Tradelab Technologies - Senior DevOps Engineer - Cloud Infrastructure

Description :

Senior DevOps Engineer (810 years)

Location: Mumbai

Role Summary :

As a Senior DevOps Engineer, you will own end-to-end platform reliability and delivery automation for mission-critical lending systems. Youll architect cloud infrastructure, standardize CI/CD, enforce DevSecOps controls, and drive observability at scale ensuring high availability, performance, and compliance consistent with BFSI standards.

Key Responsibilities :

Platform & Cloud Infrastructure :

- Design, implement, and scale multi-account, multi-VPC cloud architectures on AWS and/or Azure (compute, networking, storage, IAM, RDS, EKS/AKS, Load Balancers, CDN).

- Champion Infrastructure as Code (IaC) using Terraform (and optionally Pulumi/Crossplane) with GitOps workflows for repeatable, auditable deployments.

- Lead capacity planning, cost optimization, and performance tuning across environments.

CI/CD & Release Engineering :

- Build and standardize CI/CD pipelines (Jenkins, GitHub Actions, Azure DevOps, ArgoCD) for microservices, data services, and frontends; enable blue?green/canary releases and feature flags.

- Drive artifact management, environment promotion, and release governance with compliance-friendly controls.

Containers, Kubernetes & Runtime :

- Operate production-grade Kubernetes (EKS/AKS), including cluster lifecycle, autoscaling, ingress, service mesh, and workload security; manage Docker/containerd images and registries.

Reliability, Observability & Incident Management :

- Implement end-to-end monitoring, logging, and tracing (Prometheus, Grafana, ELK/EFK, CloudWatch/Log Analytics, Datadog/New Relic) with SLO/SLI error budgets.

- Establish on-call rotations, run postmortems, and continuously improve MTTR and change failure rate.

Security & Compliance (DevSecOps) :

- Enforce cloud and container hardening, secrets management (AWS Secrets Manager / HashiCorp Vault), vulnerability scanning (Snyk/SonarQube), and policy-as-code (OPA/Conftest).

- Partner with infosec/risk to meet BFSI regulatory expectations for DR/BCP, audits, and data protection.

Data, Networking & Edge :

- Optimize networking (DNS, TCP/IP, routing, OSI layers) and edge delivery (CloudFront/Fastly), including WAF rules and caching strategies.

- Support persistence layers (MySQL, Elasticsearch, DynamoDB) for performance and reliability.

Ways of Working & Leadership :

- Lead cross-functional squads (Product, Engineering, Data, Risk) and mentor junior DevOps/SREs.

- Document runbooks, architecture diagrams, and operating procedures; drive automation-first culture.

Must Have Qualifications :

- 810 years of total experience with 5+ years hands-on in DevOps/SRE roles.

- Strong expertise in AWS and/or Azure, Linux administration, Kubernetes, Docker, and Terraform.

- Proven track record building CI/CD with Jenkins/GitHub Actions/Azure DevOps/ArgoCD.

- Solid grasp of networking fundamentals (DNS, TLS, TCP/IP, routing, load balancing).

- Experience implementing observability stacks and responding to production incidents.

- Scripting in Bash/Python; ability to automate ops workflows and platform tasks.

Good to Have/Preferred :

- Exposure to BFSI/fintech systems and compliance standards; DR/BCP planning.

- Secrets management (Vault), policy-as-code (OPA), and security scanning (Snyk/SonarQube).

- Experience with GitOps patterns, service tiering, and SLO/SLI design.

- Knowledge of CDNs (CloudFront/Fastly) and edge caching/WAF rule authoring.

Education :

- Bachelors/Masters in Computer Science, Information Technology, or related field (or equivalent experience).