Operations Engineer

Project Role : Operations Engineer

Project Role Description : Support the operations and/or manage delivery for production systems and services based on operational requirements and service agreement.

Must have skills : Amazon Web Services (AWS)

Good to have skills : NA
Minimum 7.5 year(s) of experience is required

Educational Qualification : 15 years full time education

Summary:
A Cloud Service Engineer is responsible for the day-to-day operation, monitoring, support, and maintenance of enterprise cloud infrastructure across AWS and GCP. The role ensures the availability, performance, security, and cost efficiency of cloud services while managing incidents, service requests, changes, and platform health activities across multi-cloud environments in a regulated financial services organisation.

At this level Cloud Service Engineer forms the primary operational execution layer within the cloud platform tower - a proficient hands-on operator with strong working knowledge across both cloud providers, disciplined incident and change management practices, and the ability to collaborate effectively with network, security, application, and platform engineering teams.

Roles Responsibilities:
Cloud Operations Platform Health
- Monitor cloud infrastructure availability, performance, and security posture across AWS and GCP - using native and third-party observability tooling to detect and respond to anomalies proactively
- Manage day-to-day cloud operations - compute lifecycle (EC2, GCE), managed Kubernetes (EKS, GKE), storage management, and network connectivity across both platforms
- Perform structured incident management and service restoration - diagnosing and resolving cloud platform issues within SLA commitments and escalating to Principal Engineers for complex problems
- Execute cloud resource provisioning, configuration changes, and decommissioning - following approved change management procedures with pre- and post-change validation - Support Major Incident Management (MIM) for cloud-impacting events - provide technical input, co-ordinate with AWS Support and GCP Premium Support, and maintain clear stakeholder communication throughout
- Manage cloud cost monitoring and anomaly alerting - identifying unexpected spend, untagged resources, and rightsizing opportunities across AWS and GCP estates
- Maintain CMDB accuracy for cloud assets - ensuring tagging compliance, resource inventory, and lifecycle records are current and audit-ready
- Participate in on-call and escalation support rotas for business-critical cloud services
Infrastructure as Code Automation
- Execute and maintain Terraform-based infrastructure-as-code for cloud resource provisioning, configuration updates, and drift remediation across AWS and GCP
- Support CI/CD pipeline operations - managing pipeline failures, environment provisioning, and deployment validation across GitHub Actions or Cloud Build
- Identify and implement operational automation opportunities - reducing manual toil through scripting (Python, Bash) and cloud-native automation services - Perform routine patching and update cycles for cloud platform components - OS patching on managed instances, Kubernetes version upgrades, and managed service maintenance windows
- Maintain runbooks, SOPs, and operational documentation to audit-ready standards that support team efficiency and knowledge continuity
- Contribute to continuous improvement initiatives - identifying platform reliability gaps, change failure patterns, and automation opportunities within the cloud operations function

Security, Compliance Governance
- Monitor and respond to cloud security alerts - AWS Security Hub and GCP Security Command Center - investigating findings and co-ordinating remediation within defined SLAs
- Manage IAM access requests and enforce least-privilege access controls across AWS and GCP - ensuring access reviews and certifications are completed on schedule
- Execute vulnerability remediation and security patching across cloud infrastructure - tracking CVEs, prioritising remediation, and evidencing closure - Support audit, regulatory, and compliance activities - producing cloud configuration evidence, access logs, and compliance reports for PCI DSS, SOX, and FSI regulatory review
- Ensure cloud resource tagging, data classification, and residency controls are enforced across both platforms - maintaining compliance with FSI data governance requirements
- Perform root cause analysis (RCA) for recurring cloud incidents and security events - documenting findings and driving preventive actions to reduce recurrence

Professional Technical Skills:
Must-Have Technical Skills
AWS Operations: EC2, EKS/ECS, S3, RDS, VPC, IAM, CloudWatch, Security Hub - day-2 operations, incident diagnosis, change execution, and cost monitoring
GCP Operations: GCE, GKE, GCS, Cloud SQL, VPC, IAM, Cloud Monitoring, SCC - platform operations, connectivity troubleshooting, and security alert response
Infrastructure as Code: Terraform - plan/apply execution, state management, drift detection, and module consumption across AWS and GCP environments
Kubernetes Operations: EKS and GKE - workload health monitoring, node management, pod troubleshooting, and Kubernetes version upgrade support
Cloud Networking: VPC design understanding, security group and firewall rule management, DNS troubleshooting, and hybrid connectivity support across both platforms
Cloud Security: IAM policy management, least-privilege enforcement, security alert triage (GuardDuty, SCC), CVE remediation, and compliance evidence production Observability Monitoring: CloudWatch and GCP Cloud Monitoring - dashboard operation, alert configuration, log querying (CloudWatch Logs, Cloud Logging), and incident correlation
Incident Change Management: Structured P1-P3 cloud incident handling, ITIL-aligned change execution, post-change verification, and RCA documentation in FSI environments
Cost Management: Cloud cost monitoring, tagging compliance, untagged resource identification, and rightsizing recommendations across AWS and GCP estates
Scripting Automation: Python or Bash - operational scripting for cloud task automation, SDK-driven resource management (boto3, GCP Python client), and alert-driven workflows
FSI Compliance: PCI DSS, SOX - cloud audit logging, data residency enforcement, access certification, and regulatory evidence production across both platforms
CMDB Asset Management: Cloud asset tagging strategy, resource inventory accuracy, lifecycle tracking, and CMDB updates aligned to FSI change management standards
Preferred / Advantageous
- Experience with cloud cost management tooling - AWS Cost Explorer, GCP Billing, or third-party FinOps platforms (CloudHealth, Apptio)
- Familiarity with GitOps workflows and CI/CD pipeline operations - GitHub Actions, ArgoCD, or Cloud Build - Exposure to cloud-native security posture management (CSPM) - Prisma Cloud, Wiz, or equivalent - for compliance automation
- ITIL Foundation or equivalent service management framework certification

- Cloud incidents are resolved within SLA - with accurate RCA documentation and preventive actions that measurably reduce recurrence across AWS and GCP
- Cloud resource inventory, tagging, and CMDB records are consistently accurate - supporting cost allocation, audit readiness, and lifecycle decision-making
- Changes are executed cleanly across both cloud platforms - validated, implemented without unplanned impact, and verified post-completion - Security and compliance posture is maintained - alerts are triaged promptly, CVEs are remediated within SLA, and audit evidence is produced without remediation effort
- Platform, application, network, and security teams regard the Cloud Service Engineer as a technically credible, reliable operational partner who resolves cloud issues efficiently and proactively

The candidate should have minimum 7.5 years of experience in Amazon Web Services (AWS).

This position is based at our Bengaluru office.

A 15 years full time education is required.

Qualification 15 years full time education