Sr. DevOps Engineer

ROLE & RESPONSIBILITIES:

We are hiring a Senior DevSecOps / Security Engineer with 8+ years of experience securing AWS cloud, on-prem infrastructure, DevOps platforms, MLOps environments, CI/CD pipelines, container orchestration, and data/ML platforms. This role is responsible for creating and maintaining a unified security posture across all systems used by DevOps and MLOps teams — including AWS, Kubernetes, EMR, MWAA, Spark, Docker, GitOps, observability tools, and network infrastructure.

KEY RESPONSIBILITIES:

1.     Cloud Security (AWS)-

• Secure all AWS resources consumed by DevOps/MLOps/Data Science: EC2, EKS, ECS, EMR, MWAA, S3, RDS, Redshift, Lambda, CloudFront, Glue, Athena, Kinesis, Transit Gateway, VPC Peering.
• Implement IAM least privilege, SCPs, KMS, Secrets Manager, SSO & identity governance.
• Configure AWS-native security: WAF, Shield, GuardDuty, Inspector, Macie, CloudTrail, Config, Security Hub.
• Harden VPC architecture, subnets, routing, SG/NACLs, multi-account environments.
• Ensure encryption of data at rest/in transit across all cloud services.

2.     DevOps Security (IaC, CI/CD, Kubernetes, Linux)-

Infrastructure as Code & Automation Security:

• Secure Terraform, CloudFormation, Ansible with policy-as-code (OPA, Checkov, tfsec).
• Enforce misconfiguration scanning and automated remediation.

CI/CD Security:

• Secure Jenkins, GitHub, GitLab pipelines with SAST, DAST, SCA, secrets scanning, image scanning.
• Implement secure build, artifact signing, and deployment workflows.

Containers & Kubernetes:

• Harden Docker images, private registries, runtime policies.
• Enforce EKS security: RBAC, IRSA, PSP/PSS, network policies, runtime monitoring.
• Apply CIS Benchmarks for Kubernetes and Linux.

Monitoring & Reliability:

• Secure observability stack: Grafana, CloudWatch, logging, alerting, anomaly detection.
• Ensure audit logging across cloud/platform layers.

3.     MLOps Security (Airflow, EMR, Spark, Data Platforms, ML Pipelines)-

Pipeline & Workflow Security:

• Secure Airflow/MWAA connections, secrets, DAGs, execution environments.
• Harden EMR, Spark jobs, Glue jobs, IAM roles, S3 buckets, encryption, and access policies.

ML Platform Security:

• Secure Jupyter/JupyterHub environments, containerized ML workspaces, and experiment tracking systems.
• Control model access, artifact protection, model registry security, and ML metadata integrity.

Data Security:

• Secure ETL/ML data flows across S3, Redshift, RDS, Glue, Kinesis.
• Enforce data versioning security, lineage tracking, PII protection, and access governance.

ML Observability:

• Implement drift detection (data drift/model drift), feature monitoring, audit logging.
• Integrate ML monitoring with Grafana/Prometheus/CloudWatch.

4.     Network & Endpoint Security-

• Manage firewall policies, VPN, IDS/IPS, endpoint protection, secure LAN/WAN, Zero Trust principles.
• Conduct vulnerability assessments, penetration test coordination, and network segmentation.
• Secure remote workforce connectivity and internal office networks.

5.     Threat Detection, Incident Response & Compliance-

• Centralize log management (CloudWatch, OpenSearch/ELK, SIEM).
• Build security alerts, automated threat detection, and incident workflows.
• Lead incident containment, forensics, RCA, and remediation.
• Ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA (as applicable).
• Maintain security policies, procedures, RRPs (Runbooks), and audits.

IDEAL CANDIDATE:

• 8+ years in DevSecOps, Cloud Security, Platform Security, or equivalent.
• Proven ability securing AWS cloud ecosystems (IAM, EKS, EMR, MWAA, VPC, WAF, GuardDuty, KMS, Inspector, Macie).
• Strong hands-on experience with Docker, Kubernetes (EKS), CI/CD tools, and Infrastructure-as-Code.
• Experience securing ML platforms, data pipelines, and MLOps systems (Airflow/MWAA, Spark/EMR).
• Strong Linux security (CIS hardening, auditing, intrusion detection).
• Proficiency in Python, Bash, and automation/scripting.
• Excellent knowledge of SIEM, observability, threat detection, monitoring systems.
• Understanding of microservices, API security, serverless security.
• Strong understanding of vulnerability management, penetration testing practices, and remediation plans.

EDUCATION:

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications (AWS Security Specialty, CISSP, CEH, CKA/CKS) are a plus.

PERKS, BENEFITS AND WORK CULTURE:

• Competitive Salary Package
• Generous Leave Policy
• Flexible Working Hours
• Performance-Based Bonuses
• Health Care Benefits

Must have skills:

● Experience: 6+ years of hands-on experience in Cloud Platform Engineering, DevOps, or Site Reliability Engineering (SRE).

● Multi-Cloud Infrastructure: Proficiency in architecting, deploying, and maintaining cloud infrastructure across GCP and Azure (VPC, IAM, Cloud Storage/Blob, Cloud Run/Functions, Pub/Sub, GKE/AKS, Cloud SQL).

● Container Orchestration: Extensive experience with Kubernetes (GKE or AKS) and Docker for managing and scaling containerized applications.

● Infrastructure as Code (IaC) & Automation: Strong proficiency using Terraform along with Python and Bash/Shell scripting for infrastructure automation.

● CI/CD Automation: Experience building and managing CI/CD pipelines using Jenkins, GitHub Actions, GitLab CI, or ArgoCD.

● Observability & Monitoring: Experience using tools such as Datadog, Prometheus, Grafana, or Splunk for monitoring, logging, and alerting.

● Secrets & Security Management: Experience managing sensitive credentials using HashiCorp Vault, GCP Secret Manager, or Azure Key Vault.

● Architecture & Networking: Understanding of microservices architecture, service-oriented architecture, event-driven systems (Pub/Sub), and cloud networking principles.

Good to have skills:

● AI/ML Infrastructure: Familiarity with infrastructure for ML workloads such as Vertex AI, Azure Machine Learning, GPU node pools, or Vector Databases.

● Advanced Kubernetes: Working knowledge of Kyverno for policy management, Karpenter for cluster autoscaling, or building Kubernetes operators using Go.

● Multi-Cloud Management: Familiarity with Crossplane for managing multi-cloud environments and building cloud-native platforms.

● Cloud Reliability & FinOps: Understanding of disaster recovery, fault tolerance, and cost allocation practices through resource tagging.

● Domain & Compliance: Experience working in regulated environments such as BFSI or Insurance.

Role Overview:

As a DevOps Engineer (L2), you will play a key role in designing, implementing, and optimizing infrastructure. You will take ownership of automating processes, improving system reliability, and supporting the development lifecycle.

Key Responsibilities:

• Design and manage scalable, secure, and highly available cloud infrastructure.
• Lead efforts in implementing and optimizing CI/CD pipelines.
• Automate repetitive tasks and develop robust monitoring solutions.
• Ensure the security and compliance of systems, including IAM, VPCs, and network configurations.
• Troubleshoot complex issues across development, staging, and production environments.
• Mentor and guide L1 engineers on best practices.
• Stay updated on emerging DevOps tools and technologies.
• Manage cloud resources efficiently using Infrastructure as Code (IaC) tools like Terraform and AWS CloudFormation.

Qualifications:

• Bachelor’s degree in Computer Science, IT, or a related field.
• Proven experience with CI/CD pipelines and tools like Jenkins, GitLab, or Azure DevOps.
• Advanced knowledge of cloud platforms (AWS, Azure, or GCP) with hands-on experience in deployments, migrations, and optimizations.
• Strong expertise in containerization (Docker) and orchestration tools (Kubernetes).
• Proficiency in scripting languages like Python, Bash, or PowerShell.
• Deep understanding of system security, networking, and load balancing.
• Strong analytical skills and problem-solving mindset.
• Certifications (e.g., AWS Certified Solutions Architect, Kubernetes Administrator) are a plus.

