportunity to take ownership, move fast, and create real impact. If you enjoy solving complex problems, shaping products from the ground up, and influencing technical direction, Shipthis is the place for you.

Learn more at www.shipthis.co

Role Overview

We are looking for an associate-level SecOps Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.

What You’ll be Doing

Security Operations

• Monitor infrastructure, application, and security alerts and assist with incident investigation.
• Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.
• Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.
• Track security issues and corrective actions through closure.

Vulnerability Management

• Run and review application and infrastructure vulnerability scans.
• Maintain a vulnerability register and coordinate remediation with engineering teams.
• Support VAPT and penetration-testing exercises and validate closure of findings.
• Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.

Compliance & Governance

• Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.
• Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.
• Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.
• Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.

MDM & Endpoint Security

• Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.
• Maintain device inventory and monitor endpoint compliance.
• Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.
• Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.
• Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.

DevOps, CI/CD & Cloud

• Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.
• Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.
• Automate repetitive deployment, infrastructure, security, and compliance tasks.
• Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.
• Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.

Required Fundamentals

• Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.
• Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.
• Strong troubleshooting, ownership, attention to detail, and willingness to learn.

Desired Qualifications

• 1–2 years of experience with strong fundamentals are welcome.
• Basic scripting knowledge in Python, Bash, or similar.
• Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.
• Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.

We Welcome Candidates:

• Who can join immediately
• Female candidates returning to work after a career break are strongly encouraged.

We are an equal opportunity employer and are committed to fostering diversity and inclusivity. We do not discriminate based on race, religion, color, gender, sexual orientation, age, marital status, or disability status.

Job Synopsys

Location: Bangalore

Job Type: Full-time, Permanent

Experience: 1-2 years

Industry: Software Product

Required Skills & Qualifications

• Experience: 10+ years in Cloud Engineering, Infrastructure, or DevOps, with strong hands-on GCP experience.
• GCP Expertise: GKE, Compute Engine, IAM, VPC, Cloud Storage, Cloud SQL, Cloud Run, Cloud Functions, and Load Balancing.
• Kubernetes & Containers: GKE, Docker, Kubernetes networking, Helm, and troubleshooting.
• DevOps & IaC: Azure DevOps, Terraform, CI/CD pipelines, and infrastructure automation.
• Scripting: Python, Bash, or PowerShell.
• Security & Operations: Cloud security, IAM, monitoring, incident management, and cost optimization.
• Leadership & Ownership: Proven experience in team leadership, cross-functional collaboration, stakeholder management, managing multiple product-line deliverables, and handling competing priorities and ad hoc requests.
• Additional Advantage: Experience with Microsoft Azure.