Job
Description
About the Role As a Site Reliability Engineer in the SRE Audit & Compliance Enablement team, you will play a key role in ensuring PhonePe s infrastructure and operations are always audit-ready. You ll combine technical depth with process rigor to build a sustainable, scalable, and proactive approach to audit readiness spanning systems, backups, documentation, and control validation. Roles and Responsibilities Audit & Compliance Enablement Create and maintain reusable evidence artifacts (e.g., access logs, architectural diagrams, control narratives). Represent SRE systems during audit walkthroughs and demos. Collaborate with Compliance, InfoSec, and SRE domain owners for control gap closures and evidence gathering. Backup & Archival Infrastructure Own and operate infrastructure responsible for backups of databases, application/system logs, and audit logs. Perform scheduled validations including data restores and integrity checks. Maintain and update a comprehensive catalog of backup datasets and their retention policies. Generate audit-friendly backup status reports and recovery evidence. Infra Scans & Coordination Support scheduling and execution of VAPT, configuration reviews, access reviews, and internal audits. Track issues to closure by working with SRE and platform teams. Automation & Tooling Build scripts and tools to automate evidence generation and health checks (e.g., backup summaries, uptime reports). Maintain audit SOPs, checklists, and internal documentation to drive repeatability and consistency. Skills Required 4-7 years of experience in SRE, Infrastructure, or Platform roles with strong Linux and cloud fundamentals. Hands-on experience managing or validating backup and archival systems. Familiarity with log management, monitoring, and observability platforms. Exposure to compliance and audit requirements (e.g., ISO 27001, PCI-DSS, SOC 2). Strong scripting skills in Shell/Python/Perl and comfort with automation tooling (e.g., Ansible, Terraform). Excellent documentation and collaboration skills. Preferred Qualifications Experience working closely with InfoSec or Compliance teams on audits or certification cycles. Exposure to enterprise backup and DR systems. Prior ownership of critical infra components with clear SLAs. Certifications in cloud platforms, security, or compliance frameworks.
