Senior Platform Engineer — AWS, DevOps & Cloud Infrastructure

# Senior Platform Engineer — AWS, DevOps & Cloud Infrastructure

Company: Triaxa

Location: Remote / Hybrid (India timezone preferred)

Employment Type: Full-time

Experience: 6+ years

Role Type: Hands-on Individual Contributor / Infrastructure Owner

About the Role

Triaxa is looking for a highly experienced, hands-on **Senior Platform Engineer** to independently manage, secure, automate, and scale our AWS cloud infrastructure.

The ideal candidate must have strong practical experience in AWS infrastructure management, DevOps, Terraform, Kubernetes, CI/CD, Linux administration, networking, cloud security, and production operations.

This is an infrastructure ownership role, not just a deployment or monitoring position. The engineer will be responsible for implementing infrastructure architecture, managing multiple environments, troubleshooting complex technical issues, maintaining security controls, and ensuring production readiness.

The candidate should be comfortable working independently with developers, architects, and technical leadership in a fast-moving environment.

Key Responsibilities

1. AWS Cloud Infrastructure Management

- Manage multiple AWS accounts and DEV, STG, and PROD environments.

- Provision, configure, maintain, and troubleshoot EC2, VPC, EKS, ECR, load balancers, security groups, NAT gateways, route tables, and related AWS services.

- Implement secure VPC networking, subnets, private/public network segregation, and controlled inbound/outbound traffic.

- Manage AWS IAM roles, policies, instance profiles, IAM Identity Center, permission sets, and cross-account access.

- Maintain infrastructure availability, performance, security, and operational efficiency.

2. Infrastructure as Code & Automation

- Strong hands-on expertise in Terraform.

- Build and maintain reusable Terraform modules for AWS infrastructure.

- Implement automated provisioning for DEV, STG, and PROD.

- Manage Terraform state, environment configurations, remote backends, and infrastructure dependencies.

- Implement secure Terraform deployment roles and approval processes.

- Prevent configuration drift and reduce manual infrastructure changes.

3. Kubernetes, Docker & Linux

- Deploy, configure, manage, and troubleshoot Amazon EKS clusters.

- Manage Kubernetes deployments, services, ingress, configurations, secrets, storage, autoscaling, and workload permissions.

- Troubleshoot Docker containers, networking, volumes, images, and runtime failures.

- Strong Linux administration, performance tuning, patching, and troubleshooting capabilities.

- Investigate server, application, network, and resource-related failures.

4. CI/CD, Jenkins & GitHub

- Build, maintain, and secure CI/CD pipelines using Jenkins and GitHub Actions.

- Configure Jenkins controllers, agents, plugins, credentials, and AWS integrations securely.

- Implement CI/CD deployment workflows for multiple environments.

- Manage GitHub repository integrations, deployment credentials, environment protections, and access permissions.

- Implement build validations, approval gates, automated deployments, rollback, and release procedures.

- Secure CI/CD pipelines against credential leakage, unauthorized deployments, and supply-chain risks.

5. AWS Security & Identity Management

- Implement least-privilege IAM policies and secure access management.

- Manage AWS IAM Identity Center, permission sets, security groups, and privileged access.

- Configure AWS Secrets Manager, KMS, encryption, credential rotation, and secure secret handling.

- Implement and maintain AWS CloudTrail, CloudWatch, GuardDuty, Security Hub, and appropriate security controls.

- Investigate suspicious AWS activities, permission changes, unusual logins, and infrastructure security incidents.

- Harden EC2 instances, Jenkins, Linux servers, Kubernetes environments, and administrative access.

- Implement secure onboarding, offboarding, and access revocation procedures.

- Support incident containment, remediation, infrastructure recovery, and post-incident security improvements.

6. Networking, DNS & SMTP Infrastructure

- Strong understanding of TCP/IP, DNS, routing, firewalls, NAT, VPN, and network troubleshooting.

- Manage public/private IP addressing, Elastic IPs, network security, and controlled egress.

- Support AWS networking for high-volume outbound email infrastructure.

- Work with SMTP architects to implement IP allocation, reverse DNS (PTR), HELO/EHLO alignment, and related network configurations.

- Support infrastructure setup and operations for transactional and promotional email environments.

- Configure DNS records, including A, MX, SPF, DKIM, and DMARC, according to approved requirements.

- Familiarity with SMTP servers and mail transfer agents is advantageous.

7. Monitoring, Reliability & Incident Management

- Configure centralized logging, metrics, monitoring dashboards, and alerts.

- Implement monitoring using CloudWatch, Prometheus, Grafana, or equivalent solutions.

