Devops Engineer

Emkay; Mumbai; On-site; INR 2,000,000 - 2,800,000; Full time

Job summary

Emkay seeks an experienced DevOps/Cloud Engineer in Mumbai to design and operate CI/CD pipelines across environments, while managing AWS infrastructure as code, security controls, and cost optimization. You will containerize apps, manage Kubernetes clusters and implement comprehensive observability.

You will collaborate with developers, QA, and security teams to accelerate delivery, ensure resiliency, and adhere to regulatory requirements in a fast-paced capital markets setting.

Qualifications

• 4–5 years in a DevOps / Cloud / SRE role with AWS as the primary platform.
• Strong hands‑on experience with at least one CI/CD toolchain: Jenkins, GitLab CI, GitHub Actions or Azure DevOps.
• Infrastructure-as‑code: Terraform (preferred), Ansible, Helm.
• Containers and orchestration: Docker and Kubernetes (EKS preferred).
• Linux administration, networking fundamentals (DNS, TCP/IP, load balancing, VPN), and shell scripting.
• Scripting/automation in Python or Bash.
• Git-based source control and branching strategies.
• Monitoring and logging: Prometheus, Grafana, ELK, CloudWatch or Datadog.

Responsibilities

• Build and maintain CI/CD pipelines for build, test, deployment, release and rollback across UAT and production.
• Provision and manage AWS infrastructure as code (Terraform / CloudFormation) within a Landing Zone construct accounts, VPCs, subnets, security groups, IAM roles and guardrails.
• Operate core AWS services: EC2, S3, RDS, EKS/ECS, Lambda, ELB, Route 53, CloudFront, CloudWatch, Systems Manager, Secrets Manager and KMS.
• Containerize applications and manage Kubernetes clusters, including deployments, scaling, Helm charts and cluster upgrades.
• Implement observability — metrics, logs, traces, dashboards and alerting — and drive reduction in MTTD/MTTR.
• Embed security into the pipeline: secrets management, least-privilege IAM, vulnerability and image scanning, patching, and integration of logs with the SOC/SIEM.
• Support DR, backup and business-continuity design, and participate in resiliency drills and failover testing.
• Track and optimize cloud spend — right-sizing, reserved/savings plans, tagging discipline and monthly cost reporting.
• Follow a defined change management, approval and documentation processes; maintain runbooks, SOPs and audit trails.
• Work with developers, QA, infrastructure, and information security teams to improve deployment velocity without compromising stability.
• Support regulatory and audit requirements (SEBI / exchange cyber security guidelines, DPDPA), including evidence and log retention.

Job description

Key Responsibilities

• Build and maintain CI/CD pipelines for build, test, deployment, release and rollback across UAT and production.
• Provision and manage AWS infrastructure as code (Terraform / CloudFormation) within a Landing Zone construct accounts, VPCs, subnets, security groups, IAM roles and guardrails.
• Operate core AWS services: EC2, S3, RDS, EKS/ECS, Lambda, ELB, Route 53, CloudFront, CloudWatch, Systems Manager, Secrets Manager and KMS.
• Containerize applications and manage Kubernetes clusters, including deployments, scaling, Helm charts and cluster upgrades.
• Implement observability — metrics, logs, traces, dashboards and alerting — and drive reduction in MTTD/MTTR.
• Embed security into the pipeline: secrets management, least-privilege IAM, vulnerability and image scanning, patching, and integration of logs with the SOC/SIEM.
• Support DR, backup and business-continuity design, and participate in resiliency drills and failover testing.
• Track and optimize cloud spend — right-sizing, reserved/savings plans, tagging discipline and monthly cost reporting.
• Follow a defined change management, approval and documentation processes; maintain runbooks, SOPs and audit trails.
• Work with developers, QA, infrastructure, and information security teams to improve deployment velocity without compromising stability.
• Support regulatory and audit requirements (SEBI / exchange cyber security guidelines, DPDPA), including evidence and log retention.

Must-Have Skills

• 4–5 years in a DevOps / Cloud / SRE role, with AWS as the primary platform.
• Strong hands‑on experience with at least one CI/CD toolchain: Jenkins, GitLab CI, GitHub Actions or Azure DevOps.
• Infrastructure-as‑a‑code: Terraform (preferred), Ansible, Helm.
• Containers and orchestration: Docker and Kubernetes (EKS preferred).
• Linux administration, networking fundamentals (DNS, TCP/IP, load balancing, VPN), and shell scripting.
• Scripting/automation in Python or Bash.
• Git-based source control and branching strategies.
• Monitoring and logging: Prometheus, Grafana, ELK, CloudWatch or Datadog.

Good to Have

• AWS certification (Solutions Architect Associate or DevOps Engineer Professional).
• Exposure to broking, capital markets or BFSI environments, including low‑latency or co‑location setups.
• Experience with hybrid and multi‑cloud (Azure) environments and on‑premises to cloud migration.
• Familiarity with DevSecOps tooling (SAST/DAST, SCA, image scanning) and policy‑as‑code.
• Exposure to AI/ML workload enablement on cloud (e.g., AWS Bedrock) and associated guardrails.
• FinOps / cloud cost management practices.

Qualifications

• B.E./B.Tech/MCA in Computer Science, IT or related discipline.
• Candidates with 2-3 years of experience from premier institutes (IITs/NITs/BITS/IIITs) with strong fundamentals in Linux, networking, scripting and cloud will be considered at a Junior Cloud Engineer level with a structured mentoring plan.

Behavioural Expectations

• Ownership mindset with the ability to work in a regulated, high‑availability environment.
• Strong documentation and communication skills; comfortable working with vendors and internal stakeholders.
• Willingness to participate in on‑call, weekend release windows and drills as required.

What We Offer

• Ownership of a growing AWS estate and modern DevOps practices in a fast‑paced capital markets environment.
• Exposure cloud migration, AI adoption, and cyber resilience initiatives.
• A collaborative culture where technology directly drives business growth.