AWS GCP Cloud Engineer AVP

Citi; Pune District; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Citi seeks a Public Cloud SME to lead automation, security, and architecture for its DBaaS platform across AWS and GCP. You will design secure VPCs, implement IAM frameworks, and automate critical databases including MongoDB Atlas and AWS RDS/Aurora using Terraform. Collaboration with portal developers will integrate cloud capabilities into a self-service platform.

The role demands 7+ years of enterprise experience, deep cloud expertise, and strong scripting skills for automation workstreams.

Qualifications

• 7+ years of experience in Cloud/DB infra engineering or DevOps in large-scale environments.
• Hands-on SME level expertise in AWS and GCP.
• Expert in Terraform IaC design, modularization, state management, and CI/CD integration.
• Strong knowledge of VPC design, networking, routing, security groups, and cloud security best practices.
• Proven experience designing and managing complex IAM policies, roles, service accounts, and cross-account access.
• Hands-on experience with MongoDB Atlas, SQL Server on AWS, RDS, and Aurora.
• Proficient in Python or Bash for automation.

Responsibilities

• Architect and implement secure, scalable Terraform configurations for AWS and GCP.
• Design and operate secure VPCs, networking, and hybrid connectivity.
• Define and enforce granular IAM policies and access controls across clouds.
• Automate lifecycle management of database platforms (MongoDB Atlas, SQL Server on AWS, RDS/Aurora).
• Collaborate with portal teams to integrate automation with self-service DBaaS platform.
• Provide tier-3 engineering support for cloud networking, IAM, and database infra issues.

Skills

Cloud Networking

IAM

Scripting

Security Best Practices

Database Automation

Education

Bachelor’s degree in CS/Engineering

Tools

Terraform

AWS

GCP

CI/CD

Kubernetes

Docker

Job description

Job Description: Public Cloud SME (RDS, Database, Automation Network, IAM & Terraform )

Experience Level: 7+ Years

Location: Pune Team: DBaaS Platform Engineering

Role Overview

We are seeking a highly experienced and motivated Public Cloud Subject Matter Expert (SME) specializing in Cloud Networking, IAM, and Database Technologies to join our DBaaS Platform Engineering team. In this role, you will serve as the technical authority driving the automation, security, and architecture of our database infrastructure across AWS and GCP environments.

You will design and implement secure VPC architectures, establish robust IAM frameworks, and automate the lifecycle of critical database platforms—including MongoDB Atlas, SQL Server on AWS, RDS,oracle elastic Cache , and Aurora—using Terraform as your primary tool. While this role is infrastructure-focused, you will collaborate with portal developers to integrate these automated cloud capabilities into our self-service DBaaS platform.

Key Responsibilities

• Infrastructure as Code (IaC): Architect, develop, and maintain enterprise-grade Terraform configurations to automate the provisioning, scaling, and management of cloud resources across AWS and GCP.
• Cloud Networking & Security: Design and implement secure, high-performance VPC architectures, routing, firewalls, transit gateways, and hybrid connectivity solutions. Serve as the SME for public cloud network design.
• Identity & Access Management (IAM): Define and enforce robust cloud security postures by designing fine-grained IAM policies, roles, service accounts, and least-privilege access controls across AWS and GCP.
• Database Platform Automation:
  • MongoDB Atlas (multi-cloud deployments and integrations)
  • SQL Server on AWS (EC2-based deployments, clustering, and licensing optimization)
  • AWS RDS & Aurora (PostgreSQL/MySQL engines, high availability, and performance tuning)
• Automation & Scripting: Develop robust automation scripts (using Python or Bash) to integrate cloud infrastructure with monitoring, backup, and configuration management systems.
• Operational Excellence: Provide tier-3 engineering support for complex cloud networking, IAM, and database infrastructure issues.

Required Qualifications

• Experience: 7+ years of relevant experience in Cloud Engineering, DevOps, or Database Infrastructure Engineering within a large-scale enterprise environment.
• Cloud Platforms: Deep, hands-on SME-level expertise in both AWS and GCP.
• Infrastructure as Code: Expert-level proficiency with Terraform, including modular design, state management, and CI/CD integration.
• Networking & Security: Advanced knowledge of VPC design, subnetting, routing, security groups, network ACLs, and cloud security best practices.
• IAM Expertise: Proven experience designing and managing complex IAM policies, cross-account access, and identity federation.
• Database Technologies: Hands-on experience deploying, managing, and automating:
  • MongoDB Atlas
  • SQL Server on AWS
  • AWS RDS and Aurora
• Scripting: Strong proficiency in Python or Bash for cloud automation and API integration.
• Educational Background: Bachelor’s degree in Computer Science, Engineering, or a related technical field.

Preferred Qualifications (Secondary Skills)

• Full Stack Development: Familiarity with full-stack development concepts, including back-end services (Java) and front-end frameworks (AngularJS, Angular, React) to support portal integration.
• API Integration: Experience building or consuming RESTful APIs to connect infrastructure automation with self-service portals.
• Containerization: Experience with Docker and container orchestration platforms like Kubernetes (EKS/GKE) or OpenShift.
• CI/CD Tools: Proficiency with Jenkins, GitLab CI, or similar CI/CD tools.
• Financial Services Experience: Previous experience working in a highly regulated, large-scale financial enterprise.
• Agile Methodologies: Experience working in an Agile/Scrum development environment.

Job Family Group

Technology

Job Family

Systems & Engineering

Time Type

Full time

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.