Senior / Principal Platform Engineer

Avaya India; Pune District; Hybrid; INR 3,500,000 - 6,000,000; Full time

Job summary

Avaya India is seeking a Senior/Principal Platform Engineer to lead the design, development and security of cloud-native platforms across Azure, AWS and GCP, with hybrid environments. You will build scalable Kubernetes foundations, implement Terraform modules and GitOps workflows, and partner with security and GRC teams to ensure regulatory compliance.

In a fast-paced, startup-like setting, you will own end-to-end delivery, mentor engineers, and drive observable, reliable infrastructure

Qualifications

• 8+ years in software, cloud, DevOps/SRE or platform engineering, with substantial hands-on design and implementation.

Responsibilities

• Design and implement reusable Terraform modules and multi-region patterns across Azure, GCP and AWS.
• Build and maintain production Kubernetes foundations: clusters, node pools, networking, autoscaling, storage, workload identity, upgrades and recovery.
• Develop GitOps delivery platforms using Argo CD, Helm, GitHub Actions and automated validation, promotion, rollback and drift detection.
• Own platform services and their integration: Istio/service mesh, Keycloak/OIDC, cert-manager/PKI, API gateways, ingress/egress, DNS, secrets management and cloud-native networking.
• Engineer private networking, routing, firewall policy, WAF, VPN/private interconnect, TLS/mTLS, segmentation, load balancing and end-to-end connectivity troubleshooting.
• Codify zero-trust and least-privilege controls across identities, workloads, environments, networks, secrets, administrative access and service-to-service communication.
• Design and automate technical safeguards, traceable changes, evidence capture, continuous monitoring, vulnerability response and environment separation supporting FedRAMP, PCI DSS and SOC 2 requirements.
• Engineer the observability stack end to end using Prometheus, Grafana, Loki, Thanos, Grafana Alloy and OpenTelemetry.
• Deploy, scale, tune, secure and troubleshoot stateful platform components including Kafka, Redis, relational databases (e.g., PostgreSQL, MariaDB) and document databases (e.g., MongoDB).
• Own secure API gateway and ingress architecture: authentication and authorization, TLS termination, rate limiting, routing, API lifecycle integration, firewall/WAF policy, and service-mesh connectivity.
• Develop platform tooling in Python, Go or Bash; eliminate recurring operational toil with durable engineering fixes and self-service capabilities.
• Develop and integrate agentic platform-development capabilities—not just production-operations agents—including AI-assisted Terraform/module and Helm/chart authoring, platform API and controller development, architecture analysis, code review, test generation, infrastructure-plan validation, safe change proposals, developer-facing tools, and reusable agent workflows integrated with GitOps/CI/CD.
• Use and extend agentic development workflows across the full engineering lifecycle—architecture exploration, Terraform/Helm authoring, code reviews, automated tests, environment validation, pull requests and release readiness—not only production diagnosis and remediation.

Skills

Terraform

Kubernetes

Argo CD

GitOps

Helm

CI/CD

Azure

GCP

AWS

Istio

Keycloak

cert-manager

API gateways

TLS/PKI

Kafka

Redis

PostgreSQL

MariaDB

MongoDB

Python

Go

OpenTelemetry

Prometheus

Grafana

Tools

Argo CD

GitHub Actions

Helm

Prometheus

Grafana

Job description

Senior / Principal Platform Engineer

Multi-Cloud Infrastructure Kubernetes Zero Trust Agentic Platform Development

Role mission | Design, code, secure and evolve cloud-native platforms across Azure, GCP, AWS and hybrid environments. Build platform capabilities with Terraform, Kubernetes, GitOps and software engineeringand actively advance agentic platform development, from AI-assisted design and code creation to reusable agents and tool-integrated engineering workflows. Security, compliance and operational rigor are integral to delivery. Thrive in a fast-paced, startup-like engineering environment with rapid delivery, high ownership, hands-on problem solving and disciplined production quality.

