Lead Engineer - DevOps

Air India Limited; Gurugram District; On-site; INR 2,000,000 - 3,200,000; Full time

Job summary

Air India Limited seeks a seasoned DevSecOps engineer to design and maintain secure, scalable cloud infrastructure across Azure, AWS, and GCP. The role emphasizes IaC with Terraform, Kubernetes (AKS), and integrated security in CI/CD pipelines.

You will collaborate with development, QA, and operations teams to ensure compliant, cost-efficient delivery, while applying CIS, NIST, and ISO 27001 controls and continually improving cloud security practices.

Qualifications

• 5+ years in cloud/DevSecOps roles with Kubernetes and Terraform.
• Proven experience in Platform Engineering projects.
• Bachelor's/Master's in Computer Science/IT.

Responsibilities

• Build and maintain secure, scalable IaC-based infrastructure using Terraform.
• Automate deployment, configuration, and management of infra and services.
• Monitor performance, reliability, and cost efficiency.
• Implement and manage CI/CD pipelines with integrated security controls.
• Deploy and manage Kubernetes workloads with Helm charts.
• Integrate security into IaC and CI/CD pipelines.
• Conduct security assessments, CSPM, audits, and threat modelling.
• Enforce CIS, NIST, ISO 27001 policies.
• Collaborate with dev, QA, and operations; document infra designs.

Skills

Terraform

Azure

AWS

GCP

AKS

Networking

Grafana

AppDynamics

CloudWatch

Python

Bash

PowerShell

IAM

Encryption

Secure storage

CIS

NIST

ISO 27001

Education

Bachelor's/Master's in Computer Science/IT

Tools

Terraform

Kubernetes

Azure DevOps

Terraform Cloud/DevOps tooling

VPCs/VPNs

Job description

Job Description:

Job Purpose

Implement, and maintain secure, scalable, and automated cloud infrastructure by embedding DevSecOps practices across the software development lifecycle (SDLC). Ensure robust security, compliance, and performance across cloud environments. Deploy and monitor Kubernetes services on Azure using Azure DevOps and industry-standard DevOps tooling in a secure and governed manner.

Key Accountabilities

Infrastructure & Automation

• Build, and maintain secure, scalable infrastructure using Infrastructure as Code (IaC) with Terraform.
• Automate deployment, configuration, and management of infrastructure and services.
• Monitor and optimize infrastructure performance, reliability, and cost efficiency.
• Implement and manage CI/CD pipelines with integrated security controls.
• Deploy and manage Kubernetes workloads using Helm charts for standardized, repeatable application delivery.

Security & Compliance

• Integrate security into all stages of the IaC and CI/CD pipelines.
• Conduct regular security assessments, CSPM, audits, and threat modelling.
• Monitor cloud environments for security incidents and lead incident response.
• Enforce security policies aligned with frameworks like CIS, NIST, and ISO 27001.
• Utilize cloud-native security tools (e.g., AWS Security Hub, Azure Defender).

Collaboration & Documentation

• Work closely with development, QA, and operations teams to ensure secure and seamless integration.
• Document infrastructure designs, configurations, and processes.

Learning and Development

• Continuously improve technical skills in cloud platforms, security tools, and automation.
• Participate in internal knowledge-sharing sessions and contribute to team capability building.

Any other additional responsibility could be assigned to the role holder from time to time as a standalone project or regular work. The same would be suitably represented in the Primary responsibilities and agreed between the incumbent, reporting officer and HR.

Skills Required for the role

Must Have

• Strong expertise in Terraform and infrastructure automation.
• Proficiency in at least one major cloud platform (Azure, AWS, or GCP); multi-cloud experience is a plus.
• Hands-on experience with Azure Kubernetes Service (AKS) — deployment, scaling, upgrades, and cluster management.
• Solid understanding of networking (VPCs, VPNs, subnets, firewalls).
• Experience with monitoring/logging tools (e.g., Grafana, App Dynamics, CloudWatch).
• Strong scripting skills (Python, Bash, PowerShell).
• Experience with IAM, encryption, and secure storage.
• Familiarity with compliance and security frameworks (CIS, NIST, ISO 27001).

Good To Have

• Experience with tools like Wiz, Microsoft Defender for Cloud.
• Exposure to Agentic AI and platform engineering projects.
• Airline/Aviation industry experience.

Technical knowledge and understanding of Platform development.

• Agile mindset and continuous improvement
• Attention to detail and accountability

D. Educational and Experience Requirements

Minimum Education Requirements

• Bachelors/Master’s in Computer Science, IT, or related field

Minimum Experience

• 5+ years in cloud or DevSecOps roles with Kubernetes, Terraform
• Proven experience in Platform Engineering projects.

Desired Experience

• Platform Engineering – Multi cloud (Azure/AWS/GCP)
• Experience with DevOps Tools, Wiz, Microsoft Defender for Cloud, Airline/Aviation domain
• Agentic AI