AWS GCP Cloud Engineer AVP

Citigroup Inc.; Pune District; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Citigroup Inc. is seeking a seasoned Public Cloud SME to drive automation, security, and architecture for DBaaS platforms on AWS and GCP from Pune.

You will implement IaC with Terraform, design secure VPCs, IAM, and automate database platforms such as MongoDB Atlas, RDS/Aurora, and SQL Server on AWS, collaborating with portal teams for self-service capabilities. The role demands strong cloud engineering expertise, 7+ years in enterprise environments, and hands-on work across networking,

Qualifications

• 7+ years in Cloud Engineering, DevOps, or DB infrastructure in large-scale environments.
• Expert at AWS and GCP with IaC in Terraform and CI/CD integration.
• Strong IAM, VPC design, security groups, and network architecture fundamentals.
• Hands-on experience automating MongoDB Atlas, SQL Server on AWS, RDS/Aurora.
• Proficiency in Python or Bash for automation and API integration.
• Bachelor’s degree in CS/Engineering or related field.

Responsibilities

• Architect, develop, and maintain Terraform configurations to provision cloud resources across AWS and GCP.
• Design secure VPCs, routing, firewalls, and hybrid connectivity; SME for cloud network design.
• Define IAM policies, roles, service accounts, and least-privilege access controls.
• Automate deployment and operations of MongoDB Atlas, SQL Server on AWS, RDS, and Aurora.
• Develop automation scripts to integrate cloud infra with monitoring, backups, and config management.
• Provide Tier-3 engineering support for complex cloud networking, IAM, and database infrastructure.

Skills

Terraform

AWS

GCP

IAM

VPC design

Python

Bash

MongoDB Atlas

SQL Server on AWS

RDS

Aurora

Education

Bachelor's degree in Computer Science, Engineering, or a related technical field

Tools

Terraform

Kubernetes (EKS/GKE)

Docker

OpenShift

Jenkins

GitLab CI

Job description

Job Description: Public Cloud SME (RDS, Database, Automation Network, IAM & Terraform )

Experience Level: 7+ Years
Location: Pune Team: DBaaS Platform Engineering

Role Overview

We are seeking a highly experienced and motivated Public Cloud Subject Matter Expert (SME) specializing in Cloud Networking, IAM, and Database Technologies to join our DBaaS Platform Engineering team. In this role, you will serve as the technical authority driving the automation, security, and architecture of our database infrastructure across AWS and GCP environments.

You will design and implement secure VPC architectures, establish robust IAM frameworks, and automate the lifecycle of critical database platforms—including MongoDB Atlas, SQL Server on AWS, RDS, oracle elastic Cache , and Aurora—using Terraform as your primary tool. While this role is infrastructure-focused, you will collaborate with portal developers to integrate these automated cloud capabilities into our self-service DBaaS platform.

Key Responsibilities

• Infrastructure as Code (IaC): Architect, develop, and maintain enterprise-grade Terraform configurations to automate the provisioning, scaling, and management of cloud resources across AWS and GCP.
• Cloud Networking & Security: Design and implement secure, high-performance VPC architectures, routing, firewalls, transit gateways, and hybrid connectivity solutions. Serve as the SME for public cloud network design.
• Identity & Access Management (IAM): Define and enforce robust cloud security postures by designing fine-grained IAM policies, roles, service accounts, and least-privilege access controls across AWS and GCP.
• Database Platform Automation: Automate the deployment, configuration, and operations of key database technologies, specifically:
  • MongoDB Atlas (multi-cloud deployments and integrations)
  • SQL Server on AWS (EC2-based deployments, clustering, and licensing optimization)
  • AWS RDS & Aurora (PostgreSQL/MySQL engines, high availability, and performance tuning)
• Automation & Scripting: Develop robust automation scripts (using Python or Bash) to integrate cloud infrastructure with monitoring, backup, and configuration management systems.
• Operational Excellence: Provide tier-3 engineering support for complex cloud networking, IAM, and database infrastructure issues.

Required Qualifications

• Experience: 7+ years of relevant experience in Cloud Engineering, DevOps, or Database Infrastructure Engineering within a large-scale enterprise environment.
• Cloud Platforms: Deep, hands-on SME-level expertise in both AWS and GCP.
• Infrastructure as Code: Expert-level proficiency with Terraform, including modular design, state management, and CI/CD integration.
• Networking & Security: Advanced knowledge of VPC design, subnetting, routing, security groups, network ACLs, and cloud security best practices.
• IAM Expertise: Proven experience designing and managing complex IAM policies, cross-account access, and identity federation.
• Database Technologies: Hands-on experience deploying, managing, and automating:
  • MongoDB Atlas
  • SQL Server on AWS
  • AWS RDS and Aurora
• Scripting: Strong proficiency in Python or Bash for cloud automation and API integration.
• Educational Background: Bachelor’s degree in Computer Science, Engineering, or a related technical field.

Preferred Qualifications (Secondary Skills)

• Full Stack Development: Familiarity with full-stack development concepts, including back-end services (Java) and front-end frameworks (AngularJS, Angular, React) to support portal integration.
• API Integration: Experience building or consuming RESTful APIs to connect infrastructure automation with self-service portals.
• Containerization: Experience with Docker and container orchestration platforms like Kubernetes (EKS/GKE) or OpenShift.
• CI/CD Tools: Proficiency with Jenkins, GitLab CI, or similar CI/CD tools.
• Financial Services Experience: Previous experience working in a highly regulated, large-scale financial enterprise.
• Agile Methodologies: Experience working in an Agile/Scrum development environment.

Job Family Group:

Technology

Job Family:

Systems & Engineering

Time Type:

Full time

Most Relevant Skills

Please see the requirements listed above.

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.