Senior DevOps Engineer – Service Layer / QTC Cloud Platform

Talpro; Bengaluru; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Talpro in Bengaluru seeks a Senior DevOps Engineer to design, build, secure, and operate cloud platforms powering service layers and enterprise workloads. You will drive cloud-native, event-driven platforms on AWS, with Kafka/MSK, serverless tech, observability, and secure DevSecOps toolchains.

The ideal candidate has 7+ years experience in DevOps, strong IaC (Terraform), CI/CD, networking, security, and production operations for distributed systems, plus hands-on AWS infra management and

Qualifications

• 7+ years of hands-on DevOps experience.

Responsibilities

• Design, build, and maintain AWS cloud infrastructure for highly available workloads.
• Collaborate across AWS services including Lambda, API Gateway, EC2, EKS/ECS, S3, RDS/Aurora, DynamoDB, SQS, SNS, EventBridge, IAM, CloudWatch, and VPC.
• Implement and maintain secure CI/CD pipelines and IaC using Terraform.
• Drive DevSecOps practices with security scanning, policy enforcement, and compliance checks.

Skills

AWS

Terraform

CI/CD

DevSecOps

Kafka/MSK

Kubernetes

Docker

Cloud Security

Observability

Tools

GitLab CI

Jenkins

GitHub Actions

Kubernetes

Docker

Job description

Talpro is leading the way in transforming the talent acquisition landscape. We deliver innovative, sustainable, and cost-effective recruitment solutions tailored to today’s business needs. Our mission is to offer comprehensive hiring strategies that address immediate recruitment demands while laying the groundwork for long‑term success.

Job Description

• Experience: 7+ years
• AWS Experience: 4+ years hands-on
• Primary Skills: AWS, Terraform, CI/CD, DevSecOps, Kafka / MSK, Kubernetes, Docker, AWS Networking, Cloud Security, Observability

Role Overview

We are looking for a strong, hands-on, and highly motivated Senior DevOps Engineer to design, build, secure, and operate the cloud platform powering the Service Layer (SL-QTC) ecosystem supporting Quote-to-Cash (QTC), customer lifecycle, and enterprise integration workloads.

The role involves building and operating a cloud-native, event-driven platform based on AWS, Kafka / AWS MSK, serverless technologies, databases, observability platforms, and DevSecOps toolchains.

The ideal candidate should have strong expertise in AWS cloud infrastructure, Infrastructure-as-Code, CI/CD, networking, security, observability, platform engineering, and production operations for mission-critical distributed systems.

Key Responsibilities

• Design, build, and maintain AWS cloud infrastructure supporting highly available event-driven workloads.
• Work across AWS services including Lambda, API Gateway, EC2, EKS/ECS, S3, RDS/Aurora PostgreSQL, DynamoDB, SQS, SNS, EventBridge, IAM, CloudWatch, and VPC.
• Ensure cloud infrastructure is reliable, scalable, secure, resilient, and cost-efficient.
• Support business-critical workloads across APIs, databases, messaging platforms, serverless applications, and enterprise integrations.

Infrastructure-as-Code & Automation

• Design and implement Infrastructure-as-Code (IaC) using Terraform.
• Build reusable automation frameworks for repeatable, secure, and scalable platform provisioning.
• Maintain infrastructure modules, templates, automation scripts, and configuration standards.

CI/CD & DevSecOps

• Build and maintain secure CI/CD pipelines for application, infrastructure, and platform deployments.
• Implement deployment automation, release strategies, automated testing, quality checks, and environment management.
• Drive DevSecOps practices by integrating:
  • Security scanning
  • Policy enforcement
  • Infrastructure validation
  • Container security
  • Dependency management
  • Compliance checks
• Work with tools such as GitLab CI, Jenkins, GitHub Actions, or similar platforms.

AWS Networking & Traffic Management

• Design, implement, and manage AWS networking architecture including:
  • VPCs
  • Subnets
  • Route tables
  • NAT Gateways
  • Transit Gateway
  • PrivateLink
  • Security Groups
  • VPNs
  • Hybrid connectivity
• Manage application ingress, routing, and content delivery using:
  • Route53
  • API Gateway
  • Application Load Balancers
  • Network Load Balancers
  • CloudFront

Cloud Security & Identity Management

• Implement cloud security controls using:
  • AWS WAF
  • AWS Shield
  • IAM
  • Encryption
  • Secrets management
  • Vulnerability management
  • Audit logging
  • Compliance frameworks
• Configure and support enterprise identity integrations using:
  • Microsoft Entra ID / Azure AD
  • SAML
  • OAuth2
  • OpenID Connect
  • Single Sign-On
• Ensure secure-by-design practices across infrastructure, deployment, networking, and application layers.

Kafka / MSK Platform Operations

• Support Kafka / AWS MSK platform operations including:
  • Topic management
  • Access controls
  • Capacity planning
  • Monitoring
  • Scaling
  • Disaster recovery
• Partner with engineering teams to improve event-driven workload reliability, availability, and operational supportability.

Observability, Monitoring & Operations

• Implement and manage observability solutions covering:
  • Monitoring