Senior Cloud Platform Engineer

Minfy Technologies; Hyderabad; On-site; INR 2,600,000 - 4,800,000; Full time

Job summary

Minfy Technologies is seeking a Senior Cloud Platform Engineer to design, build, and operate secure cloud platforms across AWS and Azure for enterprise clients. You will own landing zone architecture, IaC, CI/CD pipelines, and container platforms, while mentoring junior engineers and shaping platform standards.

This is a hands-on, client-facing role with a strong focus on security and reliability. The ideal candidate has 5–8 years of cloud infrastructure and DevOps experience, multi-cloud

Qualifications

• 5–8 years in cloud infrastructure, platform engineering, DevOps, or SRE.
• Hands-on multi-cloud production workloads on AWS and Azure.
• Strong CI/CD experience with automated tests and security gates.

Responsibilities

• Design secure, multi-account landing zones on AWS and Azure.
• Implement networking, governance guardrails, and cost controls.
• Author and maintain Terraform modules; build CI/CD pipelines.
• Deploy and manage Kubernetes (EKS/AKS), containerization, RBAC.
• Implement monitoring and SLOs; lead incident response.
• Embed security controls in pipelines and secrets management.
• Mentor engineers and contribute to internal platform toolkit.
• Collaborate with client and cross-functional teams.

Skills

Terraform

Kubernetes

CI/CD Pipelines

Docker

Python / Bash / Go

Networking

IAM RBAC

Security & Compliance

GitOps

Cloud Cost Optimization

Tools

GitHub Actions

Azure DevOps

GitLab CI

Jenkins

EKS

AKS

Terraform (as tool)

Job description

The Senior Cloud Platform Engineer designs, builds, and operates automated, secure, and scalable cloud platforms across AWS and Azure for enterprise clients. This is a hands-on engineering role — owning landing zone architecture, Infrastructure as Code, CI/CD pipelines, container platforms, and observability — with the technical depth to troubleshoot production issues and the maturity to mentor junior engineers and influence platform standards across client engagements.

KEY RESPONSIBILITIES

• Design and build secure, multi-account/multi-subscription landing zones on AWS (Control Tower, Organizations) and Azure (Landing Zones, Management Groups).
• Implement network architecture — VPCs/VNets, transit gateways, hybrid connectivity, DNS, and security group / NSG design.
• Define and enforce account/subscription governance guardrails, tagging standards, and cost controls.

2. Infrastructure as Code & Automation

• Author and maintain infrastructure using Terraform (primary) and/or CloudFormation / ARM / Bicep, structured as reusable modules.
• Build and maintain CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab CI, or Jenkins) for both infrastructure and application deployments.
• Drive GitOps practices for environment provisioning and change management.

3. Containers & Orchestration

• Deploy, operate, and troubleshoot Kubernetes clusters (EKS, AKS) including networking (CNI), ingress, autoscaling, and RBAC.
• Support containerization of legacy and modernized workloads in partnership with application and modernization teams.
• Implement service mesh, secrets management, and workload identity patterns where applicable.

4. Observability & Reliability

• Implement monitoring, logging, and alerting using CloudWatch, Azure Monitor, Prometheus/Grafana, or equivalent.
• Define and track SLIs/SLOs for platform services; participate in on-call rotation and incident response.
• Conduct root-cause analysis for production issues and drive permanent fixes, not just workarounds.

5. Security & Compliance

• Implement identity and access management (IAM roles/policies, Azure AD/Entra ID RBAC), least-privilege access, and secrets management (Secrets Manager, Key Vault, HashiCorp Vault).
• Embed security controls into pipelines (SAST/DAST, image scanning, policy-as-code with tools such as OPA/Sentinel).
• Support compliance requirements relevant to client engagements, including DPDP Act 2023, ISO 27001, and client-specific regulatory frameworks under Minfy's Kavach360 programme.

6. Cost & Operational Efficiency

• Monitor and optimize cloud spend using native cost tools (Cost Explorer, Azure Cost Management) and rightsizing recommendations.
• Identify automation opportunities to reduce manual operational toil across managed environments.

7. Client & Cross-Functional Engagement

• Work directly with client engineering and infrastructure teams as a trusted technical resource on managed services and migration engagements.
• Partner with the MiMo and Cloud Advisory teams to implement platforms that support migration and modernization roadmaps.
• Produce clear runbooks, architecture diagrams, and platform documentation.

8. Mentorship & Technical Contribution

• Mentor junior and mid-level platform engineers; review their IaC and pipeline contributions.
• Contribute reusable modules, scripts, and accelerators to Minfy's internal platform engineering toolkit.
• Participate in architecture reviews and champion platform engineering best practices across the BU.

REQUIRED QUALIFICATIONS

1. Experience

• 5–8 years of experience in cloud infrastructure, platform engineering, DevOps, or Site Reliability Engineering roles.
• Demonstrated hands-on experience operating production workloads on both AWS and Azure (multi-cloud experience required).

2. Core Technical Skills

• Strong hands-on expertise with Terraform for multi-cloud Infrastructure as Code.
• Production experience with Kubernetes (EKS and/or AKS) — deployment, troubleshooting, and day-2 operations.
• Strong CI/CD skills — designing and building end-to-end pipelines (GitHub Actions, Azure DevOps, GitLab CI, or Jenkins) with automated testing, security gates, and deployment strategies (blue-green, canary, rolling).
• Strong containerisation skills — Docker image build and optimization, multi-stage builds, container registries (ECR, ACR), and container security scanning.
• Scripting proficiency in Python, Bash, or Go for automation and tooling.
• Solid networking fundamentals — VPC/VNet design, routing, DNS, load balancing, and hybrid connectivity.

3. Security & Governance

• Working knowledge of IAM/RBAC design, secrets management, and policy-as-code.
• Familiarity with security and compliance frameworks relevant to enterprise cloud environments (Well-Architected Framework, ISO 27001, DPDP Act 2023 or equivalent).
• Comfortable working directly with client technical stakeholders and cross-functional Minfy teams (advisory, MiMo, security).
• Able to produce clear technical documentation and communicate incident/root-cause findings effectively.

PREFERRED QUALIFICATIONS

• Certifications: AWS Certified Solutions Architect / DevOps Engineer, Microsoft Certified: Azure Administrator / DevOps Engineer Expert, or CKA/CKAD.
• Experience with GitOps tooling (ArgoCD, Flux).
• Exposure to service mesh technologies (Istio, Linkerd).
• Prior experience in a partner/SI or managed services environment (AWS Premier/Advanced Partner or Microsoft Solutions Partner).
• Familiarity with FinOps practices and cloud cost optimization.

KEY COMPETENCIES

• Ownership — treats production platforms as their own; drives issues to permanent resolution.
• Automation-first mindset — defaults to codifying repeatable work rather than manual intervention.
• Technical depth with pragmatism — balances best practice with delivery timelines and client constraints.
• Collaboration — works effectively across client teams, internal BUs, and junior engineers.
• Continuous learning — stays current across a fast-moving, multi-cloud technology landscape.