Aws Devops Engineer

About the role

You will be the technical owner of the AWS estate for a leading RBI-regulated NBFC, delivered under Bootlabs' 247 multi-cloud managed services engagement. The estate runs the client's core lending, payments and customer channels: 300+ EC2 instances, 600+ Lambda functions, 36 EKS clusters/resources, 70 RDS instances, 250+ load balancers, MSK, ElastiCache and DynamoDB. You are the final technical escalation point for AWS and lead P1/P2 incidents from detection to RCA.

Key responsibilities

• Own the architecture, stability and operational health of the AWS estate across production and non-production accounts.
• Lead EKS platform operations: cluster upgrades, node groups, add-ons, ingress, autoscaling and workload troubleshooting.
• Own AWS networking: VPC design, Transit Gateway, Direct Connect, Route 53, security groups, NACLs and hybrid connectivity with Azure, GCP and the data centre.
• Govern IAM, KMS and Secrets Manager: least-privilege roles, key policies, secret rotation and access reviews.
• Own Terraform/IaC: module standards, state management, drift control and code review for infrastructure changes.
• Maintain CI/CD pipelines on Jenkins, GitHub, Bitbucket and Azure DevOps; guide safe deployment, rollback and release practices.
• Act as L3 escalation point and incident commander for P1/P2 incidents; deliver RCAs with corrective actions within 5 business days.
• Plan and execute DR drills: readiness checks, DB/replica failover, traffic switch, failback and post-drill health verification.
• Drive infra-layer patching (OS, EKS, RDS versions) and remediation of VAPT and vulnerability findings, including emergency/zero-day patches.
• Run quarterly cost optimisation reviews: rightsizing, unused resource clean-up and tagging compliance.
• Mentor L1/L2 engineers, own runbooks and contribute to architecture reviews and audit evidence.
• Be available on-call for P1 incidents.

Must-have skills

• 710 years in cloud/DevOps, with 4+ years hands-on in production AWS at scale.
• Deep EKS/Kubernetes expertise: upgrades, networking (CNI), RBAC, Helm, troubleshooting.
• Strong AWS networking: VPC, Transit Gateway, Direct Connect, Route 53, ALB/NLB, PrivateLink.
• IAM, KMS, Secrets Manager, CloudTrail, AWS Config and CloudWatch.
• Terraform at production level, including module design and state management.
• CI/CD with Jenkins and at least one of GitHub Actions, Bitbucket Pipelines or Azure DevOps.
• Proven incident command and RCA writing in a 247 environment.
• Scripting in Bash and Python.

Good to have

• AWS Certified Solutions Architect – Professional or DevOps Engineer – Professional.
• Experience in BFSI/NBFC or other RBI-regulated environments (RBI IT guidelines, PCI-DSS, ISO 27001, DPDP Act).
• Exposure to Azure or GCP in a multi-cloud setup.
• MSK/Kafka, ElastiCache/Redis, RDS/Aurora operations.
• Managed-services or client-facing delivery experience.

What success looks like in the first 90 days

• Full ownership of the AWS runbooks, inventory and escalation path.
• Zero SLA breaches on AWS P1/P2 incidents you command.
• At least one DR drill executed end to end with a published report.
• Open AWS VAPT findings on the infra layer reduced and tracked to closure.

Screening notes for HR

• Knock-out questions: Onsite at Kurla daily? Notice period 30 days? Has led a P1 as incident commander? Has run an EKS version upgrade in production?
• Technical round focus: EKS upgrade and troubleshooting scenario; Transit Gateway/Direct Connect routing; Terraform state and drift; walk-through of an RCA they wrote; DR failover design.