Senior AWS Cloud DevSecOps Engineer

NewVision Software

Pune District

Hybrid

INR 3,500,000 - 5,500,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

New Vision Softcom & Consultancy Pvt. Ltd in India is seeking a Senior AWS Cloud DevSecOps Engineer to own secure, scalable AWS infrastructure across multi-region deployments. You will drive IaC, CI/CD, Kubernetes operations, observability, and security in enterprise environments.

The role requires 8+ years of experience with 5+ in lead/architect capacity and AWS certifications; hybrid work model in Pune, Maharashtra region is offered.

Qualifications

8+ years total experience in DevOps/Cloud/SRE
2+ years in lead/architect capacity
Hands-on AWS production experience with multi-region deployments
AWS DevSecOps Engineer certification (DOP-C01/Associate/Professional) preferred

Responsibilities

Own AWS DevSecOps roadmap, standards, and patterns
Design Terraform/AWS CDK modules for multi-region infra
Govern core AWS services (EKS, API Gateway, ALB/NLB, CloudFront, VPC, Secrets Manager, KMS)
Standardise infrastructure and environment parity across production, staging, development
Apply FinOps practices using cost optimization tools

Skills

AWS

Docker

Kubernetes

GitHub

Terraform

IAM

Security

Networking

Cloud Security

Education

Post Graduate Graduation/Equivalent Course

Tools

EKS

API Gateway

ALB/NLB

CloudFront

VPC

Secrets Manager

KMS

SQS

SNS

Kinesis

Terraform

AWS CDK

Bash

PowerShell

Python

GitHub Actions

ArgoCD

Flux

Helm

Docker

Karpenter

OpenSearch

Datadog

Dynatrace

Job description

Company Name New Vision Softcom & Consultancy Pvt. Ltd

Function Business Units (BU)

Organization Unit DevOps

Region APAC

Country India

Base office location Pune

Working model Hybrid

Weekly Off Pune office Standard

State Maharashtra

Skills

Skill

AWS AWS Cloud Docker and kubernetes Github Terraform IAM Aws firewalls Cloud-IaaS-Networking-Amazon Web Services-AWS

Post Graduate Graduation/Equivalent Course

CERTIFICATION

AWS Certified DevOps Engineer – Professional (DOP-C01) AWS Certified Solutions Architect – Associate (SAA-C03)

Working Language

Job Description

Total Experience: 8+ years

Relevant Experience: 5+ years (min. 2 yrs in lead/architect capacity)

Primary Platform: Amazon Web Services (AWS)

Engagement Type: Enterprise production, multi-region, regulated cloud environments

Required Certification: AWS Certified DevOps Engineer – Associate or Professional (minimum requirement for this senior role)

ABOUT THE ROLE & ORGANISATION

Together with our client, we are building a secure, enterprise-grade AWS platform that supports critical business operations at scale, where reliability, security, and delivery speed directly impact outcomes.

Our DevSecOps team owns the infrastructure lifecycle, including IaC, CI/CD, Kubernetes, observability, security, and developer experience, in close partnership with engineering, security, and operations teams.

ROLE OVERVIEW

The Senior AWS Cloud DevSecOps Engineer owns secure, scalable, and highly available AWS infrastructure, defining standards, reference patterns, and delivery direction for the DevOps team.

The role combines platform engineering, automation, CI/CD, observability, security, and leadership in enterprise, regulated environments to improve reliability, deployment speed, and cloud security.

KEY SKILLS & TECHNOLOGY STACK

Category

Technologies / Tools

Amazon Web Services (AWS)

AWS Core Services

EKS, API Gateway, ALB / NLB, CloudFront, VPC, AWS PrivateLink, Secrets Manager, KMS, SQS, SNS, Amazon Kinesis, S3, RDS / Aurora

IaC & Automation

Terraform (modular, remote state, env separation), AWS CDK, Bash, PowerShell, Python

CI/CD

AWS CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, GitLab CI/CD, Jenkins

Containers & K8s

Amazon EKS, Helm, Docker, Fargate, Service Mesh (Istio / Linkerd --- advantage), GitOps: ArgoCD / Flux

Observability

Amazon CloudWatch, AWS X-Ray, AWS CloudTrail, OpenSearch / ELK, Datadog / Dynatrace (full-stack APM)

