Destm LLC

We are looking for a highly skilled Senior DevOps Engineer with strong expertise in GCP and Azure (primary) and working knowledge of AWS and Digital Ocean. The ideal candidate will be capable of managing cloud infrastructure, DevOps workflows, networking, system administration, and security operations. You should also have hands-on experience with Kafka, and preferably familiarity with Fortinet and Sophos security products. A strong understanding of SOC 2, GDPR, and ISO 27001 compliance is required. What You Will Do Cloud & Infrastructure -Architect, deploy, and maintain scalable and secure infrastructure primarily on GCP and Azure, with additional support for AWS and Digital Ocean. - Manage VPCs, subnets, routing, load balancers, peering, hybrid cloud setups, and NAT configurations. DevOps, Automation & CI/CD - Build and maintain CI/CD pipelines using tools like GitLab CI, GitHub Actions, Jenkins, ArgoCD, or Spinnaker. - Automate infrastructure using Terraform, Helm, Ansible, and Bash/Python. - Manage containerized workloads using Docker & Kubernetes (GKE, AKS, EKS). System Administration - Administer Linux servers (Ubuntu/CentOS/RHEL), patching, performance tuning, and hardening. - Manage user administration, RBAC, file systems, storage, backup/restore, and logging. Networking & Security - Configure and manage firewalls, VPNs, IDS/IPS, WAF, DNS, SSL/TLS, and network-level security controls. - Preferred familiarity with Fortinet FortiGate and Sophos XG security appliances. - Implement IAM, identity federation, service accounts, secrets management, and zero-trust principles. - Perform vulnerability assessments, patch management, and security hardening. Kafka & Messaging Systems - Install, configure, and manage Apache Kafka clusters. - Handle Kafka topics, partitions, brokers, ACLs, monitoring, scaling, and backups. - Troubleshoot performance issues and optimize streaming pipelines. Compliance, Governance & Monitoring - Ensure infrastructure meets SOC 2, GDPR, and ISO 27001 controls. - Maintain policies, evidence collection, asset tracking, and audit readiness. - Set up monitoring and observability using Prometheus, Grafana, Elastic Stack, Cloud Monitoring, Datadog, etc. Collaboration & Incident Response - Work closely with engineering teams for secure and reliable deployments. - Lead incident response, root-cause analysis, and post-mortems. - Maintain high-quality documentation across systems and processes. What We’re Looking For - Strong cloud expertise: GCP (primary), Azure (primary), AWS, Digital Ocean. - Deep knowledge of networking, Linux system administration, and cloud security. - Hands-on experience with Kafka administration and troubleshooting. - Proficiency in Kubernetes, Docker, and Infrastructure-as-Code (Terraform, Helm). - Experience with CI/CD, automation, scripting (Python, Bash, Shell). - Knowledge of firewalls, VPNs, WAFs, IDS/IPS, preferably Fortinet/Sophos. - Strong understanding of SOC2, GDPR, ISO 27001 compliance requirements. - Ability to perform incident response, monitoring, and performance optimization. - Strong troubleshooting skills and ability to work independently. Nice to Have: - Certifications: GCP Professional DevOps/Cloud Architect, Azure Administrator/Architect, AWS Security Specialty, etc. - Experience with SIEM tools (Splunk, ELK/Elastic Security, Wazuh). - Exposure to zero-trust architecture and SASE platforms. - Knowledge of database administration (MySQL/PostgreSQL/NoSQL). - Experience with HashiCorp tools (Vault, Nomad, Consul). Why Join Us: - Ownership of critical infrastructure and security initiatives. - Opportunity to work with modern DevOps & cloud technologies. - Supportive environment focused on growth, learning, and innovation. - Competitive compensation and career development opportunities. Job Type: Full-time Pay: ₹700,000.00 - ₹1,800,000.00 per year Benefits: Health insurance Internet reimbursement Work from home Ability to commute/relocate: Mohali, Punjab: Reliably commute or planning to relocate before starting work (Required) Application Question(s): How soon you can start? Work Location: In person