Key Responsibilities

Build and maintain CI/CD pipelines for build, test, deployment, release and rollback across UAT and production.
Provision and manage AWS infrastructure as code (Terraform / CloudFormation) within a Landing Zone construct — accounts, VPCs, subnets, security groups, IAM roles and guardrails.
Operate core AWS services: EC2, S3, RDS, EKS/ECS, Lambda, ELB, Route 53, CloudFront, CloudWatch, Systems Manager, Secrets Manager and KMS.
Containerize applications and manage Kubernetes clusters, including deployments, scaling, Helm charts and cluster upgrades.
Implement observability — metrics, logs, traces, dashboards and alerting — and drive reduction in MTTD/MTTR.
Embed security into the pipeline: secrets management, least-privilege IAM, vulnerability and image scanning, patching, and integration of logs with the SOC/SIEM.
Support DR, backup and business-continuity design, and participate in resiliency drills and failover testing.
Track and optimize cloud spend — right-sizing, reserved/savings plans, tagging discipline and monthly cost reporting.
Follow a defined change management, approval and documentation processes; maintain runbooks, SOPs and audit trails.
Work with developers, QA, infrastructure, and information security teams to improve deployment velocity without compromising stability.
Support regulatory and audit requirements (SEBI / exchange cyber security guidelines, DPDPA), including evidence and log retention.

Must-Have Skills

4–5 years in a DevOps / Cloud / SRE role, with AWS as the primary platform.
Strong hands-on experience with at least one CI/CD toolchain: Jenkins, GitLab CI, GitHub Actions or Azure DevOps.
Infrastructure-as-a-code: Terraform (preferred), Ansible, Helm.
Containers and orchestration: Docker and Kubernetes (EKS preferred).
Linux administration, networking fundamentals (DNS, TCP/IP, load balancing, VPN), and shell scripting.
Scripting/automation in Python or Bash.
Git-based source control and branching strategies.
Monitoring and logging: Prometheus, Grafana, ELK, CloudWatch or Datadog.

Good to Have

AWS certification (Solutions Architect Associate or DevOps Engineer Professional).
Exposure to broking, capital markets or BFSI environments, including low-latency or co-location setups.
Experience with hybrid and multi-cloud (Azure) environments and on-premises to cloud migration.
Familiarity with DevSecOps tooling (SAST/DAST, SCA, image scanning) and policy-as-code.
Exposure to AI/ML workload enablement on cloud (e.g., AWS Bedrock) and associated guardrails.
FinOps / cloud cost management practices.

Qualifications

B.E./B.Tech/MCA in Computer Science, IT or related discipline.
Candidates with 2-3 years of experience from premier institutes (IITs/NITs/BITS/IIITs) with strong fundamentals in Linux, networking, scripting and cloud will be considered at a Junior Cloud Engineer level with a structured mentoring plan.

Behavioural Expectations

Ownership mindset with the ability to work in a regulated, high-availability environment.
Strong documentation and communication skills; comfortable working with vendors and internal stakeholders.
Willingness to participate in on-call, weekend release windows and drills as required.

What We Offer

Ownership of a growing AWS estate and modern DevOps practices in a fast-paced capital markets environment.
Exposure cloud migration, AI adoption, and cyber resilience initiatives.
A collaborative culture where technology directly drives business growth.

Emkay Global Financial Services Ltd

New Jobs