Aws Devops Engineer L3

Bootlabs; Mumbai; Presencial; INR 4 000 000 - 7 000 000; Tempo integral

Resumo da oferta

Bootlabs is seeking an experienced AWS Platform owner to take full ownership of the AWS estate for a RBI-regulated NBFC under our 247 multi-cloud managed services engagement. You will oversee production and non-production accounts, ensure architecture health and incident readiness.

As the final escalations point for AWS, you will lead P1/P2 responses, drive DR drills, cost optimisation and governance of IAM, KMS, Terraform and CI/CD runtimes, while mentoring L1/L2 engineers and contributing to

Qualificações

• Extensive cloud/DevOps experience with production AWS at scale.
• Deep Kubernetes (EKS) expertise including upgrades and networking.
• Strong IAM, KMS, Secrets Manager governance and security posture.
• Production Terraform module design and state management.
• CI/CD pipelines with Jenkins, GitHub Actions or Azure DevOps.
• Proven incident command and RCA delivery in 24/7 environments.
• Scripting skills in Bash and Python for automation.

Responsabilidades

• Own the architecture, stability and operational health of the AWS estate across production and non-production accounts.
• Lead EKS platform operations: cluster upgrades, node groups, add-ons, ingress, autoscaling and workload troubleshooting.
• Own AWS networking: VPC design, Transit Gateway, Direct Connect, Route 53, security groups, NACLs and hybrid connectivity.
• Govern IAM, KMS and Secrets Manager with least-privilege policies and access reviews.
• Own Terraform/IaC: module standards, state management and drift control.
• Maintain CI/CD pipelines; guide safe deployment, rollback and release practices.
• Act as L3 escalation point and incident commander for P1/P2 incidents; deliver RCAs with corrective actions.
• Plan and execute DR drills; perform failover tests and post-drill health verification.
• Drive infra patching and remediation of vulnerabilities; conduct cost optimisation reviews.
• Mentor L1/L2 engineers and contribute to runbooks and audits.

Conhecimentos

Cloud/DevOps experience

EKS/Kubernetes

AWS networking

IAM/KMS/Secrets Manager

Terraform

CI/CD tooling

Incident command

Bash/Python scripting

Descrição da oferta de emprego

About the role

You will be the technical owner of the AWS estate for a leading RBI-regulated NBFC, delivered under Bootlabs' 247 multi-cloud managed services engagement. The estate runs the client's core lending, payments and customer channels: 300+ EC2 instances, 600+ Lambda functions, 36 EKS clusters/resources, 70 RDS instances, 250+ load balancers, MSK, ElastiCache and DynamoDB. You are the final technical escalation point for AWS and lead P1/P2 incidents from detection to RCA.

Key responsibilities

• Own the architecture, stability and operational health of the AWS estate across production and non-production accounts.


• Lead EKS platform operations: cluster upgrades, node groups, add-ons, ingress, autoscaling and workload troubleshooting.


• Own AWS networking: VPC design, Transit Gateway, Direct Connect, Route 53, security groups, NACLs and hybrid connectivity with Azure, GCP and the data centre.


• Govern IAM, KMS and Secrets Manager: least-privilege roles, key policies, secret rotation and access reviews.


• Own Terraform/IaC: module standards, state management, drift control and code review for infrastructure changes.


• Maintain CI/CD pipelines on Jenkins, GitHub, Bitbucket and Azure DevOps; guide safe deployment, rollback and release practices.


• Act as L3 escalation point and incident commander for P1/P2 incidents; deliver RCAs with corrective actions within 5 business days.


• Plan and execute DR drills: readiness checks, DB/replica failover, traffic switch, failback and post-drill health verification.


• Drive infra-layer patching (OS, EKS, RDS versions) and remediation of VAPT and vulnerability findings, including emergency/zero-day patches.


• Run quarterly cost optimisation reviews: rightsizing, unused resource clean‑up and tagging compliance.


• Mentor L1/L2 engineers, own runbooks and contribute to architecture reviews and audit evidence.


• Be available on-call for P1 incidents.

Must-have skills

• 710 years in cloud/DevOps, with 4+ years hands-on in production AWS at scale.


• Deep EKS/Kubernetes expertise: upgrades, networking (CNI), RBAC, Helm, troubleshooting.


• Strong AWS networking: VPC, Transit Gateway, Direct Connect, Route 53, ALB/NLB, PrivateLink.


• IAM, KMS, Secrets Manager, CloudTrail, AWS Config and CloudWatch.


• Terraform at production level, including module design and state management.


• CI/CD with Jenkins and at least one of GitHub Actions, Bitbucket Pipelines or Azure DevOps.


• Proven incident command and RCA writing in a 247 environment.


• Scripting in Bash and Python.

Good to have

• AWS Certified Solutions Architect Professional or DevOps Engineer – Professional.


• Experience in BFSI/NBFC or other RBI-regulated environments (RBI IT guidelines, PCI-DSS, ISO 27001, DPDP Act).


• Exposure to Azure or GCP in a multi-cloud setup.


• MSK/Kafka, ElastiCache/Redis, RDS/Aurora operations.


• Managed-services or client-facing delivery experience.

What success looks like in the first 90 days

• Full ownership of the AWS runbooks, inventory and escalation path.


• Zero SLA breaches on AWS P1/P2 incidents you command.


• At least one DR drill executed end to end with a published report.


• Open AWS VAPT findings on the infra layer reduced and tracked to closure.