What We Offer:

• Opportunity to work with a cutting-edge tech stack in a product-first company.
• Collaborative and growth-oriented environment.
• Competitive salary and benefits.
• Freedom to innovate and contribute to impactful projects.

• Configure, optimize, document, and support of the infrastructure components of software products (which are hosted in collocated facilities and cloud services such as AWS)
• Design and build tools and frameworks that support deployment and management and platforms
• Design, build, and deliver cloud computing solutions, hosted services, and underlying software infrastructures
• Build core functionality of our cloud-based platform product, deliver secure, reliable services and construct third party integrations
• Assist in coaching application developers on proper DevOps techniques for building scalable applications in the microservices paradigm
• Foster collaboration with software product development and architecture teams to ensure releases are delivered with repeatable and auditable processes
• Support and troubleshoot scalability, high availability, performance, monitoring, backup, and restores of different environments
• Work independently across multiple platforms and applications to understand dependencies
• Evaluate new tools, technologies, and processes to improve speed, efficiency, and scalability of continuous integration environments
• Design and architect solutions for existing client-facing applications as they are moved into cloud environments such as AWS
• Competencies
• Full understanding of scripting and automated process management in languages such as Shell, Ruby and/ or Python
• Working Knowledge SCM tools such as Git, GitHub, Bitbucket, etc.
• Working knowledge of Amazon Web Services and related APIs
• Ability to deliver and manage web or cloud-based services
• General familiarity with monitoring tools
• General familiarity with configuration/provisioning tools such as Terraform
• Experience
• Experience working within an Agile type environment
• 4+ years of experience with cloud-based provisioning (Azure, AWS, Google), monitoring, troubleshooting, and related DevOps technologies
• 4+ years of experience with containerization/orchestration technologies like Rancher, Docker and Kubernetes

• Solid understanding of IP network and TCP/IP
• Minimum of 7+ years’ work experience in IT
• Minimum of 4+ years experience as DevOps Enginneer
• Good interpersonal skills and communication written and oral.

• Provision Dev Test Prod Infrastructure as code using IaC (Infrastructure as Code)
• Good knowledge on Terraform
• In-depth knowledge of security and IAM / Role Based Access Controls in Azure, management of Azure Application/Network Security Groups, Azure Policy, and Azure Management Groups and Subscriptions.
• Experience with Azure and GCP compute, storage and networking (we can also look for GCP )
• Experience in working with ADLS Gen2, Databricks and Synapse Workspace
• Experience supporting cloud development pipelines using Git, CI/CD tooling, Terraform and other Infrastructure as Code tooling as appropriate
• Configuration Management (e.g. Jenkins, Ansible, Git, etc...)
• General automation including Azure CLI, or Python, PowerShell and Bash scripting
• Experience with Continuous Integration/Continuous Delivery models
• Knowledge of and experience in resolving configuration issues
• Understanding of software and infrastructure architecture
• Experience in Paas, Terraform and AKS
• Monitoring, alerting and logging tools, and build/release processes Understanding of computing technologies across Windows and Linux

As a DevOps Engineer, you are responsible for setting up and maintaining the GIT repository, DevOps tools like Jenkins, UCD, Docker, Kubernetes, Jfrog Artifactory, Cloud monitoring tools, and Cloud security.

• Set up, configure, and maintain GIT repos, Jenkins, UCD, etc. for multi-hosting cloud environments.
• Architect and maintain the server infrastructure in AWS. Build highly resilient infrastructure following industry best practices.
• Work on Docker images and maintain Kubernetes clusters.
• Develop and maintain the automation scripts using Ansible or other available tools.
• Maintain and monitor cloud Kubernetes Clusters and patching when necessary.
• Work on Cloud security tools to keep applications secured.
• Participate in software development lifecycle, specifically infra design, execution, and debugging required to achieve a successful implementation of integrated solutions within the portfolio.
• Have the necessary technical and professional expertise.

