DevSecOps Engineer (AWS, GCP & FinOps)

Experience : 3- 6 Years

Location : Noida

Job Overview :

Pelocal Fintech is seeking a highly skilled and proactive DevSecOps Engineer with expertise in Amazon Web Services (AWS), Google Cloud Platform (GCP), Kubernetes, Cloud Security, Infrastructure Automation, and FinOps (Cloud Cost Management). The ideal candidate will be responsible for designing, implementing, automating, securing, and optimizing cloud infrastructure supporting mission-critical FinTech, Payments, Conversational Commerce, AI, and Enterprise SaaS platforms.

This role requires strong expertise in cloud architecture, CI/CD, Infrastructure as Code (IaC), container orchestration, monitoring, security, and cloud cost optimization. You will work closely with Product, Engineering, Security, AI, and Delivery teams to ensure scalability, reliability, security, compliance, and cost efficiency across all environments.

Key Responsibilities :

Cloud Infrastructure & Architecture :

- Design, deploy, and maintain highly available, scalable, and secure cloud infrastructure across AWS and GCP.

- Architect and manage multi-environment deployments including Development, UAT, Production, and Disaster Recovery environments.

- Design cloud-native and microservices-based architectures.

- Optimize infrastructure for performance, availability, security, and operational efficiency.

- Manage cloud networking components including VPCs, Subnets, VPNs, Load Balancers, NAT Gateways, DNS, CDN, and Firewall configurations.

- Establish Disaster Recovery (DR) and Business Continuity strategies.

DevSecOps & Automation :

- Build and maintain CI/CD pipelines for automated application deployment and release management.

- Implement Infrastructure as Code (IaC) using Terraform, CloudFormation, and other automation tools.

- Automate infrastructure provisioning, configuration management, patching, and deployment processes.

- Integrate security scanning, vulnerability assessment, and compliance checks within CI/CD pipelines.

- Implement GitOps and Infrastructure Automation best practices.

- Improve deployment velocity while maintaining security and compliance standards.

Containerization & Kubernetes :

- Deploy, manage, and optimize containerized applications using Docker and Kubernetes.

- Manage Kubernetes clusters on AWS EKS and GCP GKE.

- Configure autoscaling, ingress controllers, service mesh, and cluster networking.

- Implement container security best practices and runtime monitoring.

- Troubleshoot and optimize Kubernetes workloads for performance and reliability.

Security & Compliance :

- Implement DevSecOps practices across the Software Development Lifecycle (SDLC).

- Manage Identity and Access Management (IAM), RBAC, and Privileged Access Controls.

- Implement Secrets Management and Key Management using AWS KMS, GCP KMS, and Secret Manager.

- Configure WAF, DDoS protection, security monitoring, and threat detection solutions.

- Conduct vulnerability assessments and security reviews.

- Ensure compliance with industry security standards and organizational policies.

- Work closely with security auditors during VAPT and compliance audits.

Monitoring, Observability & Reliability Engineering :

- Implement centralized monitoring, logging, and observability frameworks.

- Configure CloudWatch, Cloud Monitoring, Prometheus, Grafana, ELK/OpenSearch, and alerting systems.

- Perform root cause analysis and incident response activities.

- Participate in production support and on-call rotations.

- Drive continuous improvements in system reliability and uptime.

- Create operational dashboards and automated health monitoring systems.

Database & Data Platform Management :

- Manage cloud databases including Aurora, RDS, Cloud SQL, DynamoDB, Redis, and BigQuery.

- Implement backup, replication, disaster recovery, and high-availability strategies.

- Optimize database performance, security, and cost.

- Support data platform requirements for analytics, reporting, and AI workloads.

FinOps & Cloud Cost Management :

- Drive cloud cost optimization initiatives across AWS and GCP environments.

- Monitor, analyze, and optimize cloud expenditures while maintaining performance and availability.

- Implement FinOps best practices including budgeting, forecasting, cost allocation, chargeback/showback, and governance.

- Identify opportunities for savings through Reserved Instances, Savings Plans, Spot Instances, Committed Use Discounts, storage lifecycle policies, and resource rightsizing.

- Develop dashboards and reports to track cloud utilization, cost trends, and optimization opportunities.

- Define and enforce resource tagging standards and ownership policies.

- Establish automated alerts and controls to prevent unexpected cloud spending.

- Work closely with Engineering and Finance teams to maximize cloud ROI.

Collaboration & Leadership :

- Collaborate with Product, Engineering, Security, and Delivery teams to support business objectives.

- Participate in architecture reviews and technical discussions.

- Create and maintain infrastructure documentation, operational runbooks, and security procedures.

- Mentor junior engineers and promote DevSecOps best practices across teams.

- Stay updated with emerging technologies and recommend improvements to infrastructure and processes.

Required Qualifications :

- Bachelor's Degree in Computer Science, Information Technology, Engineering, or a related field.

- 3+ years of experience in DevOps, DevSecOps, Site Reliability Engineering (SRE), or Cloud Engineering roles.

- Proven experience managing production environments on AWS and GCP.

- Strong understanding of cloud architecture, networking, security, and automation principles.

- Experience supporting enterprise-scale, customer-facing applications.

Technical Skills :

AWS Services :

- Strong hands-on experience with EC2, ECS / EKS, Lambda, S3, RDS / Aurora, CloudWatch, Route53, IAM, VPC, CloudFormation, AWS KMS, AWS WAF, AWS Cost Explorer, AWS Budgets, AWS Organizations.

Google Cloud Platform (GCP) :

- Strong hands-on experience with Compute Engine, GKE, Cloud Run, Cloud Functions, Cloud Storage, Cloud SQL, BigQuery, Pub/Sub, Cloud Monitoring, IAM, Secret Manager, VPC, Cloud Billing, Billing Export to BigQuery.

Infrastructure as Code (IaC) :

Containerization & Orchestration :

- Docker

- Kubernetes

CI/CD Tools :

- Bitbucket Pipelines

Programming & Automation :

- Strong scripting experience in Python, Bash Shell Scripting, PowerShell (Preferred).

Monitoring & Observability :

- Experience with Prometheus, Grafana, ELK / OpenSearch, CloudWatch, GCP Monitoring Suite.

Security :

- IAM & RBAC

- Vulnerability Management

- Security Automation

- Network Security

- Secrets Management

- Encryption at Rest & In Transit

- Compliance Frameworks

FinOps & Cost Optimization :

- AWS Cost Explorer

- AWS Budgets

- Cost & Usage Reports (CUR)

- Trusted Advisor

- GCP Cost Management

- BigQuery Billing Analytics

- Cost Allocation & Governance

- FinOps Best Practices

Preferred Certifications :

- AWS Certified Solutions Architect - Professional

- AWS Certified DevOps Engineer - Professional

- Google Professional Cloud Architect

- Google Professional Cloud DevOps Engineer

- Certified Kubernetes Administrator (CKA)

- Certified Kubernetes Security Specialist (CKS)

- FinOps Certified Practitioner (FOCP)