DevOps and Compliance Engineer – Roles & Responsibilities

Role Overview:

A DevOps and Compliance Engineer (1–2 years experience) at Instape is responsible for bridging software development and IT operations by implementing automation, continuous integration and deployment, infrastructure management, and monitoring practices on Google Cloud Platform (GCP), while helping uphold security, data-protection, and regulatory-compliance standards across the delivery lifecycle.

Given

Instape operates in the regulated digital-lending / fintech space, the role also supports adherence to applicable financial-services and data-privacy requirements. It requires solid technical fundamentals, operational discipline, and the ability to collaborate effectively across development, security, and business teams to ensure reliable, secure, and compliant software delivery.

Key Responsibilities

Project & Stakeholder Management

- Understand customer requirements, business objectives, and project KPIs.
- Collaborate with development, operations, security, and business teams to ensure seamless delivery.
- Maintain effective communication with internal teams and support stakeholder updates.
- Participate in sprint planning, task estimation, and team coordination activities.
- Provide periodic status updates and progress reports.

Infrastructure & Environment Management
- Set up, configure, and maintain development, testing, staging, and production environments on GCP.
- Design and manage scalable, secure, and highly available infrastructure using Cloud Run (serverless containers), with Cloud Functions and Compute Engine where appropriate.
- Administer Linux-based environments and virtual machines.
- Manage GCP networking, including Serverless VPC Access and Network Security configurations.

DevOps & Automation
- Define and implement DevOps processes, standards, and best practices.
- Build and maintain CI/CD pipelines using Cloud Build, Cloud Source Repositories, and Artifact Registry for automated integration, testing, container builds, and deployment.
- Automate infrastructure provisioning, configuration management, and deployments (Infrastructure as Code with Terraform).
- Continuously identify opportunities for process optimization and operational efficiency.

Software Development & Release Management
- Review, validate,



and verify application code and deployment configurations.
- Support development teams in troubleshooting application and deployment issues.
- Manage release planning, deployment scheduling, and rollback strategies (including Cloud Run revisions and traffic splitting).
- Ensure adherence to development, testing, release, and support processes.

Monitoring & Incident Management
- Monitor application performance, system health, and infrastructure utilization using Cloud Monitoring and Cloud Logging.
- Manage incident response, root cause analysis, and problem resolution.
- Implement proactive monitoring and alerting mechanisms.
- Drive continuous improvement based on operational metrics and incident trends.

Security & Compliance
- Implement and maintain security controls throughout the DevOps lifecycle using Secret Manager, Cloud KMS, and IAM.
- Support vulnerability assessment and image scanning via Container Analysis, and assist with risk management activities.
- Manage secure access using Identity-Aware Proxy (IAP) and least-privilege IAM policies.
- Support secure handling of sensitive and personally identifiable information (PII), including KYC and customer financial data, through encryption, access controls, and data-retention practices.
- Maintain audit trails, access logs, consent records, and evidence to support internal and external audits, and assist in remediating findings from VAPT and audit exercises.
- Support incident reporting and breach-notification processes in line with regulatory timelines (e.g., CERT-In directives).
- Ensure compliance with organizational security policies, data-localization requirements, and applicable industry and regulatory standards, and collaborate with security and compliance teams on secure development and deployment practices.

Essential Skills & Qualifications

Technical Skills:

- Working experience with Linux-based infrastructure.




- Proficiency in scripting/programming such as Python (Bash and others a plus).
- Experience with databases such as Cloud Firestore, and relational databases like Cloud SQL / PostgreSQL / MySQL.
- Strong troubleshooting and debugging capabilities.

DevOps Tools & Technologies

- Hands-on experience with CI/CD tooling — Git, Cloud Build, Cloud Source Repositories, Artifact Registry (experience with Jenkins/GitHub Actions is a plus).
- Experience with containerization using Docker.
- Familiarity with Infrastructure as Code (IaC) using Terraform.
- Exposure to event-driven and workflow tooling — Pub/Sub, Eventarc, Cloud Tasks, Cloud Workflows is a plus.

Cloud Technologies (GCP)

- Hands-on experience designing, deploying, and maintaining cloud-based applications on Google Cloud Platform.
- Working knowledge of core GCP services: Cloud Run, Cloud Functions, Compute Engine, Cloud Firestore, Cloud Build, Artifact Registry, Secret Manager, Cloud Monitoring, and Cloud Logging.

Security & Compliance:

- Understanding of cybersecurity principles, vulnerability management, and risk assessment.
- Familiarity with DevSecOps practices and secure deployment methodologies.
- Awareness of data-protection and privacy principles, and secure handling of sensitive customer data.

Soft Skills:

- Good communication and collaboration skills.
- Analytical thinking and problem-solving capabilities.
- Ability to work in quick-paced Agile and DevOps environments.

Preferred Knowledge:

- Agile and Scrum methodologies.
- ITIL principles and incident management practices.
- Exposure to compliance and security frameworks such as ISO 27001, SOC 2, PCI DSS, and VAPT (Vulnerability Assessment & Penetration Testing) is an added advantage.
- Awareness of data-privacy regulations (India's DPDP Act; GDPR awareness a plus) and secure PII/KYC data handling.
- Familiarity with financial-services / digital-lending regulatory requirements (e.g., RBI Digital Lending Guidelines, KYC/AML norms, data-localization requirements) is an added advantage.
- Understanding of CERT-In incident-reporting requirements.
- Firebase services (Authentication / Identity Toolkit, Remote Config, Cloud Messaging).
- Industry best practices for system reliability, scalability, and security.

Work Location: Hyderabad (In Person).

📌 DevOps & Compliance Engineer (Hyderabad)
🏢 InstaPe
📍 Hyderabad