What you will build

• Design and implement reusable Terraform modules, cloud landing-zone components, provisioning and lifecycle workflows across Azure, GCP and AWS; engineer resilient multi-region and dedicated-instance patterns.
• Build and maintain production Kubernetes foundations: clusters, node pools, networking, autoscaling, storage, workload identity, capacity, upgrades and recovery.
• Develop GitOps delivery platforms using Argo CD, Helm, GitHub Actions and automated validation, promotion, rollback and drift detection.
• Own platform services and their integration: Istio/service mesh, Keycloak/OIDC, cert-manager/PKI, API gateways, ingress/egress, DNS, secrets management and cloud-native networking.
• Engineer private networking, routing, firewall policy, WAF, VPN/private interconnect, TLS/mTLS, segmentation, load balancing and end-to-end connectivity troubleshooting.
• Codify zero-trust and least-privilege controls across identities, workloads, environments, networks, secrets, administrative access and service-to-service communication.
• Design and automate technical safeguards, traceable changes, evidence capture, continuous monitoring, vulnerability response and environment separation supporting FedRAMP, PCI DSS and SOC 2 requirements. Partner with GRC/Security to map implementations to applicable control obligations; do not equate platform features with certification or authorization.
• Engineer the observability stack end to end using Prometheus, Grafana, Loki, Thanos, Grafana Alloy and OpenTelemetry: metrics collection, long-term retention, centralized logs, alerting, dashboards, telemetry pipelines, capacity signals and incident diagnostics.
• Deploy, scale, tune, secure and troubleshoot stateful platform componentsincluding Kafka, Redis, relational databases (e.g., PostgreSQL, MariaDB) and document databases (e.g., MongoDB)—covering operators, persistence, replication, backup/restore, upgrades, availability, throughput and recovery.
• Own secure API gateway and ingress architecture: authentication and authorization, TLS termination, rate limiting, routing, API lifecycle integration, firewall/WAF policy, and service-mesh connectivity.
• Develop platform tooling in Python, Go or Bash; eliminate recurring operational toil with durable engineering fixes and self-service capabilities.
• Develop and integrate agentic platform-development capabilities—not just production-operations agents—including AI-assisted Terraform/module and Helm/chart authoring, platform API and controller development, architecture analysis, code review, test generation, infrastructure-plan validation, safe change proposals, developer-facing tools, and reusable agent workflows integrated with GitOps/CI/CD.
• Use and extend agentic development workflows across the full engineering lifecycle—architecture exploration, Terraform/Helm authoring, code reviews, automated tests, environment validation, pull requests and release readiness—not only production diagnosis and remediation.

Required experience

• 8+ years in software, cloud, DevOps/SRE or platform engineering, with substantial hands-on design and implementation.
• Advanced Terraform and Kubernetes skills; production experience with Argo CD, GitOps, Helm and CI/CD.
• Deep experience with Azure plus GCP or AWS; ability to transfer architecture patterns across cloud providers.
• Strong Linux, networking, DNS, TLS, PKI, routing, firewall, IAM/RBAC and distributed-system troubleshooting.
• Hands-on with several platform components such as Istio, Keycloak, cert-manager, API gateways and secrets management, with ability to learn the others.
• Practical deployment, scaling, hardening and operational troubleshooting of Kafka, Redis and relational/document databases in Kubernetes or managed cloud services; experience with API gateways and secure API exposure.
• Hands-on experience with Prometheus, Grafana, Loki, Thanos, Grafana Alloy or equivalent metrics/logging pipelines, including cardinality, retention, alert quality and production troubleshooting.
• Demonstrated experience implementing security controls in regulated environments and supporting FedRAMP, PCI DSS, SOC 2 or comparably rigorous programs.
• Coding ability in Python, Go or equivalent; evidence of shipping automation and reusable engineering components.
• Ability to reason from application behavior through cluster, identity, certificate, network and cloud dependencies.
• Demonstrated ownership in a fast-paced, startup-like environment: rapid iteration, shifting priorities, independently driving work to production and balancing speed with security and reliability.

Preferred

• Multi-tenant or customer-dedicated SaaS, hybrid/air-gapped architectures, Kubernetes operators/CRDs, cloud cost management.
• Compliance-as-code, automated audit evidence, policy engines, vulnerability scanning and supply-chain security.
• Hands-on experience building or extending agentic development workflows, agent tool integrations or shared engineering capabilities for infrastructure and Kubernetes—not only using AI coding assistants.

Success in the first 6–12 months

• Deliver reusable cloud/Kubernetes capabilities that reduce custom environment work and deployment variability.
• Remove material gaps in security posture and make evidence collection and drift detection more repeatable.
• Improve deployment safety, platform upgradeability and production diagnostics with measurable outcomes.
• Build or substantially improve deployment, resilience, scaling and observability for Kafka, Redis, relational and document databases and gateway services; reduce operational bottlenecks.
• Build and share agentic platform-development workflows that help engineers design, implement, test and evolve secure infrastructure faster, with measurable quality and review controls.

Leveling | Senior: independently owns significant subsystems and implementations. Principal: sets cross-platform architecture and standards, resolves cross-domain design decisions and mentors multiple teams.