Senior DevOps Engineer – Service Layer / QTC Cloud Platform

TALPRO INDIA PRIVATE LIMITED; Bengaluru; On-site; INR 4,000,000 - 6,500,000; Full time

Job summary

Talpro is seeking a Senior DevOps Engineer to design, build, secure, and operate the cloud platform powering the Service Layer and Quote-to-Cash workloads. You will work on a cloud-native, event-driven platform using AWS, Kafka/MSK, and serverless tech across IaC, CI/CD, and security tooling.

The candidate should have deep expertise in AWS infrastructure, IaC, networking, security, observability, platform engineering, and production operations for distributed systems.

Qualifications

• 7+ years of experience in DevOps and cloud platforms.
• Hands-on AWS experience with infrastructure-as-code.
• Strong knowledge of CI/CD, security, and observability.

Responsibilities

• Design, build, and operate AWS cloud infrastructure for event-driven workloads.
• Implement and maintain IaC using Terraform and CI/CD pipelines.
• Enforce security, governance, and cost optimization in cloud platforms.
• Collaborate with teams on enterprise integrations and platform operations.

Skills

AWS

Terraform

CI/CD

DevSecOps

Kafka / MSK

Kubernetes

Docker

AWS Networking

Cloud Security

Observability

Tools

GitLab CI

Jenkins

GitHub Actions

Job description

Talpro is leading the way in transforming the talent acquisition landscape. We deliver innovative, sustainable, and cost-effective recruitment solutions tailored to today’s business needs. Our mission is to offer comprehensive hiring strategies that address immediate recruitment demands while laying the groundwork for long‑term success.

Job Description

• Experience: 7+ years
• AWS Experience: 4+ years hands-on
• Primary Skills: AWS, Terraform, CI/CD, DevSecOps, Kafka / MSK, Kubernetes, Docker, AWS Networking, Cloud Security, Observability

Role Overview

We are looking for a strong, hands-on, and highly motivated Senior DevOps Engineer to design, build, secure, and operate the cloud platform powering the Service Layer (SL-QTC) ecosystem supporting Quote-to-Cash (QTC), customer lifecycle, and enterprise integration workloads.

The role involves building and operating a cloud-native, event-driven platform based on AWS, Kafka / AWS MSK, serverless technologies, databases, observability platforms, and DevSecOps toolchains.

The ideal candidate should have strong expertise in AWS cloud infrastructure, Infrastructure-as-Code, CI/CD, networking, security, observability, platform engineering, and production operations for mission-critical distributed systems.

Key Responsibilities

• Design, build, and maintain AWS cloud infrastructure supporting highly available event-driven workloads.
• Work across AWS services including Lambda, API Gateway, EC2, EKS/ECS, S3, RDS/Aurora PostgreSQL, DynamoDB, SQS, SNS, EventBridge, IAM, CloudWatch, and VPC.
• Ensure cloud infrastructure is reliable, scalable, secure, resilient, and cost-efficient.
• Support business-critical workloads across APIs, databases, messaging platforms, serverless applications, and enterprise integrations.

Infrastructure-as-Code & Automation

• Design and implement Infrastructure-as-Code (IaC) using Terraform.
• Build reusable automation frameworks for repeatable, secure, and scalable platform provisioning.
• Maintain infrastructure modules, templates, automation scripts, and configuration standards.

CI/CD & DevSecOps

• Build and maintain secure CI/CD pipelines for application, infrastructure, and platform deployments.
• Implement deployment automation, release strategies, automated testing, quality checks, and environment management.
• Drive DevSecOps practices by integrating:
  • Security scanning
  • Policy enforcement
  • Infrastructure validation
  • Container security
  • Dependency management
  • Compliance checks
• Work with tools such as GitLab CI, Jenkins, GitHub Actions, or similar platforms.

AWS Networking & Traffic Management

• Design, implement, and manage AWS networking architecture including:
  • VPCs
  • Subnets
  • Route tables
  • NAT Gateways
  • Transit Gateway
  • PrivateLink
  • Security Groups
  • VPNs
  • Hybrid connectivity
• Manage application ingress, routing, and content delivery using:
  • Route53
  • API Gateway
  • Application Load Balancers
  • Network Load Balancers
  • CloudFront

Cloud Security & Identity Management

• Implement cloud security controls using:
  • AWS WAF
  • AWS Shield
  • IAM
  • Encryption
  • Secrets management
  • Vulnerability management
  • Audit logging
  • Compliance frameworks
• Configure and support enterprise identity integrations using:
  • Microsoft Entra ID / Azure AD
  • SAML
  • OAuth2
  • OpenID Connect
  • Single Sign-On
• Ensure secure-by-design practices across infrastructure, deployment, networking, and application layers.

Kafka / MSK Platform Operations

• Support Kafka / AWS MSK platform operations including:
  • Topic management
  • Access controls
  • Capacity planning
  • Monitoring
  • Scaling
  • Disaster recovery
• Partner with engineering teams to improve event-driven workload reliability, availability, and operational supportability.

Observability, Monitoring & Operations

• Implement and manage observability solutions covering:
  • Monitoring