• Minimum 5-12 years of experience in the IT industry.
• Expertise in implementing and managing DevOps CI/CD pipeline.
• Experience in DevOps automation tools. Well versed with DevOps Frameworks, and Agile.
• Working knowledge of scripting using Shell, Python, Terraform, Ansible, Puppet, or chef.
• Experience and good understanding of any Cloud like AWS, Azure, or Google cloud.
• Knowledge of Docker and Kubernetes is required.
• Proficient in troubleshooting skills with proven abilities in resolving complex technical issues.
• Experience working with ticketing tools.
• Middleware technologies knowledge or database knowledge is desirable.
• Experience with Jira is a plus.

A wholesome opportunity in a fast-paced environment that will enable you to juggle between concepts, yet maintain the quality of content, interact, and share your ideas and have loads of learning while at work. Work with a team of highly talented young professionals and enjoy the benefits of being here.

It  is a rapidly growing fintech SaaS firm that propels business growth while focusing on human motivation. Backed by Giift and Apis Partners Growth Fund II,offers a suite of three products - Plum, Empuls, and Compass. Works with more than 2000 clients across 10+ countries and over 2.5 million users. Headquartered in Bengaluru, It  is a 300+ strong team with four global offices in San Francisco, Dublin, Singapore, New Delhi.

We look forward to connecting with you. As you may take time to review this opportunity, we will wait for a reasonable time of around 3-5 days before we screen the collected applications and start lining up job discussions with the hiring manager. We however assure you that we will attempt to maintain a reasonable time window for successfully closing this requirement. The candidates will be kept informed and updated on the feedback and application status.

• 5+ years hands-on experience with designing, deploying and managing core AWS services and infrastructure
• Proficiency in scripting using Bash, Python, Ruby, Groovy, or similar languages 
• Experience in source control management, specifically with Git
• Hands-on experience in Unix/Linux and bash scripting
• Experience building, managing Helm-based build and release CI-CD pipelines for Kubernetes platforms (EKS, Openshift, GKE) 
• Strong experience with orchestration and config management tools such as Terraform, Ansible or Cloudformation  
• Ability to debug, analyze issues leveraging tools like App Dynamics, New Relic and Sumologic 
• Knowledge of Agile Methodologies and principles 
• Good writing and documentation skills
• Strong collaborator with the ability to work well with core teammates and our colleagues across STS

• Work with developers to build out CI/CD pipelines, enable self-service build tools and reusable deployment jobs. Find, explore, and advocate for new technologies for enterprise use.
• Automate the provisioning of environments
• Promote new DevOps tools to simplify the build process and entire Continuous Delivery.
• Manage a Continuous Integration and Deployment environment.
• Coordinate and scale the evolving build and cloud deployment systems across all product development teams.
• Work independently, with, and across teams. Establishing smooth running. environments are paramount to your success, and happiness
• Encourage innovation, implementation of cutting-edge technologies, inclusion, outside-of-the[1]box thinking, teamwork, self-organization, and diversity.

Technical Skills

• Experience with AWS multi-region/multi-AZ deployed systems, auto-scaling of EC2 instances, CloudFormation, ELBs, VPCs, CloudWatch, SNS, SQS, S3, Route53, RDS, IAM roles, security groups, cloud watch
• Experience in Data Visualization and Monitoring tools such as Grafana and Kibana
• Experienced in Build and CI/CD/CT technologies like GitHub, Chef, Artifactory, Hudson/Jenkins
• Experience with log collection, filter creation, and analysis, builds, and performance monitoring/tuning of infrastructure.
• Automate the provisioning of environments pulling strings with Puppet, cooking up some recipes with Chef, or through Ansible, and the deployment of those environments using containers, like Docker or Rocket: (have at least some configuration management tool through some version control).

Qualifications:

• B.E/ B.Tech/ M.C.A in Computer Science, Electronics and Communication Engineering, Electronics and Electrical Engineering.
• Minimum 60% in Graduation and Post-Graduation.
• Good verbal and written communication skills