Senior SAO Orchestration Architect – Cisco NSO

SAO Orchestration – NSO Profile

Job Title: SAO Orchestration – NSO Profile

Experience: 5+ Years

Location: Bangalore / Hyderabad / Mumbai / Delhi

Work Mode: Onsite

Contract Duration: 6 Months

Job Description

We are looking for an experienced SAO Orchestration / Cisco NSO Engineer with strong expertise in network automation, service orchestration, and software development.

Key Responsibilities

• Design and develop network service orchestration solutions using Cisco NSO.
• Develop and maintain YANG-based service models.
• Build network automation workflows using Python.
• Develop and integrate REST APIs for network and service orchestration.
• Work with Kubernetes (K8s) and containerized environments.
• Automate network configuration and service provisioning across multi-vendor environments.
• Integrate orchestration platforms with network devices and external systems.
• Troubleshoot and resolve issues related to network automation and orchestration.
• Collaborate with network, software, and infrastructure teams.

Roles & Responsibilities

1. Ansible Automation Design and maintain enterprise-grade playbooks, roles, and collections. Automate OS patching, configuration drift correction, security hardening, and compliance enforcement across AWS, Azure, VMware, and REST-integrated environments. Combine Ansible with Terraform for seamless post-provisioning configuration.
2. AWS Cloud Automation Architect serverless and event-driven automation using Lambda, Step Functions, EventBridge, SNS/SQS, S3 triggers, and Systems Manager. Build scalable, cross-account automation across AWS Organizations with proper IAM boundaries. Align all implementations with CIS, NIST, and AWS Well-Architected standards.
3. Kubernetes & Helm Develop and own custom Helm charts for multi-environment Kubernetes deployments. Manage the full Helm lifecycle including upgrades, rollbacks, and canary releases. Drive GitOps adoption using ArgoCD or Flux. Automate namespace management, RBAC, secrets, and network policies.
4. Infrastructure as Code & CI/CD Build reusable, versioned Terraform modules covering AWS networking, IAM, EKS, ECS, RDS, and security controls. Implement CI/CD pipelines for IaC using GitHub Actions or Azure DevOps — with automated testing, linting, drift detection, and policy enforcement baked in.
5. Security & Compliance Automation Automate CIS benchmark enforcement, vulnerability remediation, and infrastructure hardening. Integrate with CyberArk, AWS Secrets Manager, and SSM Parameter Store. Implement policy-as-code using OPA, Gatekeeper, or Conftest. Automate certificate lifecycle management end to end.
6. Observability & Auto-Remediation Connect automation workflows to New Relic and LogicMonitor for telemetry-driven triggers. Build self-healing routines that detect, diagnose, and resolve incidents automatically. Convert operational runbooks into fully automated diagnostic workflows to cut MTTR significantly.
7. ITSM Integration Integrate automation into SymphonyAI-driven ticketing, approval flows, CMDB updates, and change management processes. Build operational runbooks that map directly to ITSM workflows.

Ideal Candidate

1. Strong Automation Architect Profile with cloud-based automation strategy and framework architecture
2. Mandatory (Experience 1) – Must have 8+ years of total experience with the last 6 years focused continuously on hands-on automation, including automation strategy and framework architecture
3. Mandatory (Experience 2) – Must have hands-on expertise building automation using industry automation tools and frameworks.
4. Mandatory (Experience 3) – Must have a proven record designing scalable automation solutions and leading automation initiatives end to end.
5. Mandatory (Experience 4) – Must have deep Terraform knowledge, including reusable module design covering AWS networking, IAM, EKS, ECS, RDS, and security controls — with CI/CD integration (GitHub Actions or Azure DevOps) including automated testing, linting, drift detection, and policy enforcement
6. Mandatory (Experience 5) – Must have solid AWS architecture knowledge, including serverless and event-driven automation (Lambda, Step Functions, Event Bridge, SNS/SQS, S3 triggers, Systems Manager), IAM design, cross-account automation across AWS Organizations, and multi-account networking aligned with CIS, NIST, and AWS Well-Architected standards
7. Mandatory (Experience 6) – Must have experience with security and compliance automation including CIS benchmark enforcement, vulnerability remediation, infrastructure hardening, certificate lifecycle management, and integration with CyberArk, AWS Secrets Manager, and SSM Parameter Store
8. Mandatory (Skill) – Must have proficiency in Python, Bash, or PowerShell for automation scripting, with proven ability to build production-grade automation frameworks end-to-end
9. Mandatory (Title) – Current title must include "Architect". Candidates currently titled Automation Engineer, QA Automation Lead, DevOps Engineer, Cloud Engineer, or other non-architect profiles will not be considered
10. Preferred (Skill 1) – Experience with policy-as-code (OPA, Gatekeeper, Conftest) and IaC testing tools (Molecule, Terratest, Checkov, tfsec)
11. Preferred (Skill 2) – Experience with multi-account AWS automation, service mesh (Istio/Linkerd), and ITSM integration (SymphonyAI or equivalent — ticketing, approval flows, CMDB updates, change management)