Devops Architect

Role & responsibilities

Architectural Design and Implementation

• Design and deploy scalable, highly available, and fault-tolerant systems on AWS.
• Develop and implement cloud infrastructure solutions using AWS services such as EC2, S3, VPC, RDS, Lambda, etc.
• Utilize Infrastructure as Code (IaC) tools like Terraform, CloudFormation, and AWS CDK to automate the provisioning and management of AWS resources.

Kubernetes and Containerization

• Deploy, manage, and scale Kubernetes clusters on AWS (EKS).
• Design container orchestration solutions and manage containerized applications. Implement best practices for Kubernetes resource management, networking, and security.

Observability and Monitoring

• Implement comprehensive monitoring, logging, and alerting solutions using tools like Prometheus, Grafana, ELK Stack, and AWS CloudWatch.
• Develop strategies for proactive performance monitoring and incident response. DevOps and CI/CD
• Build and maintain CI/CD pipelines using tools like Jenkins, GitLab CI, AWS CodePipeline, etc
• Collaborate with development teams to ensure smooth integration and deployment of applications.
• Implement automation scripts and tools to streamline operations and improve efficiency.

Security and Compliance

• Ensure cloud infrastructure security by implementing best practices for IAM, network security, and data protection.
• Conduct regular security assessments and audits to maintain compliance with industry standards and regulations.
• Collaboration and Leadership Work closely with cross-functional teams, including developers, system administrators, and product managers.
• Provide technical guidance and mentorship to junior team members.
• Stay abreast of emerging technologies and industry trends, making recommendations for adoption as appropriate.

Preferred candidate profile

Mandatory Skills 1. AWS Expertise: o Expertise in AWS services and architecture. o Proficiency with Infrastructure as Code (IaC) tools such as Terraform, CloudFormation, and AWS CDK. o Strong knowledge of Kubernetes, Docker, and container management. o Experience with monitoring and observability tools like Prometheus, Grafana, ELK Stack, and AWS CloudWatch. o Solid understanding of CI/CD processes and tools. o Familiarity with security best practices in cloud environments. 2. Security Architecture: o Proven experience in designing and implementing secure cloud architectures. o Ability to assess and enhance the security posture of existing AWS infrastructure. 3. Identity and Access Management (IAM): o Strong understanding of IAM principles and hands-on experience implementing IAM policies and procedures. o Proficient in managing user access, roles, and permissions in AWS environments. 4. Network Security: o Expertise in configuring and managing AWS Virtual Private Clouds (VPCs), security groups, and network ACLs. o Experience in designing and implementing network security controls for AWS. 5. Data Security: o Knowledge of encryption mechanisms for data in transit and at rest in AWS. o Experience in defining and enforcing data classification and handling policies. 6. Scripting and Automation: o Proficient in scripting languages such as Python or Shell scripting for automating security tasks. o Experience with Infrastructure as Code (IaC) tools for automating security configurations. 7. Compliance and Best Practices: o Strong understanding of cloud security best practices, industry standards, and compliance frameworks. o Knowledge of regulatory requirements related to cloud security. 8. Communication and Collaboration: o Excellent verbal and written communication skills. o Ability to collaborate effectively with cross-functional teams, including developers and operations teams. 9. Continuous Learning: o Commitment to staying current with emerging trends, technologies, and best practices in cloud security. Desired Skills • Ability to learn quickly, perform R&D, build POCs and propose end to end solutions. • Exceptionally good communication and interpersonal skills • Experience with Agile/Scrum based project execution.