- Troubleshoot production infrastructure, application connectivity, network issues, and deployment failures.

- Perform root-cause analysis and implement permanent corrective actions.

- Establish backup procedures, disaster recovery plans, and tested restoration processes.

- Maintain operational runbooks, recovery documentation, and infrastructure inventories.

- Ensure infrastructure reliability, security, and operational readiness.

8. Infrastructure Cost Optimization

- Monitor AWS service utilization and infrastructure spending.

- Identify unused or oversized infrastructure resources.

- Optimize EC2, EKS, networking, storage, and related AWS costs.

- Implement AWS Budgets, tagging strategies, cost monitoring, and alerts.

- Identify opportunities to reduce unnecessary CI/CD infrastructure and GitHub Actions costs.

9. Infrastructure Ownership & Collaboration

- Independently manage assigned infrastructure projects from design implementation through deployment and operations.

- Translate infrastructure architecture and technical requirements into working cloud implementations.

- Collaborate with application developers, SMTP architects, and engineering leadership.

- Maintain up-to-date infrastructure diagrams, Terraform repositories, runbooks, and access documentation.

- Proactively identify security risks, operational weaknesses, performance bottlenecks, and automation opportunities.

- Provide clear technical updates, implementation evidence, and documented handovers.

Mandatory Technical Skills

Candidates must demonstrate strong hands-on experience with:

- AWS: EC2, VPC, EKS, ECR, IAM, IAM Identity Center, CloudWatch, CloudTrail, Secrets Manager, KMS, Route 53, and load balancing.

- Infrastructure as Code: Terraform, including modules, remote state management, and environment provisioning.

- Containers: Docker and Kubernetes, preferably Amazon EKS.

- CI/CD: Jenkins, GitHub Actions, secure deployment pipelines, and release automation.

- Operating Systems: Linux administration, shell scripting, system troubleshooting, and server hardening.

- Networking: TCP/IP, DNS, routing, NAT, VPN, security groups, firewalls, and network troubleshooting.

- Cloud Security: Least-privilege IAM, secrets management, audit logging, vulnerability remediation, and secure administrative access.

- Monitoring: CloudWatch, centralized logging, alerting, and incident investigation.

- Automation: Bash, Python, or equivalent scripting experience.

- Operations: Production incident management, backup/recovery, documentation, and independent infrastructure ownership.

Good to Have

- Experience managing SMTP infrastructure or high-volume email delivery platforms.

- Knowledge of KumoMTA, Postfix, or other mail transfer agents.

- Experience with AWS BYOIP, Elastic IPs, reverse DNS, and SMTP network configurations.

- Experience with Prometheus, Grafana, ELK, or Datadog.

- Experience implementing AWS multi-account security and governance.

- Familiarity with AWS Organizations, Service Control Policies, and AWS cost optimization.

- Experience recovering compromised infrastructure and implementing security remediation.

- AWS certifications such as Solutions Architect, DevOps Engineer Professional, or Security Specialty.

Ideal Candidate Profile

- Has 6+ years of relevant experience, with substantial hands-on AWS production infrastructure responsibility.

- Can independently manage multiple AWS environments.

- Has strong practical troubleshooting abilities rather than only theoretical knowledge.

- Understands infrastructure security and applies least-privilege access by default.

- Has implemented Terraform, Kubernetes, Jenkins, and CI/CD systems in real projects.

- Can investigate complex infrastructure issues and resolve them with minimal supervision.

- Writes clear documentation and follows disciplined change-management practices.

- Demonstrates strong ownership, accountability, and communication skills.

- Is comfortable working in an early-stage technology company where infrastructure engineering responsibilities are broad.

What Success Looks Like

- Secure, stable, and well-maintained AWS environments.

- Infrastructure consistently managed using Terraform.

- Reliable Kubernetes workloads and automated CI/CD pipelines.

- Properly configured IAM roles, access controls, secrets management, and audit logging.

- Proactive monitoring, incident response, and tested recovery procedures.

- Reduced infrastructure costs, manual intervention, and operational risks.

- Complete infrastructure documentation and repeatable deployment procedures.

- Independent ownership of Triaxa's day-to-day cloud infrastructure operations.

Hiring Process

Shortlisted candidates will undergo a hands-on technical evaluation covering AWS infrastructure, Terraform, Kubernetes, IAM security, Jenkins/GitHub CI/CD, Linux troubleshooting, and real-world incident-response scenarios.

• We are specifically looking for a hands-on engineer who has independently built and operated production infrastructure, rather than a candidate whose experience is limited to monitoring, ticket handling, or coordinating deployments.