Senior AWS DevSecOps & AI Platform Engineer

Job Title

Senior AWS DevSecOps & AI Platform Engineer

Experience Required

5+ Years in AWS / Cloud Engineering

Terraform Experience

4+ Years

Location

Gurugram

Work Mode

Onsite

Employment Type

Full-time

About the Role

We are looking for an experienced Senior AWS DevSecOps & AI Platform Engineer with strong expertise in AWS cloud infrastructure, Kubernetes, Infrastructure as Code (IaC), CI/CD automation, cloud security, and database administration.

The ideal candidate will be responsible for designing and maintaining secure, scalable, reliable, and cost-efficient cloud environments while supporting microservices-based applications and implementing DevSecOps best practices. The role also involves building and deploying AI agents using Amazon Bedrock and Bedrock AgentCore, along with managing enterprise development and collaboration tools.

Mandatory Skills

AWS (EC2, EKS, ECS, Lambda, S3, CloudWatch), Kubernetes, Terraform, Jenkins, Bitbucket Pipelines, CI/CD, DevSecOps, AWS Security Services (IAM, WAF, GuardDuty, Security Hub, KMS, Secrets Manager), Microservices, Helm, PostgreSQL, Oracle SQL, RDS, Jira, Confluence, Amazon Bedrock, Bedrock AgentCore, AWS Networking, and Cloud Cost Optimization.

Key Responsibilities

AWS Cloud Infrastructure : Design, implement, and maintain AWS infrastructure with a focus on scalability, availability, security, reliability, and cost optimization.

Microservices & Containerization : Manage and support distributed microservices architectures, including deployment, monitoring, troubleshooting, performance optimization, service meshes, and API gateways.

Kubernetes Administration : Administer and optimize Kubernetes clusters, including Amazon EKS and self-managed environments, covering upgrades, networking, workload management, scaling, and resource optimization.

Cloud Security & Compliance : Implement and manage AWS security services, including IAM, GuardDuty, Security Hub, WAF, KMS, Secrets Manager, AWS Config, and CloudTrail.

DevSecOps Implementation : Integrate security testing, vulnerability scanning, container security, and compliance-as-code tools into CI/CD pipelines.

CI/CD & Source Control : Manage Bitbucket repositories, branching strategies, permissions, and Bitbucket Pipelines. Build and optimize Jenkins pipelines using declarative and scripted approaches.

Infrastructure as Code : Develop and maintain Terraform modules, manage remote state and workspaces, detect infrastructure drift, and implement reusable infrastructure provisioning practices.

Database Administration : Provision, manage, secure, and optimize AWS RDS databases, particularly PostgreSQL and Oracle, including backups, replication, patching, performance tuning, and migrations.

Jira & Confluence Administration : Manage projects, workflows, automation rules, permissions, user access, spaces, schemes, and plugins.

Monitoring & Reliability : Define and monitor SLIs, SLOs, and SLAs; implement observability best practices; and participate in incident management, root cause analysis, and post-incident reviews.

AI Agent Development : Design, build, and deploy AI agents using Amazon Bedrock and Bedrock AgentCore, including agent runtime, memory, tools, gateway integration, identity and access management, guardrails, and lifecycle management across environments.

Cloud Connectivity

Support hybrid cloud connectivity using AWS Direct Connect, VPN, and Transit Gateway.

Cost Optimization : Apply FinOps practices to monitor cloud expenditure, optimize resource utilization, and improve infrastructure efficiency.

API Integrations

Integrate third-party APIs while implementing authentication, rate limiting, error handling, and webhook management.

Required Skills & Qualifications

5+ years of hands-on experience with AWS cloud services, including EC2, ECS, EKS, Lambda, ALB, CDN, S3, CloudWatch, Amazon Bedrock, and Bedrock AgentCore.

Strong understanding of AWS networking, multi-account strategies, landing zone architecture, and hybrid connectivity.

4+ years of practical experience with Terraform, including module development, remote state management, workspaces, drift detection, and state operations.

Extensive experience administering Kubernetes, preferably Amazon EKS, including Helm, Kustomize, operators, RBAC, network policies, autoscaling, and multi-tenancy.

Proven experience managing distributed microservices, service meshes, API gateways, and inter-service communication.

Strong knowledge of AWS security services, including IAM, Service Control Policies (SCPs), WAF, KMS, Secrets Manager, AWS Config, and CloudTrail.

Experience implementing least-privilege access, zero-trust principles, and cloud security compliance controls.

Hands-on experience integrating DevSecOps tools such as Snyk, Trivy, Checkov, and SonarQube into CI/CD pipelines.

Understanding of OWASP security principles, CIS benchmarks, vulnerability management, and container security.

Proficiency in Bitbucket repository administration, branch permissions, and YAML-based Bitbucket Pipelines.

Strong experience developing and maintaining Jenkins CI/CD pipelines, shared libraries, plugins, and build agents.

Experience administering AWS RDS databases, particularly PostgreSQL and Oracle SQL, including backup, replication, performance tuning, and migration activities.

Experience administering Jira and Confluence, including workflows, permissions, automation, and plugin management.

Working knowledge of Azure services, particularly Web Apps and Logic Apps/Workflows.

Practical experience with Amazon Bedrock, including model invocation, guardrails, and AI agent development and deployment using Bedrock AgentCore.

Understanding of third-party API integration, authentication mechanisms, rate limiting, error handling, and webhook management.

Familiarity with FinOps practices and cloud cost optimization.

Good-to-Have Skills

Additional Azure experience, including networking, Azure SQL Managed Instance, and Azure Kubernetes Service (AKS)