Senior Cloud Platform Engineer

The Senior Cloud Platform Engineer designs, builds, and operates automated, secure, and scalable cloud platforms across AWS and Azure for enterprise clients. This is a hands-on engineering role — owning landing zone architecture, Infrastructure as Code, CI/CD pipelines, container platforms, and observability — with the technical depth to troubleshoot production issues and the maturity to mentor junior engineers and influence platform standards across client engagements.

Key Responsibilities

• Platform & Landing Zone Engineering
• Design and build secure, multi-account/multi-subscription landing zones on AWS (Control Tower, Organizations) and Azure (Landing Zones, Management Groups).
• Implement network architecture — VPCs/VNets, transit gateways, hybrid connectivity, DNS, and security group / NSG design.
• Define and enforce account/subscription governance guardrails, tagging standards, and cost controls.
• Infrastructure as Code & Automation
• Author and maintain infrastructure using Terraform (primary) and/or CloudFormation / ARM / Bicep, structured as reusable modules.
• Build and maintain CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab CI, or Jenkins) for both infrastructure and application deployments.
• Drive GitOps practices for environment provisioning and change management.
• Containers & Orchestration
• Deploy, operate, and troubleshoot Kubernetes clusters (EKS, AKS) including networking (CNI), ingress, autoscaling, and RBAC.
• Support containerization of legacy and modernized workloads in partnership with application and modernization teams.
• Implement service mesh, secrets management, and workload identity patterns where applicable.
• Observability & Reliability
• Implement monitoring, logging, and alerting using CloudWatch, Azure Monitor, Prometheus/Grafana, or equivalent.
• Define and track SLIs/SLOs for platform services; participate in on-call rotation and incident response.
• Conduct root-cause analysis for production issues and drive permanent fixes, not just workarounds.
• Security & Compliance
• Implement identity and access management (IAM roles/policies, Azure AD/Entra ID RBAC), least-privilege access, and secrets management (Secrets Manager, Key Vault, HashiCorp Vault).
• Embed security controls into pipelines (SAST/DAST, image scanning, policy-as-code with tools such as OPA/Sentinel).
• Support compliance requirements relevant to client engagements, including DPDP Act 2023, ISO 27001, and client-specific regulatory frameworks under Minfy's Kavach360 programme.
• Cost & Operational Efficiency
• Monitor and optimize cloud spend using native cost tools (Cost Explorer, Azure Cost Management) and rightsizing recommendations.
• Identify automation opportunities to reduce manual operational toil across managed environments.
• Client & Cross-Functional Engagement
• Work directly with client engineering and infrastructure teams as a trusted technical resource on managed services and migration engagements.
• Partner with the MiMo and Cloud Advisory teams to implement platforms that support migration and modernization roadmaps.
• Produce clear runbooks, architecture diagrams, and platform documentation.
• Mentorship & Technical Contribution
• Mentor junior and mid-level platform engineers; review their IaC and pipeline contributions.
• Contribute reusable modules, scripts, and accelerators to Minfy's internal platform engineering toolkit.
• Participate in architecture reviews and champion platform engineering best practices across the BU.
  
  

• Experience
• 5–8 years of experience in cloud infrastructure, platform engineering, DevOps, or Site Reliability Engineering roles.
• Demonstrated hands-on experience operating production workloads on both AWS and Azure (multi-cloud experience required).
• Core Technical Skills
• Strong hands-on expertise with Terraform for multi-cloud Infrastructure as Code.
• Production experience with Kubernetes (EKS and/or AKS) — deployment, troubleshooting, and day-2 operations.
• Strong CI/CD skills — designing and building end-to-end pipelines (GitHub Actions, Azure DevOps, GitLab CI, or Jenkins) with automated testing, security gates, and deployment strategies (blue-green, canary, rolling).
• Strong containerisation skills — Docker image build and optimization, multi-stage builds, container registries (ECR, ACR), and container security scanning.
• Scripting proficiency in Python, Bash, or Go for automation and tooling.
• Solid networking fundamentals — VPC/VNet design, routing, DNS, load balancing, and hybrid connectivity.
• Security & Governance
• Working knowledge of IAM/RBAC design, secrets management, and policy-as-code.
• Familiarity with security and compliance frameworks relevant to enterprise cloud environments (Well-Architected Framework, ISO 27001, DPDP Act 2023 or equivalent).
• Collaboration & Communication
• Comfortable working directly with client technical stakeholders and cross-functional Minfy teams (advisory, MiMo, security).
• Able to produce clear technical documentation and communicate incident/root-cause findings effectively.
  
  

• Certifications: AWS Certified Solutions Architect / DevOps Engineer, Microsoft Certified: Azure Administrator / DevOps Engineer Expert, or CKA/CKAD.
• Experience with GitOps tooling (ArgoCD, Flux).
• Exposure to service mesh technologies (Istio, Linkerd).
• Prior experience in a partner/SI or managed services environment (AWS Premier/Advanced Partner or Microsoft Solutions Partner).
• Familiarity with FinOps practices and cloud cost optimization.
  
  

• Ownership — treats production platforms as their own; drives issues to permanent resolution.
• Automation-first mindset — defaults to codifying repeatable work rather than manual intervention.
• Technical depth with pragmatism — balances best practice with delivery timelines and client constraints.
• Collaboration — works effectively across client teams, internal BUs, and junior engineers.
• Continuous learning — stays current across a fast-moving, multi-cloud technology landscape.