IT Infrastructure & Systems Engineering - AWS

RingCentral; Bengaluru; Presencial; INR 4.000.000 - 7.000.000; Jornada completa

Descripción de la vacante

RingCentral is seeking an experienced Infrastructure Cloud Engineer to own the design, automation, and reliability of cloud and identity infrastructure across AWS and GCP. You will lead incident response, mentor engineers, and set technical standards while managing hybrid identity with Okta, AD, and Entra ID.

You will design multi-account AWS architectures, test DR, support GCP IAM and org policy, and implement secure, scalable networking across clouds and on‑prem.

Formación

• 6+ years in systems, infrastructure, or cloud engineering.
• Production AWS architecture experience with multi-account & DR.
• GCP experience including IAM, projects, org policy, networking.
• Terraform at scale: modules, state, testing, and pipelines.
• Okta experience: SAML/OIDC, SCIM, and API integrations.
• Hybrid identity with Active Directory and Entra ID, LDAP.
• OAuth 2.0 / FIDO2 understanding.
• Strong networking fundamentals and scripting skills.
• On-call and incident management experience.

Responsabilidades

• Own design, automation, and reliability of cloud and identity infra across AWS and GCP.
• Lead incident response, mentor engineers, and set technical standards.
• Manage Okta architecture, SSO, MFA, SCIM provisioning, and device trust.
• Maintain IaC with Terraform, CI/CD, and drift detection.
• Define and monitor SLIs/SLOs, build observability dashboards, and respond to alerts.
• Collaborate with security, DevOps, and application teams on infra changes.

Conocimientos

Cloud architecture

Incident response

Hybrid identity

Security best practices

Team leadership

Herramientas

Terraform

Ansible

Python

PowerShell

Bash

Descripción del empleo

Role

You’ll own the design, automation, and reliability of our cloud and identity infrastructure across AWS and GCP, with hybrid identity spanning Okta, Active Directory, and Entra ID. You’ll set technical standards for the team, lead incident response, and mentor engineers. This role covers infrastructure and identity only. It does not include SaaS application administration or endpoint management.

What You’ll Do

Cloud architecture and operations

• Design and operate AWS infrastructure: multi-account and multi-region structure, VPC and network design, IAM, compute, and storage, with security and cost in mind
• Plan and test high availability and disaster recovery, and run regular cost reviews
• Support GCP workloads, org-level IAM, and org policy
• Maintain consistent networking, connectivity, and guardrails across clouds and on-prem

Infrastructure as code and automation

• Own Terraform module design, remote state, and CI/CD-driven plan/apply with drift detection
• Use Ansible or equivalent for configuration management of Linux systems
• Automate operational and lifecycle work with Python, PowerShell, or Bash, vendor APIs, and workflow platforms (Okta Workflows, n8n, or similar), and track the toil removed

Identity and access

• Own Okta (Identity Engine) architecture: SSO (SAML/OIDC), SCIM lifecycle provisioning, MFA, authentication policy, and Device Trust
• Manage hybrid identity across Active Directory and Entra ID, including sync and federation
• Own service-account and machine-identity lifecycle, secrets management, and least-privilege role design across cloud and identity platforms

Reliability and observability

• Define SLIs and SLOs with service owners, and build the metrics, logs, traces, dashboards, and alerting that support them with low noise
• Work with paging and ITSM tooling (e.g., PagerDuty or Freshservice) and OpenTelemetry-based instrumentation
• Join the on-call rotation, lead major incidents, write RCAs, and drive fixes that prevent repeat pages
• Troubleshoot across network, OS, identity, and application layers

Security and compliance

• Drive vulnerability remediation and hardening
• Own audit evidence collection and remediation for SOC 2 or similar
• Review and document risk exceptions

Leadership

• Review designs and pull requests, mentor engineers, and maintain runbooks and architecture documentation
• Partner with security, DevOps, and application teams on infrastructure changes

Required Qualifications

• 6+ years in systems, infrastructure, or cloud engineering
• Production AWS architecture experience beyond basic provisioning, including multi-account design and DR
• Hands-on GCP experience (IAM, projects, org policy, networking)
• Terraform at scale: module design, state management, testing, and pipeline integration
• Production Okta experience: debugging SAML/OIDC failures, building SCIM integrations, and working with the Okta API
• Working knowledge of Active Directory and Entra ID in a hybrid environment, including LDAP
• Understanding of modern authentication standards (OAuth 2.0, FIDO2)
• Strong networking fundamentals (TCP/IP, DNS, VPN, load balancing, firewalls)
• Proficiency in Python or PowerShell, plus Bash
• Experience with an observability stack (Datadog, Prometheus/Grafana, CloudWatch, ELK, or similar) and with defining SLOs
• Willingness to join an on-call rotation and lead incidents

Preferred Qualifications

• Okta Certified Professional or Administrator
• AWS Solutions Architect Professional, AWS Security Specialty, or equivalent GCP
• Okta Workflows, n8n, or other automation platform experience
• Zero trust or device-trust implementation experience
• Kubernetes (EKS) and CI/CD (GitHub Actions, Jenkins)
• Experience supporting SOC 2 or similar audits

On-Call

Primary/secondary rotation, roughly one week in 4, including weekends. Pages are tied to defined severity levels. Because the team supports global operations, expect some out-of-hours coverage.

First 12 Months

• Own a defined segment of AWS/GCP end-to-end, fully in Terraform
• Cut manual operational work measurably through automation, with the hours saved tracked
• Define SLOs for the services you own and improve alert quality and time to resolution
• Close identified SSO, SCIM, and IAM gaps, and complete at least one access certification cycle