Cloud Engineer

Argano; Hyderabad; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

Argano is building a cloud platform engineering team in Hyderabad. The Cloud Engineer will design, build, and maintain automation for OCI-based platform deployment, landing zones, security, and disaster recovery.

You will work in CI/CD-driven workflows, write Python automation using OCI SDK and REST APIs, and support production environments with Tier 2 operations. The role emphasizes infrastructure-as-code, guardrails, and hands-on Linux/Windows administration, with overlap to the US team and

Qualifications

• 4+ years in infrastructure or cloud engineering with hands-on cloud experience.
• Hands-on in a major public cloud (OCI, AWS, or Azure).
• Experience writing modular, reusable infrastructure code.
• Strong Linux/Windows administration and scripting skills.
• Familiarity with IAM, networking, security controls, and SOC 2/ISO 27001 concepts.

Responsibilities

• Build and maintain OpenTofu modules for the managed services platform.
• Automate landing zone deployments following OCI best practices.
• Automate customer connectivity, including DRG, FastConnect, VPN, DNS.
• Embed security controls and policy-as-code into pipelines.
• Automate compute, storage, and OS bootstrap across Linux and Windows.
• Automate backup policies and cross-region DR testing.
• Provide Tier 2 support and mentor Jira/CI/CD aligned processes.
• Deliver changes via GitHub PRs with validated pipelines and docs.

Skills

Terraform/OpenTofu

Ansible

Python scripting

CI/CD pipelines

GitHub Actions

OCI/AWS/Azure

Linux admin

Windows admin

Networking

IAM & security

Policy-as-code

OCI SDK

Tools

Packer

Cloud-init

REST APIs

Git tooling

Job description

OCI Platform and Infrastructure Automation

Role Summary

We are building our managed services cloud platform as code, starting with Oracle Cloud Infrastructure (OCI). As a Cloud Engineer, you will design, build, and maintain the automation that deploys and runs it: the network hub, shared services, customer connectivity, customer landing zones, and workloads up to and including servers, along with automated backup and disaster recovery. You will also provide Tier 2 support for customer environments already in production. Everything is delivered through infrastructure-as-code and CI/CD pipelines, with manual steps treated as defects to be automated away.

The focus is cloud platform engineering and automation. Deep expertise in Oracle applications or databases is not required.

Key Responsibilities

Platform and Landing Zone Automation

• Build and maintain OpenTofu modules for the managed services platform: network hub, shared services, and centralized security and logging.
• Automate customer landing zone deployments following OCI best practices (such as the OCI CIS Landing Zone): compartments, IAM policies, tagging, budgets, and guardrails.
• Automate customer connectivity into the platform: DRG, FastConnect, IPSec VPN, routing, and DNS.

Security by Default

• Build security controls into every deployment: least-privilege IAM, network segmentation, security lists and NSGs, Vault and key management, Cloud Guard, and Security Zones.
• Implement policy-as-code checks in pipelines so non-compliant infrastructure is caught before it is deployed.

Workload and Server Automation

• Automate deployment of compute and servers end to end: images, instance configuration, block and file storage, load balancers, and OS bootstrap (cloud-init or similar).
• Automate post-deployment configuration, patching, and agent installation for Linux and Windows servers with Ansible, run from the same pipelines as OpenTofu.

Backup and Disaster Recovery Automation

• Automate backup policies and cross-region replication for customer workloads.
• Build and test automated DR plans (such as OCI Full Stack DR), including regular, repeatable DR testing.

Customer Environment Support

• Provide Tier 2 support for running customer environments: troubleshoot incidents, fulfill service requests, and execute changes following change management processes.
• Bring existing customer environments in line with platform standards, automating fixes wherever possible.
• Escalate complex issues to the Cloud Architect with clear findings and next steps.

Pipelines and Engineering Practice

• Deliver all changes through GitHub pull requests and CI/CD pipelines, with code review, automated validation, and versioned modules.
• Write Python automation using the OCI SDK and REST APIs, including event-driven automation using OCI Events, Functions, and Notifications.
• Write and maintain runbooks, knowledge base articles, and module documentation for the platform and customer environments you build and support, so Tier 1 engineers can operate them without escalating.
• Work second shift with overlap for handoffs to the US team, and join the on-call rotation after onboarding.

Required Skills and Experience

• 4+ years in infrastructure or cloud engineering, including 2+ years hands-on in a major public cloud (OCI, Azure, or AWS).
• Terraform or OpenTofu: writing reusable modules, managing remote state, and deploying through Git-based workflows. OpenTofu experience preferred; Terraform experience transfers directly.
• Ansible for configuration management: writing playbooks and roles for Linux and Windows (or strong experience with a comparable tool such as Chef, Puppet, or PowerShell DSC).
• Python automation: writing production-quality scripts and tools using cloud SDKs and REST APIs, including event-driven automation.
• CI/CD pipelines and GitHub: repositories, pull request workflow, and GitHub Actions or equivalent.
• Core cloud services in at least one major cloud: identity and access management, virtual networking, compute, block and object storage, load balancing, and key management.
• Cloud landing zone concepts and best practices: account or tenancy structure, identity, networking, guardrails, and tagging.
• Cloud networking: hub-spoke designs, VPN and private connectivity, routing, and DNS.
• Solid, hands‑on Linux and Windows Server administration: installation and configuration, patching, storage and file systems, networking, services, user and access management, Active Directory basics, and OS‑level troubleshooting.
• Experience supporting production environments: incident troubleshooting, service requests, and change execution.
• Lifelong learner: self‑driven to research, study documentation and training videos, and figure out unfamiliar technologies on the fly.
• Sound judgment in handling customer data securely and working within compliance requirements such as SOC 2 and ISO 27001.
• Clear written and spoken English; comfortable documenting work and collaborating with US‑based team members.

Preferred Skills and Experience

• OCI hands‑on experience (strongly preferred). Candidates with strong Azure or AWS backgrounds who are ready to ramp on OCI are encouraged to apply.
• OCI CIS Landing Zone or other landing zone frameworks (Azure Landing Zones, AWS Control Tower).
• Backup and DR automation, including OCI Full Stack DR or similar tools.
• Image and bootstrap tooling such as Packer or cloud‑init.
• Policy‑as‑code tools such as OPA, Checkov, or tfsec.
• Hands‑on experience across more than one public cloud.
• Additional scripting and configuration languages beyond Python, such as PowerShell, Bash, YAML, and JSON.
• Practical experience using AI‑assisted engineering tools.
• Managed‑services or MSP experience.
• Certifications: OCI Architect Associate or Professional, OCI Networking Professional, AZ-104, AWS Solutions Architect Associate, or equivalent.