Senior Devops Engineer (GCP & Networking)

Kyndryl India; Chennai; Híbrido; INR 2.400.000 - 4.200.000; Tempo integral

Resumo da vaga

Kyndryl India is seeking a Senior DevOps Engineer with deep expertise in GCP and Azure, focusing on secure cloud networking. The role requires 6–10 years of experience building automated, scalable cloud infrastructure using DevOps, IaC, and Zero Trust principles, spanning cloud, networking, security, and automation.

The candidate will architect secure cloud networks, implement IaC with Terraform, manage CI/CD pipelines, and champion DevSecOps across GKE/AKS environments.

Qualificações

• 6+ years in DevOps, Cloud, or SRE roles.
• Strong hands-on experience with GCP and Azure.
• Deep understanding of cloud network security.
• Terraform expertise for IaC.
• Experience with CI/CD tooling (Azure DevOps, GitHub Actions, GitLab CI).
• Scripting in PowerShell, Bash, or Python.
• Kubernetes (AKS/GKE) experience and container security.
• Knowledge of IAM and secure network architectures.

Responsabilidades

• Architect and deploy secure GCP infrastructure with VPC-SC, firewall rules, and policies.
• Design secure Azure networks (VNets, NSGs/ASGs, UDRs) and cross-cloud connectivity (VPN/ExpressRoute).
• Implement DevOps, IaC with Terraform and CI/CD pipelines; secure rule deployment and secrets management.
• Integrate policy-as-code and DevSecOps security scanning into pipelines.
• Configure cloud firewalls, traffic routing, segmentation, and TLS/SSL management.
• Lead observability, incident response, RCA, and SRE practices for cloud networks.
• Collaborate with architects, mentor engineers, and maintain runbooks.

Conhecimentos

GCP & Azure expertise

Terraform

CI/CD tooling

Kubernetes (AKS/GKE)

Scripting (PowerShell, Bash, Python)

Cloud network security

Cloud IAM

Ferramentas

Terraform

Kubernetes

Azure DevOps

GitHub Actions

GitLab CI

Descrição da vaga

Position Details Job Title: Senior DevOps Engineer (GCP & Azure - Network Security Focus)

Employment Type: Full-time

Experience Level: Senior Level (8+ years)

Work Mode: Hybrid/ 11:30 AM -9:30PM Shift

Role Summary

We are seeking an experienced Senior DevOps Engineer with strong expertise in Google Cloud Platform (GCP) and Microsoft Azure, combined with deep knowledge of cloud networking and security. The ideal candidate has 6-10 years of experience building secure, automated, and scalable cloud infrastructures using DevOps, IaC, and Zero Trust principles. This role is ideal for someone who can work across cloud, networking, security, and automation.

Key Responsibilities

Google Cloud Platform (Primary or Equal Focus)

• Architect and deploy secure GCP infrastructure:
• VPC Service Controls (VPC-SC), Firewall Rules, Hierarchical Policies
• Deploy secure connectivity solutions:
• Private Google Access & Restricted APIs
• Manage IAM policies, service accounts, workload identity federation
• Design and implement secure Azure cloud networks:
• VNets, Subnets, NSGs/ASGs, UDRs
• Configure hybrid and cross-cloud connectivity:
• VPN Gateway, ExpressRoute

2. Network Security Engineering

• Configure and maintain cloud firewalls:
• GCP Firewall Policies (hierarchical)
• Implement secure traffic routing, segmentation, and micro-segmentation
• SSL/TLS management
• Identity-aware networking (GCP IAP)
• Work with network flow logs, firewall logs, packet captures, and policy analytics
• Contribute to threat modelling, vulnerability reviews, and cloud security posture

3. DevOps, Automation & Infrastructure-as-Code

• Build and manage Infrastructure-as-Code using:
• Terraform (mandatory)
• Build CI/CD pipelines for infrastructure using:
• Automate:
• firewall rule deployment
• secrets management
• compliance validation
• Implement policy-as-code (OPA / Conftest or similar)
• Integrate security scanning into pipelines (DevSecOps)
• Deploy and secure workloads on:
• GKE
• AKS
• Configure:
• Private clusters
• Ingress controllers
• Pod identity/security policies
• Integrate container registry + vulnerability scanning workflows

5. Monitoring, Observability & SRE Practices

• Build and maintain cloud observability stacks:
• Configure alerts for:
• network anomalies
• firewall activity
• workload identity misuse
• Lead incident response, RCA, and continuous improvement cycles
• Define SLOs, SLIs, and SLAs for cloud network reliability

6. Collaboration, Governance & Leadership

• Collaborate with cloud architects, network teams, and security engineers
• Review designs, terraform modules, and architecture proposals
• Mentor junior DevOps engineers and drive talent development
• Write and maintain documentation, runbooks, and best practices
• Support on-call rotation for critical cloud and network issues.

Required Skills

• 6+ years of experience in DevOps, Cloud, or SRE roles
• Strong hands-on experience with GCP and Azure
• Deep understanding of cloud network security
• Strong expertise with Terraform
• Good understanding of:
• -TCP/IP, routing, firewalls
• -VPNs, load balancing
• Experience with CI/CD tools (Azure DevOps, GitHub Actions, GitLab CI)
• Strong scripting in PowerShell, Bash, or Python
• Hands-on with Kubernetes (AKS/GKE), container security, and cloud IAM

Preferred Skills

• Experience with:
• VPC Service Controls (GCP)
• Familiarity with multi-cloud governance & compliance
• Experience with API Gateway / Apigee security

Certifications (Nice to Have)

• Google Professional Cloud Security Engineer
• Google Professional Cloud Network Engineer