Cloud Infrastructure / Platform Engineer

ffive; Hyderabad; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

F5 is seeking a Cloud Infrastructure/Platform Engineer to design and operate a secure, scalable cloud landing zone and platform foundations. You will automate governance, FinOps, and security using policy-as-code, and build reusable IaC libraries while enabling teams through CI/CD pipelines and GitOps.

Deep hands-on expertise in Azure or AWS is preferred, with experience across other clouds as a plus. Join a team building a secure, observable cloud platform for internal developers.

Qualifications

• Extensive hands-on experience engineering cloud infrastructure on Azure, AWS, and/or GCP.
• Strong IaC experience with Terraform, Bicep/ARM, and CloudFormation.
• Experience with FinOps, cost optimization and policy-based controls.
• Proven ability to design landing zones with identity, network and governance foundations.
• Experience with policy-as-code and automated compliance (Azure Policy, AWS SCPs, OPA/Conftest).
• CI/CD for infrastructure with GitOps workflows and validation.
• Knowledge of configuration management (Ansible, Puppet).
• Strong IAM, network security, encryption and key management.
• Proficient in Python/Bash/Go scripting for automation.
• Familiarity with multi-cloud or hybrid environments.

Responsibilities

• Design, build, and operate cloud landing zones (multi-account, org structure, network, identity, logging, security baselines).
• Implement governance and guardrails using policy-as-code with auditability.
• Define and deploy FinOps observability and enforcement tooling for DevOps and cross-account cost control.
• Deliver an infrastructure platform as a product to internal development teams.
• Develop reusable IaC modules/libraries (Terraform primary; Bicep/ARM and CloudFormation valued).
• Build and maintain CI/CD pipelines for infrastructure, OS images, containers, and platform components using GitOps.
• Standardize dev/test/prod environments with controls, tagging, and cost guardrails.
• Embed security into build/deploy: secret handling, encryption, IAM least privilege, vulnerability scanning.
• Implement monitoring, incident response, and define/track SLIs/SLOs for platform services.
• Collaborate in an agile delivery model; SAFe experience is a bonus.

Skills

Cloud infrastructure engineering

Azure / AWS / GCP

Terraform

Policy as code

FinOps

CI/CD

GitOps

Security governance

IAM & security

Scripting: Python/PowerShell

Tools

Terraform

Bicep/ARM

CloudFormation

Ansible

Puppet

GitOps tooling

Job description

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

About F5

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

Position Summary

We're looking for a Cloud Infrastructure/Platform Engineer to build and operate a secure, scalable cloud 'landing zone' and platform foundations. You'll define and automate FinOps and Security governance using policy-as-code, create reusable infrastructure-as-code (IaC) libraries, and enable teams through CI/CD pipelines and GitOps practices. You should bring deep hands-on expertise in at least one major cloud (Azure or AWS preferred), with additional experience in GCP, OCI, or IBM Cloud as a plus.

Key Responsibilities

• Design, build, and operate cloud landing zones (multi-account/subscription, org structure, network, identity, logging, security baselines).
• Implement governance and guardrails using policy-as-code (e.g., Azure Policy, AWS Organizations/SCPs, OPA/Conftest), including exception handling and auditability.
• Define and deploy FinOps observability and enforcement tooling to enable DevOps teams to operate efficiently as well as cross-account financial oversight.
• Deliver an infrastructure platform as a product to the internal development community.
• Develop reusable IaC modules/libraries (Terraform primary; Bicep/ARM and CloudFormation also valued) and promote standard patterns for teams.
• Build and maintain CI/CD pipelines for infrastructure, OS Images, containers, and platform components using GitOps workflows (PR-based changes, automated validation, progressive delivery).
• Standardize environments (dev/test/prod) with consistent controls, tagging/metadata, and cost management guardrails.
• Embed security and compliance into build/deploy: secret handling, encryption, IAM least privilege, vulnerability scanning, and evidence generation.
• Observability and SRE practices: implement monitoring/alerting and dashboards, support incident response, and help define/track SLIs/SLOs for platform services.
• Collaborate in an agile delivery model; participate in planning, refinement, and execution (SAFe experience is a bonus).

Required Qualifications

• Deep hands-on experience engineering cloud infrastructure on one or more of Azure, AWS, and GCP (architecture + implementation).
• Strong proficiency with Infrastructure as Code (Terraform primary; Bicep/ARM and CloudFormation).
• Specific background in cloud cost optimization and FinOps practices, including Savings Plans, Reserved Instances, native cloud cost management tools, and policy-based cost controls.
• Proven experience implementing landing zones / foundational cloud platforms (identity, network, shared services, governance).
• Experience with policy-as-code and automated compliance (e.g., Azure Policy, AWS Config + SCPs, OPA/Conftest).
• CI/CD expertise for infrastructure: pipeline design, testing/validation, approvals, environment promotion, drift detection.
• Working knowledge of configuration management/automation in current-state enterprise environments (e.g., Ansible and Puppet).
• Strong understanding of IAM, network security, encryption, key management, and secure-by-default patterns.
• Comfortable with Git-based workflows (PR reviews, branching strategies, versioning, release management).
• Scripting/programming ability (e.g., Python, Bash, PowerShell, Go) to build automation and tooling.

Preferred Qualifications (Nice to Have)

• Experience with Oracle Cloud (OCI)
• Experience with Cloud Financial Management (FinOps) and implementing FinOps policies using automation (\"Policy as Code\")
• Strong Network Engineering background including cloud and hybrid-cloud connectivity, network security policy automation, and cloud native network architectures.
• Experience working in hybrid environments to deliver platform automation solutions in the Data Center.
• Familiarity with security and control frameworks such as NIST CSF, NIST 800-171, SOX, SOC 2, and ISO 27002.
• Kubernetes/platform experience (AKS/EKS/GKE/OKE), service mesh, or container platform operations.
• Experience with platform eng