AWS Cloud DevOps Engineer IaC ECS Fargate And Observability

Zensar Technologies; Pune District; On-site; INR 3,800,000 - 5,800,000; Full time

Job summary

Zensar Technologies in Pune is seeking an AWS Cloud/DevOps Engineer to design and run the email gateway platform across multiple AZs. You will build environments via IaC, create CI/CD pipelines with security testing, and own identity, encryption, secret rotation, and autoscaling for peak traffic.

You will lead DevOps decisions, mentor engineers, and write runbooks for post-go-live operations, collaborating with security and network teams to ensure platform integrity.

Qualifications

• 7–10 years of relevant cloud/DevOps experience with AWS deployments.
• Educational background in BE/B.Tech/MCA or equivalent.
• Experience owning DevOps track decisions and mentoring engineers.

Responsibilities

• Provision API Gateway, ECS Fargate, DynamoDB and S3 via IaC.
• Set up CI/CD pipelines with security scanning and staged releases.
• Implement identity, encryption, secret rotation, and autoscaling.
• Develop runbooks and lead platform decisions with client teams.
• Mentor engineers and enforce IaC, pipelines and security practices.

Skills

AWS Cloud / DevOps

ECS Fargate

Terraform / AWS CDK

CI/CD pipelines

IAM / KMS / Secrets Manager

Monitoring / Alerting

OpenTelemetry / X-Ray

AI tooling for infra

Education

BE/B.Tech/MCA or equivalent

Tools

Terraform

AWS CDK

Git

Route 53 / TLS

CloudWatch / CloudTrail

Job description

Job Description:

We are seeking an AWS Cloud / DevOps Engineer to build and run the platform for an email gateway that runs across multiple availability zones. It sits behind an edge CDN/WAF and uses API Gateway, private networking and containers on ECS Fargate. The engineer will:

• build the dev, test and prod environments entirely through infrastructure-as-code


• set up CI/CD pipelines with security scanning, contract tests and staged releases


• own identity, encryption, secret rotation, monitoring, alerting, and autoscaling sized for peak volumes

The engineer will follow the clients existing platform standards and work with security and network teams on reviews and approvals. The role also leads technical decisions on the DevOps track, mentors engineers, and writes the runbooks the support team will use after go-live.

Responsibilities

Infrastructure

• Provision API Gateway, VPC Link, internal ALB, ECS Fargate, DynamoDB, SQS, EventBridge, AppConfig and S3 using Terraform or AWS CDK


• Configure Route 53 domains, certificates and edge integration


• Set up multi-AZ autoscaling and warm capacity for peak traffic


• Configure VPC endpoints for AWS services and controlled egress to the email provider API

CI/CD & Security

• Build pipelines with SAST, dependency and image scanning, automated tests and staged releases


• Implement Cognito machine-to-machine authentication, least-privilege IAM, KMS encryption and secret rotation


• Apply FinOps tagging across all resources

Observability & Operations

• Build CloudWatch dashboards and alarms for latency, errors and DLQ depth


• Enable tracing with ADOT/X-Ray and account auditing with CloudTrail


• Write runbooks for email provider outages, DLQ replay, configuration rollback and credential rotation

Leadership

• Lead the DevOps workstream and agree platform decisions with client teams


• Mentor engineers on IaC, pipeline and security best practices

Qualifications

Required Skills & Competencies

• Strong Hands-on AWS cloud/DevOps engineering with ECS Fargate, containerisation, API Gateway, VPC networking, private connectivity, load balancing and DNS/TLS.


• Infrastructure as code with Terraform or AWS CDK, Git-based reviews and automated environment provisioning.


• CI/CD for Node.js / TypeScript services, security scanning, controlled releases and rollback.


• AWS IAM, KMS, Secrets Manager, DynamoDB, SQS/DLQ, configuration management and operational recovery.


• CloudWatch, CloudTrail and distributed tracing using ADOT/OpenTelemetry or X-Ray; experience implementing actionable alerts and operational dashboards.


• Hands-on use of AI coding tools for infrastructure or pipeline development with validation, least-privilege review and protection of sensitive configuration.

Good-to-Have

• Akamai WAF, Cognito M2M, AppConfig and OpenSearch/ELK; retail peak-traffic readiness.


• AWS DevOps Engineer - Professional or SysOps certification

Qualifications

• 7-10 years of relevant cloud/DevOps engineering experience, including technical ownership of AWS deployments.


• B.E./B.Tech/MCA or equivalent

At Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus.

Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself.

We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.

Requirements: