Systems Engineer (Cloud) - Swing Shift

Gemological Institute of America; India; On-site; INR 3,000,000 - 4,200,000; Full time

Job summary

Gemological Institute of America seeks a senior cloud infrastructure engineer to own and operate a large-scale cloud estate. You will design resilient deployments across AWS and Azure, implement IaC with Terraform and automation with Ansible and Python, and manage security, cost, and observability in a globally distributed environment.

The role requires strong scripting, experience with Kubernetes in production, and a disciplined change-management mindset to ensure reliable incident response and

Qualifications

• Bachelor's degree or equivalent professional experience.
• 8+ years of infra engineering with 5+ years in production cloud infra.
• Hands-on AWS production scale (EC2, VPC, RDS, etc.).

Skills

AWS

Azure

IAM & Entra ID

Terraform

Ansible

Python

Bash

Kubernetes

Monitoring

Security hardening

DR planning

CI/CD

Linux

Education

Bachelor's degree in CS/IT/Engineering

Tools

GitHub

GitLab

Jenkins

Azure DevOps

Job description

JOB COMPETENCIES

• AWS depth: Advanced, practical command of AWS infrastructure services across compute, storage, networking and databases, sufficient to design a resilient deployment and to troubleshoot one that is failing.
• Multi-cloud consistency: Working command of Microsoft Azure alongside AWS, and the judgement to operate both to one standard rather than two divergent practices.
• Cloud identity command: Practical administration of AWS IAM and Microsoft Entra ID for infrastructure access, including federation, least-privilege role design, managed identities and elimination of long-live credentials.
• Infrastructure as code: Treats infrastructure as code held in version control with peer review, state management and a promotion path, rather than as a set of console changes later documented.
• Automation mindset: Strong Terraform, Ansible, Python and Bash capability applied to provisioning, configuration, patching, remediation and reporting, treating repeated manual work as a defect.
• Container platform capability: Practical operation of Kubernetes and managed container services, including cluster lifecycle, RBAC, ingress, storage and autoscaling, and the boundary between platform and application.
• Observability judgement: Builds monitoring that detects failure early and tunes alerting so that what reaches an engineer is actionable rather than noise.
• Security orientation: Applies hardening baselines, patching and vulnerability remediation to cloud instances and cloud service configuration with the same discipline expected on premises.
• Resilience focus: Designs for availability zone and region failure where required and proves recovery by test rather than assuming it from a snapshot policy.
• Operational discipline: Runbook-driven execution, adherence to change control, and structured validation before and after every change, with a tested rollback path.
• Problem solving: Strong analytical skills with proven ability to identify root cause across compute, network, identity, storage, container and application layers rather than replacing an instance and moving on.
• Support capability: Supports cloud workloads serving users and business functions, works the agreed shift pattern, and hands over open work explicitly at shift boundaries.
• Collaboration: Works effectively with application teams, information security, the Wintel and Linux engineers and the M365 Platform Engineer and can hold a platform boundary without becoming a bottleneck.
• Documentation and knowledge transfer: Clear, maintainable runbooks, architecture documentation and code comments that reduce single-person dependency across shifts.
• Communication: Excellent written and verbal communication in English, with the ability to explain a cloud outage, a cost variance or an access restriction to technical and business stakeholders in other regions.
• Accountability and autonomy: Owns the cloud estate end to end, prioritizes across a broad surface, and makes sound technical decisions with limited information and under incident pressure.

MINIMUM QUALIFICATIONS

• Bachelor's degree in computer science, Information Technology, Engineering or a closely related field, or equivalent professional experience. (Required)
• 8+ years of experience in infrastructure engineering or administration, including 5+ years with substantial hands-on responsibility for production cloud infrastructure. (Required)
• Demonstrated hands-on administration of AWS at production scale, including EC2 and auto scaling, EBS and S3, VPC design, subnets, routing, security groups and peering or Transit Gateway, Route 53, ELB and ALB, and RDS. (Required)
• Demonstrated hands-on experience with Microsoft Azure infrastructure services. (Required)
• Demonstrated hands-on administration of AWS IAM, including roles, policies, instance profiles, permission boundaries and least-privilege design. (Required)
• Demonstrated experience with Microsoft Entra ID as it applies to cloud access, including groups, service principals, app registrations, managed identities and federation or single sign-on with AWS. (Required)
• Demonstrated experience building and maintaining Terraform configurations and modules in production, including remote state, environment separation and a promotion path. (Required)
• Demonstrated experience with Ansible for configuration management, hardening and patching of cloud instances. (Required)
• Strong Python and Bash scripting ability, including use of cloud SDKs and APIs such as boto3 for automation and reporting. (Required)
• Demonstrated experience operating Kubernetes in production, including a managed service such as EKS, ECS or AKS, covering cluster lifecycle, RBAC, ingress, storage and autoscaling. (Required)
• Demonstrated ownership of patching and operating system currency for cloud instances, including compliance reporting and exception governance against defined standards. (Required)
• Experience with cloud hardening baselines such as CIS, drift detection and remediation, and remediation of findings from a vulnerability management programme. (Required)
• Experience with encryption and secrets management in cloud, including KMS key policy and rotation, and a secrets or parameter store. (Required)
• Demonstrated experience with cloud monitoring and observability tooling, such as CloudWatch, Azure Monitor, Prometheus, Grafana, Datadog, Splunk or ELK, including alert tuning. (Required)
• Demonstrated experience managing cloud cost and consumption, including right-sizing, commitment planning, tagging governance and variance reporting. (Required)
• Experience with backup, replication and disaster recovery for cloud workloads, including cross-region or cross-account copies and validation by restore test. (Required)
• Experience with hybrid connectivity between cloud and on-premises, including VPN or Direct Connect and DNS resolution across environments. (Required)
• Experience with CI/CD tooling such as GitHub, GitLab, Jenkins or Azure DevOps for delivery of infrastructure change. (Preferred)
• Experience operating within a formal change-management process, including Change Advisory Board submission, rollback planning and post-implementation review. (Required)
• Experience working within a shift-based infrastructure team supporting a globally distributed estate, including structured handovers. (Required)
• Linux administration capability sufficient to build, harden and troubleshoot the instances hosting cloud workloads. (Required)
• Professional proficiency in spoken and written English, sufficient to coordinate with global infrastructure and application teams and to communicate with senior stakeholders. (Required)
• Certification such as AWS Certified Solutions Architect - Associate or Professional, or AWS Certified SysOps Administrator. (Preferred)
• Certification such as Microsoft Azure Administrator (AZ-104), HashiCorp Certified: Terraform Associate, or a Kubernetes credential such as CKA. (Preferred)
• ITIL 4 Foundation, or equivalent demonstrated knowledge of incident, change and problem practice. (Preferred)

An Equal Opportunity Employer All employment decisions are made without regard to unlawful considerations of race, sex, religion, national origin, age, disability, or any other legally protected status. Reasonable accommodations are available upon request.

Disclaimer: This job description indicates in general terms, the type and level of work performed as well as the typical responsibilities of employees in this classification and it may be changed by management at any time. Other duties may also apply. Nothing in this job description changes the at-will employment relationship existing between the Company and its employees.

Working at GIA

With a reach that spans the globe - GIA is a nonprofit institute dedicated to ensuring the public trust in gems and jewelry through cutting edge gemological research and rigorous education programs. We have shaped the gem industry, protected millions of consumers and taught generations of jewelers and gemologists all over the world since 1931. Comprising over 3,000 employees in 13 countries, GIA is a place of diversity, innovation, creativity and engagement. Whether you are passionate about science, history, design, education, IT or a corporate career, GIA has a place for you. Join one of the world’s most colorful and brilliant industries with an organization that serves the public good by bringing knowledge and objectivity to gems and jewelry.

What GIA Does

• Research that deepens the world’s understanding of gems and jewelry manufacturing and shares these findings with academia, the industry, and the gem-buying public
• Education that builds careers and enhances the knowledge and integrity of the gem and jewelry industry
• Standard setting that protects those who buy gems by ensuring the qualities of gems and jewelry are objectively and consistently described
• Laboratory services that provide an unbiased and scientific assessment of gem quality

GIA Employee Benefits

GIA offers competitive salaries and exceptional benefits as well as training opportunities to employees all over the globe.

Crime Statistics (For U.S. Only)

In accordance with the Jeanne Clery Act, GIA's current annual crime statistics are available at: Clery Report: Annual Disclosure of Campus Security Policies and Crime Statistics