Lead Infrastructure Automation Engineer

InvestCloud, Inc.; Bengaluru; Hybrid; INR 1,200,000 - 2,000,000; Full time

Job summary

InvestCloud, Inc. in Bengaluru is seeking a seasoned DevOps professional to lead the adoption of Ansible Tower, manage cloud infrastructure on AWS and Azure, and develop CI/CD pipelines. Candidates should have over 7 years of experience in infrastructure or platform engineering, with a focus on automation, scripting, and strong proficiency in major cloud providers. This hybrid role will require occasional collaboration with global teams and participation in an on-call rotation.

Qualifications

• 7+ years in infrastructure, DevOps, SRE, or platform engineering roles with hands-on automation experience.
• 3+ years designing, operating, and scaling Ansible (Ansible Tower/AAP or AWX) in production.
• 3+ years building Terraform-based infrastructure at scale, including modules, state management, and pipelines.
• Strong proficiency with at least one major cloud provider (AWS or Azure).
• Proficient in scripting/programming (Python and Bash).
• Deep understanding of CI/CD concepts and tools.
• Experience with monitoring/observability stacks.

Responsibilities

• Lead adoption of Ansible Tower and define inventory models.
• Collaborate with different teams to identify automation opportunities.
• Create and maintain CI/CD pipelines for applications and IaC.
• Design, implement, and maintain Terraform modules.
• Deploy and manage cloud infrastructure on AWS and Azure.

Skills

Automation Experience

Infrastructure as Code (IaC)

Scripting

Ansible

Terraform

CI/CD Practices

Cloud Providers

Documentation Skills

Tools

Ansible Tower

Terraform

AWS

Azure

Kubernetes

GitLab CI

Jenkins

Job description

Responsibilities

• Lead adoption of Ansible Tower, migrating jobs and pipelines from legacy infrastructure while defining inventory models, RBAC, job templates, and automation mesh for scale and security.
• Lead solution definition and implementation, including product evaluation and selection of applications, frameworks, and tooling with a bias for open standards, security, and maintainability.
• Own, implement, and promote good practice of the Ansible infrastructure, workflow, and development life cycle, including role structure, collections, linting, Molecule testing, and CI-driven validation.
• Maintain the technology roadmap for the application delivery environment, aligning platform capabilities with product, security, and regulatory requirements.
• Develop custom solutions using scripting or programming (Python, Bash, PowerShell, or Go) to extend automation, integrate APIs, and eliminate manual work.
• Create documentation and training materials to enable implementation and support hand-off to other teams; deliver enablement sessions and office hours.

Responsibilities (Additional)

• Enhance the measurement and monitoring framework for application health and resource utilization using metrics, logs, and tracing to reduce MTTR and improve SLO attainment.
• Collaborate with platform, SRE, security, networking, and application teams to identify and prioritize automation opportunities that improve reliability and speed.
• Investigate and provide resolution of support issues and day-to-day support tasks, adhering to SLAs and participating in an on-call rotation as needed.
• Design, implement, and maintain Terraform modules and environments, including remote state backends, workspaces, versioning, tagging standards, and drift detection.
• Deploy and manage cloud infrastructure on AWS, Azure, and/or GCP using IaC patterns, including networking, IAM, compute, storage, databases, and managed services.
• Build golden images and base machine/container artifacts using Packer, integrated into CI pipelines for deterministic, secure builds.
• Implement container orchestration and release automation using Kubernetes, Helm, and Git-based workflows; standardize manifests and release processes.
• Establish policy-as-code and compliance gates (OPA/Conftest, HashiCorp Sentinel, or Checkov) across IaC pipelines to enforce security and regulatory requirements.
• Integrate secrets management and dynamic credentials with HashiCorp Vault or cloud-native equivalents; remove embedded credentials from code and pipelines.
• Create and maintain CI/CD pipelines (GitLab CI and Jenkins) for application and IaC, including quality checks, security scans, and environment promotion.
• Define and enforce configuration management standards in Ansible (linting, idempotency, inventory strategy, dynamic inventory for clouds).
• Implement observability for automation platforms and workloads using Prometheus, Grafana or Splunk; publish actionable SLO dashboards.
• Drive cost-aware infrastructure design and tagging, collaborating with FinOps to monitor and optimize resource utilization and cloud spend.
• Champion change management and release governance aligned with ITIL and internal controls; maintain audit trails, approvals, and rollback strategies.

Required Qualifications

• 7+ years in infrastructure, DevOps, SRE, or platform engineering roles with hands-on automation experience.
• 3+ years designing, operating, and scaling Ansible (Ansible Tower/AAP or AWX) in production.
• 3+ years building Terraform-based infrastructure at scale, including modules, state management, and pipelines.
• Strong proficiency with at least one major cloud provider (AWS or Azure), including networking, IAM, and security controls.
• Proficient in scripting/programming (Python and Bash; PowerShell or Go a plus) and YAML/Jinja2.
• Deep understanding of CI/CD concepts and tools; proven experience implementing robust pipelines and artifact promotion flows.
• Solid grounding in Linux systems, networking fundamentals, TLS, and RBAC/least-privilege security patterns.
• Experience with Windows operating systems, Chocolatey package manager and Active Directory management.
• Experience with monitoring/observability stacks and setting SLOs, alerts, and runbooks.
• Excellent communication skills with a track record of authoring clear documentation and training materials.

Preferred Qualifications

• Red Hat Ansible Automation Platform experience at enterprise scale, including RBAC, EDA, and automation mesh.
• HashiCorp Terraform Associate or equivalent, and cloud certifications (AWS/Azure/GCP).
• Kubernetes certifications (CKA/CKAD) and production operations experience.
• Hands-on with policy-as-code (OPA/Conftest, Sentinel) and IaC security tooling (Checkov, tfsec).
• Experience implementing GitOps practices and tools (Argo CD or Flux).

Work Model

• Hybrid role based in Bengaluru (Bangalore), Karnataka, India.
• Core collaboration hours aligned to IST, with occasional overlap with UK/EU or US teams as needed.
• Participation in an on-call rotation for platform services with compensating time-off per policy.