Senior Cloud Database Engineer - Automation & Terraform

Location: Hyderabad / Pune

Job Description: DB Engineering team is seeking an experienced Senior Cloud Database Engineer to design, automate, and

operate secure, resilient database platform capabilities on AWS. This is a hands-on engineering role combining database

expertise with Terraform, Ansible, CI/CD, and cloud automation. The engineer will deliver reusable self-service patterns,

recovery and DR automation, cross-account tooling, security integrations, observability, and operational pipelines for Oracle,

Microsoft SQL Server, PostgreSQL, Amazon RDS, Amazon Aurora, and SQL Server on EC2. You will partner with DB Ops,

application teams, Security, Cloud Platform, FinOps, and DevHub teams to deliver scalable, supportable database services.

Key Responsibilities

Database Platform Engineering

 Engineer and support AWS database platforms including Amazon RDS for Oracle, SQL Server, and PostgreSQL;

Amazon Aurora PostgreSQL and Aurora Serverless v2; SQL Server on EC2; and Oracle RDS HA/DR and archival

capabilities.

 Evaluate emerging database technologies such as Aurora DSQL and define architecture, TCO, automation, and Day-2

support recommendations for viable solutions.

Infrastructure as Code (Terraform) & Automation

 Develop and maintain enterprise-grade Terraform modules with robust provider and module versioning, remote-state

management, workspace/environment strategies, IAM policies, validations, tagging standards, and policy guardrails.

 Build reusable infrastructure automation for AWS services including RDS, Aurora, SQL Server on EC2, Oracle,

PostgreSQL, backup and recovery workflows, high availability configurations, disaster recovery solutions, and cross-

account operations.

 Author Ansible roles and playbooks for Day-2 operations, operational maintenance activities, compliance

remediation, patching automation, and database lifecycle management, ensuring idempotency, resiliency, and

containerized execution through Harness.

 Design and develop AWS SSM Automation Documents for infrastructure provisioning, resource discovery, diagnostics,

backup validation, recovery execution, and repeatable operational procedures.

 Implement infrastructure automation for SQL Server recovery, Always On Availability Group restoration, VSS snapshot

recovery, RDS cross-region failover, disaster recovery orchestration, and AWS ARC validation frameworks.

 Integrate Terraform, Ansible, and AWS automation services with CI/CD platforms to enable automated plan/apply

workflows, change management approvals, release governance, drift detection, and continuous compliance

validation.

 Embed security and compliance controls within infrastructure code, including SSL validation, IAM policy enforcement,

AWS Secrets Manager integrations, SQL credential rotation, StrongDM database-access onboarding, and adoption of

AWS-managed database credentials.

 Automate security posture assessments and remediation workflows leveraging CIS-CAT Pro, Qualys, compliance

scanning tools, evidence collection, and policy-driven governance frameworks.

 Develop observability and operational automation through AWS DevOps Guru, Datadog integrations, log analytics,

cluster monitoring, error-log auditing, health dashboards, and automated alerting mechanisms.

 Establish infrastructure lifecycle management standards, including database engine version governance, patch

management automation, deprecated-version controls, release channel management, and automated notifications.

 Lead automation initiatives for database modernization, Flyway integration, Oracle multi-tenant environments, DMS

archival solutions, and operational proof-of-concept implementations supporting scalable self-service platform

capabilities.

 Collaborate with DB Ops, application teams, FinOps, Security, and Platform Engineering stakeholders; produce

architecture documents, TCO analyses, runbooks, use cases, and release notes.

Provisioning & Self-Service Automation

 Build and maintain reusable Terraform modules for RDS, Aurora, SQL Server on EC2, Oracle, PostgreSQL, recovery

automation, and cross-account database operations.

 Create Backstage Scaffolder templates, repository scaffolding, custom field extensions, and Tech Docs for database

provisioning and operations.

 Design secure, versioned, self-service patterns that reduce manual effort while preserving platform, security,

compliance, and operational guardrails.

 Evaluate AI Skills, AWS DevOps Agent, and AI Skills plus Harness pipeline integrations; convert validated proofs of

concept into supported patterns

 Build Harness pipelines for Day-1 provisioning and Day-2 operations, including cross-account creation module

enhancements.

Required Qualifications

 7+ years of database, cloud infrastructure, platform engineering, DevOps, or related experience, including significant

hands-on automation delivery.

 3+ years of production AWS experience, including RDS, Aurora, EC2, EBS, IAM, Lambda, CloudWatch, Secrets

Manager, SSM, AWS Config, and cross-account access patterns.

 Strong Terraform expertise, including reusable modules, variables, remote state, workspaces/environments, IAM

policies, testing, validation, and secure code review practices.

 Practical Ansible expertise, including playbook and role authoring, idempotency, error handling, and CI/CD-based

execution.

 Strong knowledge of at least two of Oracle, Microsoft SQL Server, PostgreSQL, Amazon RDS, Amazon Aurora

PostgreSQL, SQL Server Always On Availability Groups, and SQL Server on EC2.

 Experience with database backup, restore, HA/DR, replication, snapshots, cross-region recovery, and operational

runbooks in business-critical environments.

 Experience with Harness, Git-based source control, or comparable enterprise CI/CD tooling.

 Clear technical writing and communication skills, including the ability to explain designs, operational risk, and trade-

offs to technical and business stakeholders.

Nice-to-Have

 Experience with Backstage or comparable developer platforms, including Scaffolder templates, TechDocs, and self-

service portal extensions.

 Hands-on experience with AWS ARC, AWS DMS, Database Activity Streams, AMP, CloudFormation, AWS Config, and

SSM Automation Documents.

 Experience with Datadog, AWS DevOps Guru, Qualys, CIS-CAT Pro, StrongDM, Flyway, and database compliance

automation.

 Knowledge of VSS snapshots, Windows Server administration, SQL Server cluster troubleshooting, and database host

observability.

 AWS and/or HashiCorp certifications are beneficial.

KPIs & Success Measures

 Self-service adoption: increasing percentage of database services provisioned or operated through supported

Terraform modules, templates, and Harness pipelines.

 Recovery readiness: repeatable, tested, and documented recovery workflows with improved RTO/RPO confidence

and cross-account visibility.

 Automation quality: versioned, validated modules and playbooks with clear ownership, release practices, and

reduced manual intervention.

 Security and compliance: measurable improvements in secrets rotation, secure access, compliance evidence,

vulnerability management, and database platform guardrails.

 Operational enablement: production-ready documentation, monitoring, dashboards, and DB Ops handoffs for

supported capabilities.

Tooling Stack

 AWS: RDS, Aurora, Aurora Serverless v2, Aurora DSQL, EC2, EBS, DMS, Secrets Manager, SSM, AWS Config, AWS ARC,

AMP, CloudWatch, Lambda, IAM/SCP.

 Database: Oracle, Microsoft SQL Server standalone and Always On AG, PostgreSQL, Aurora PostgreSQL, and Aurora

DSQL.

 Automation: Terraform, Ansible, AWS SSM Automation Documents, CloudFormation, snapshots and recovery tooling.

 CI/CD and Developer Platform: Harness, DevHub/Backstage, Git, Scaffolder templates, TechDocs, and Flyway.

 Security and Observability: StrongDM, Qualys, CIS-CAT Pro, AWS Secrets Manager, custom SQL Rotator Lambda,

MasterUserSecret, Datadog, AWS DevOps Guru, CloudWatch, and Database Activity Streams.