Software Engineer I – DevOps

Orange Health Labs; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Orange Health Labs seeks a DevOps/Platform Engineer to reinforce security across cloud infra and applications in Bengaluru. You will automate infrastructure with Docker, Kubernetes, and Terraform, manage databases, and enforce secure build pipelines.

Expect hands-on AWS and some GCP work, plus monitoring with New Relic, Graylog, Sentry, and Bugsnag. You’ll read Dockerfiles/Helm charts, integrate security scanners in CI/CD, and keep base images up-to-date while blocking CVEs.

Qualifications

• 1–2.5 years in a DevOps or infrastructure role.
• Hands-on AWS services: EC2, RDS, S3, Lambda.
• Some GCP experience, especially Firebase and RTDB.
• Practical Docker & Kubernetes usage.
• Knowledge of PostgreSQL, MySQL, Redis.
• Familiar with cloud and application security guidelines.
• Can read Dockerfiles and Helm charts and spot issues.
• Experience plugging security scanners (Trivy, Semgrep, SonarQube, GitLeaks) into CI/CD.
• Can write scripts in Python or Go and Bash.
• Understand AWS architecture and how components fit.
• Familiar with OWASP Top 10 risks.

Responsibilities

• Build and strengthen security measures across cloud infrastructure and deployed applications.
• Set up and run network systems including VPNs, NATs, and VPCs to connect services securely.
• Deploy monitoring and observability tools such as New Relic, Graylog, Sentry, Bugsnag across the platform.
• Automate infrastructure creation, monitoring, and recovery using Docker, Kubernetes, and Terraform.
• Manage PostgreSQL, MySQL, and Redis instances for reliable performance.
• Own security within the build pipeline, run static analysis, secret scanning, dependency checks, and container image scanning.
• Maintain up-to-date Go, Python, and Node base images and block CVEs during builds.
• Enforce immutable image tags in ECR, implement image signing, lifecycle policies, and triage scan findings.
• Conduct quarterly reviews of system access with records showing permissions.

Skills

DevOps

Cloud security

Docker

Kubernetes

AWS

GCP

PostgreSQL

MySQL

Redis

Python

Go

Bash

CI/CD security

Dockerfiles/Helm

OWASP Top 10

Tools

Terraform

New Relic

Graylog

Sentry

Bugsnag

Job description

About the role:

• - Build and strengthen security measures across cloud infrastructure and deployed applications
• - Set up and run network systems including VPNs, NATs, and VPCs to connect services securely
• - Deploy monitoring and observability tools such as New Relic, Graylog, Sentry, and Bugsnag across the platform
• - Automate how infrastructure is created, watched, and restored using Docker, Kubernetes, and Terraform
• - Look after PostgreSQL, MySQL, and Redis instances, keeping them running smoothly and efficiently
• - Own security within the build pipeline, running static analysis, scanning for secrets, checking dependencies, and scanning container images
• - Maintain up-to-date Go, Python, and Node.js base images and block known CVEs during builds
• - Enforce immutable image tags in ECR, implement image signing, set lifecycle policies, and triage scan findings
• - Run quarterly reviews of system access with records showing who has what permissions

What we're looking for:

• - 1–2.5 years in a DevOps role or similar engineering position focused on infrastructure or platform work
• - Hands-on work with AWS services including EC2, RDS, S3, and Lambda
• - Some experience with GCP, particularly Firebase and RTDB
• - Ability to work with Docker and Kubernetes at a practical level
• - Knowledge of how PostgreSQL, MySQL, and Redis work
• - Comfort with cloud and application security approaches and guidelines
• - Can read Dockerfiles and Helm charts and spot problems in them
• - Experience plugging security scanners like Trivy, Semgrep, SonarQube, or GitLeaks into CI/CD workflows
• - Can write scripts in Python or Go and work with Bash
• - Understand AWS cloud infrastructure and how its pieces fit together
• - Familiar with OWASP Top 10 and the security risks that face APIs