Security & Identity

AWS IAM, IAM Identity Center (SSO), IRSA, Secrets Manager, KMS, AWS Config, Security Hub, GuardDuty, Macie, Inspector, WAF, Shield, Security Groups, VPC Endpoints

Vulnerability Mgmt

AWS Inspector, Qualys, cloud compliance & posture management tooling

Networking

VPC, Subnets, Security Groups, NACLs, Route 53, PrivateLink, Transit Gateway, ALB / NLB, CloudFront

FinOps

AWS Cost Explorer, AWS Budgets, Compute Optimizer, Savings Plans, Reserved Instance planning

KEY RESPONSIBILITIES

Own the AWS DevSecOps roadmap, engineering standards, and reusable reference patterns.
Design Terraform and AWS CDK modules for production-grade, multi-region infrastructure.
Govern core AWS services including EKS, API Gateway, ALB/NLB, CloudFront, VPC, PrivateLink, Secrets Manager, KMS, SQS, SNS, and Kinesis.
Standardise infrastructure, configuration, and environment parity across production, staging, and development.
Apply FinOps practices using AWS Cost Explorer, Compute Optimizer, Savings Plans, and related tooling.

CI/CD & Delivery Engineering

Build and operate reusable CI/CD pipelines with AWS CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, GitLab CI/CD, or Jenkins.
Embed security checks such as SAST, secret scanning, and container image scanning into delivery workflows.
Use ArgoCD or Flux for declarative, auditable Kubernetes delivery on EKS.
Manage Amazon EKS clusters, ingress, autoscaling, Karpenter, and service mesh adoption where applicable.
Maintain Helm libraries and containers build pipelines for multi-environment delivery via Amazon ECR.
Troubleshoot Kubernetes issues, perform root-cause analysis, and implement scalable fixes.

Observability & Reliability

Drive observability with CloudWatch, X-Ray, OpenSearch, Datadog, or Dynatrace for tracing, dashboards, SLOs, and alerts.
Define reliability standards, error budgets, incident response practices, and blameless postmortems.
Improve reliability and deployment efficiency through proactive monitoring and automated remediation.

Security & Compliance (DevSecOps)

Embed security across IAM, secrets, encryption, network controls, and CI/CD workflows.
Manage cloud security posture using IAM Identity Center, IRSA, AWS Config, Security Hub, GuardDuty, Macie, Inspector, WAF, Shield, and VPC Endpoints.
Support vulnerability remediation, cloud governance, and compliance requirements such as SOC 2, PCI-DSS, HIPAA, or FedRAMP where applicable.
Resolve compute, storage, IAM, and public access findings as part of ongoing cloud security operations.
Lead and mentor the DevSecOps team while reinforcing ownership, standards, and continuous improvement.
Partner with engineering, product, security, and business stakeholders to improve developer experience and delivery outcomes.
Communicate technical trade-offs clearly and maintain practical architecture and platform documentation.

REQUIRED QUALIFICATIONS

5+ years in DevOps, Cloud, or SRE, including 2+ years in a lead or architect role.
Hands‑on production AWS experience with EKS, API Gateway, ALB/NLB, CloudFront, VPC, PrivateLink, Secrets Manager, KMS, SQS, SNS, and Kinesis.
Strong Terraform skills, including modular design, remote state, and environment separation; AWS CDK is a plus.
Production Kubernetes experience with Amazon EKS, Helm, and containerized applications.
CI/CD experience with CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, GitLab CI/CD, or Jenkins.
Strong AWS networking, security, identity, scripting, troubleshooting, and production support skills.
Experience in enterprise, multi-region AWS environments and ability to explain technical trade-offs to stakeholders.
AWS Certified DevOps Engineer – Associate or Professional is mandatory.

PREFERRED QUALIFICATIONS

Exposure to Azure or GCP alongside AWS.
Experience with GitOps, Datadog/Dynatrace, FinOps, vulnerability management, or service mesh technologies.
Exposure to regulated, financial services, or global operational environments.

CERTIFICATIONS

Required (Senior Level)

DOP-C02

Mandatory — minimum for this role

DVA-C02 *

* Accepted with 3+ yrs demonstrated production AWS experience

Strongly Recommended

SAA-C03

AWS Certified Solutions Architect – Associate

Core AWS platform breadth

SAP-C02

AWS Certified Solutions Architect – Professional