Senior Cloud Devops Engineer

Clearwater; Pune District; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

Clearwater is seeking a Senior Cloud SecOps Engineer to bridge Cloud Operations and Security Engineering in a high-scale, multi-tenant environment. You will build automated systems for secure onboarding, monitoring, and patching dozens of client environments while maintaining strict data isolation across AWS, Azure, and GCP.

You will lead automated onboarding pipelines, fleet management for security agents, and centralized observability within a single pane of glass in our SOC.

Qualifications

• Must have hands-on experience with two major cloud providers (AWS/Azure/GCP) and their security tools.
• Expert in writing modular IaC templates (Terraform, CloudFormation) for multi-client use.
• Strong Kubernetes operations, including cluster security and namespace isolation.
• Proficiency in Python or Go to automate cross-account tasks in a multi-tenant setup.
• Understanding of SOC2, ISO27001, or HIPAA controls in cloud environments.

Responsibilities

• Multi-Tenant Operations: Secure cloud infra across AWS, Azure, GCP with data isolation and network segregation.
• Automated Onboarding: Build Zero-Touch pipelines using IaC to provision security baselines for new customers in minutes.
• Fleet Management: Design strategies to patch and update security agents across hundreds of servers without downtime.
• Centralized Observability: Maintain a central platform that aggregates alerts and health metrics from all tenants into the SOC.
• Incident Response Support: Act as Tier-3 escalation for complex cloud security incidents or misconfigurations.

Skills

Cloud platforms

Kubernetes security

Infrastructure as Code

DevSecOps

Security compliance

Tools

Terraform

CloudFormation

OPA

Checkov

Azure Lighthouse

Job description

JOB TITLE: Senior Cloud Devops Engineer

EXPERIENCE: 5–10 Years

REPORTS TO: Shivendra Ashish

Role Summary:

We are looking for a Senior Cloud SecOps Engineer who thrives in a high-scale, multi-tenant environment. In this role, you will act as the bridge between Cloud Operations and Security Engineering. You will not just manage infrastructure; you will build the automated systems that allow us to securely onboard, monitor, and patch dozens of client environments simultaneously. Your goal is to deliver “Security-as-a-Service” efficiently, ensuring that a security issue in one tenant is detected and isolated instantly.

Core Responsibilities:

• Multi-Tenant Operations: Manage and secure cloud infrastructure across diverse client environments (AWS, Azure, GCP), ensuring strict data isolation and network segregation.

• Automated Onboarding: Build “Zero-Touch” pipelines using Infrastructure as Code (IaC) to provision security baselines (SIEM forwarders, Scanners, IAM roles) for new customers in minutes.

• Fleet Management: Design strategies to patch and update security agents across hundreds of servers/endpoints without causing downtime for clients.

• Centralized Observability: Maintain the central “Single Pane of Glass” platform that aggregates alerts and health metrics from all customer tenants into our SOC.

• Incident Response Support: Act as the Tier-3 escalation point for the SOC, investigating complex cloud infrastructure attacks or misconfigurations.

Must-Have Skills

• Cloud Agnostic: Deep hands‑on experience with at least two major cloud providers ( AWS / Azure / GCP ) and their native security tools (GuardDuty, Sentinel, Security Hub).

• Infrastructure as Code: Expert in writing modular templates (e.g., Terraform, CloudFormation ) that can be reused across different clients with variable inputs.

• Container Security: Strong knowledge of Kubernetes operations, including securing clusters, managing namespaces for isolation, and enforcing policies.

• DevSecOps Scripting: Proficiency in Python or Go to automate cross‑account tasks (e.g., “Rotate access keys for these 50 client accounts”).

• Compliance Ops: Understanding of how to implement technical controls for standards like SOC2, ISO 27001, or HIPAA in a cloud environment.

Preferred / Nice to Have:

• MSP Experience: Prior experience working at a Managed Service Provider or handling multi‑customer setups (e.g., using Azure Lighthouse).
• Policy-as-Code: Experience with tools like OPA (Open Policy Agent) or Checkov to prevent misconfigurations before deployment.
• Certifications: Certified Kubernetes Security Specialist (CKS), AWS Security Specialty, or Azure Security Engineer.

Ability to embrace Clearwater’s CLEAR core values (Commitment to Client Success, Lead with Accountability, Integrity & Collaboration, Excellence in All That We Do, Advance Colleague Success, Respect & Transparency) and culture.

Disclaimer:

The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues in the role. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed.

Clearwater is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Clearwater/Redspin’s Recruiting team if you need any assistance completing any forms or to otherwise participating in the application process.

Mental/Physical Requirements:

Fast paced environment handling multiple demands. Must be able to exercise appropriate judgment as necessary. Requires a high level of initiative and independence. Excellent written and oral communication skills required. Requires the ability to use a personal computer for extended periods of time.