Site Reliability Engineer

Overview

• We are seeking a skilled DevSecOps / Sovereign Cloud Engineer with 5-10 years of experience to design, operate, and secure regulated cloud environments across AWS and GCP.
• The role combines cloud operations, security engineering, and SRE practices, including Kubernetes management, Infrastructure as Code (Terraform), CI/CD automation (Git/GitLab), and secrets management (HashiCorp Vault).
• The ideal candidate will drive security incident response, platform reliability, observability (Datadog), and 24x7 incident management while embedding security-by-design principles, automation-first practices, and continuous improvement into sovereign cloud platforms.
• Strong expertise in cloud security, networking fundamentals, compliance-driven environments, and cross-functional incident leadership is essential.
• A week in the life of an DevSecOps Engineer:
• Deploy, manage and maintain the organization s Sovereign Cloud strategy, ensuring compliance with regulatory and data residency requirements on AWS/GCP public cloud.
• Managing and operating Kubernetes clusters including upgrades, scaling, and workload optimization.
• Security Incident Response & Risk Mitigation: Investigate, analyze, and remediate cloud security incidents, proactively identifying and mitigating vulnerabilities within AWS environments.
• Secure Cloud Strategy & Continuous Improvement: Support and enhance the organization s AWS cloud strategy by embedding security best practices and continuously improving the cloud security posture.
• Security Automation & DevSecOps Enablement: Implement and tune security tools, automate policy-driven responses, and advocate DevSecOps practices to ensure secure-by-design cloud operations.
• Implementing and managing Infrastructure as Code (Terraform) to provision, modify, and secure cloud resources.
• Maintaining and optimizing CI/CD pipelines using Git/GitLab, ensuring secure and automated deployments.
• Managing secrets and secure access using HashiCorp Vault, including token lifecycle, access policies, and secrets rotation.
• Troubleshooting complex infrastructure, networking, container, and performance issues across distributed systems.
• Observability & Reliability Engineering: Monitor system health and performance using Datadog, define and manage SLIs/SLOs, and drive continuous reliability improvements aligned with SRE principles.
• Incident Management & Operational Governance: Manage 24x7 alerting and incident response through PagerDuty, perform root cause analysis (RCA), and actively contribute to incident, problem, and change management processes.
• Cloud Security & Performance Optimization: Conduct proactive system hardening, vulnerability remediation, performance tuning, and capacity planning across cloud environments.
• Automation & Continuous Improvement: Develop automation using Python/Bash/Terraform/Ansible to reduce manual effort, improve operational efficiency, and strengthen platform resilience.