17 Sep
|
Principle Pride
|
Secunderabad
17 Sep
Principle Pride
Secunderabad
Location: Hyderabad / Pune
Job Description: DB Engineering team is seeking an experienced Senior Cloud Database Engineer to design, automate, and
operate secure, resilient database platform capabilities on AWS. This is a hands-on engineering role combining database
expertise with Terraform, Ansible, CI/CD, and cloud automation. The engineer will deliver reusable self-service patterns,
recovery and DR automation, cross-account tooling, security integrations, observability, and operational pipelines for Oracle,
Microsoft SQL Server, PostgreSQL, Amazon RDS, Amazon Aurora, and SQL Server on EC2. You will partner with DB Ops,
application teams, Security, Cloud Platform, FinOps, and DevHub teams to deliver scalable, supportable database services.
Key Responsibilities
Database Platform Engineering
Engineer and support AWS database platforms including Amazon RDS for Oracle, SQL Server, and PostgreSQL;
Amazon Aurora PostgreSQL and Aurora Serverless v2; SQL Server on EC2; and Oracle RDS HA/DR and archival
capabilities.
Evaluate emerging database technologies such as Aurora DSQL and define architecture, TCO, automation, and Day-2
support recommendations for viable solutions.
Infrastructure as Code (Terraform) & Automation
Develop and maintain enterprise-grade Terraform modules with robust provider and module versioning, remote-state
management, workspace/environment strategies, IAM policies, validations, tagging standards, and policy guardrails.
Build reusable infrastructure automation for AWS services including RDS, Aurora, SQL Server on EC2, Oracle,
PostgreSQL, backup and recovery workflows, high availability configurations, disaster recovery solutions, and cross-
account operations.
Author Ansible roles and playbooks for Day-2 operations, operational maintenance activities, compliance
remediation, patching automation, and database lifecycle management, ensuring idempotency, resiliency, and
containerized execution through Harness.
Design and develop AWS SSM Automation Documents for infrastructure provisioning, resource discovery, diagnostics,
backup validation, recovery execution, and repeatable operational procedures.
Implement infrastructure automation for SQL Server recovery, Always On Availability Group restoration, VSS snapshot
recovery, RDS cross-region failover, disaster recovery orchestration, and AWS ARC validation frameworks.
Integrate Terraform, Ansible, and AWS automation services with CI/CD platforms to enable automated plan/apply
workflows, change management approvals, release governance, drift detection, and continuous compliance
validation.
Embed security and compliance controls within infrastructure code, including SSL validation, IAM policy enforcement,
AWS Secrets Manager integrations, SQL credential rotation, StrongDM database-access onboarding, and adoption of
AWS-managed database credentials.
Automate security posture assessments and remediation workflows leveraging CIS-CAT Pro, Qualys, compliance
scanning tools, evidence collection, and policy-driven governance frameworks.
Develop observability and operational automation through AWS DevOps Guru, Datadog integrations, log analytics,
cluster monitoring, error-log auditing, health dashboards, and automated alerting mechanisms.
Establish infrastructure lifecycle management standards, including database engine version governance, patch
management automation, deprecated-version controls, release channel management, and automated notifications.
Lead automation initiatives for database modernization, Flyway integration, Oracle multi-tenant environments, DMS
archival solutions, and operational proof-of-concept implementations supporting scalable self-service platform
capabilities.
Collaborate with DB Ops, application teams, FinOps, Security, and Platform Engineering stakeholders; produce
architecture documents, TCO analyses, runbooks, use cases, and release notes.
Provisioning & Self-Service Automation
Build and maintain reusable Terraform modules for RDS, Aurora, SQL Server on EC2, Oracle, PostgreSQL, recovery
automation, and cross-account database operations.
Create Backstage Scaffolder templates, repository scaffolding, custom field extensions, and Tech Docs for database
provisioning and operations.
Design secure, versioned, self-service patterns that reduce manual effort while preserving platform, security,
compliance, and operational guardrails.
Evaluate AI Skills, AWS DevOps Agent, and AI Skills plus Harness pipeline integrations; convert validated proofs of
concept into supported patterns
Build Harness pipelines for Day-1 provisioning and Day-2 operations, including cross-account creation module
enhancements.
Required Qualifications
7+ years of database, cloud infrastructure, platform engineering, DevOps, or related experience, including significant
hands-on automation delivery.
3+ years of production AWS experience, including RDS, Aurora, EC2, EBS, IAM, Lambda, CloudWatch, Secrets
Manager, SSM, AWS Config, and cross-account access patterns.
Strong Terraform expertise, including reusable modules, variables, remote state, workspaces/environments, IAM
policies, testing, validation, and secure code review practices.
Practical Ansible expertise,
including playbook and role authoring, idempotency, error handling, and CI/CD-based
execution.
Strong knowledge of at least two of Oracle, Microsoft SQL Server, PostgreSQL, Amazon RDS, Amazon Aurora
PostgreSQL, SQL Server Always On Availability Groups, and SQL Server on EC2.
Experience with database backup, restore, HA/DR, replication, snapshots, cross-region recovery, and operational
runbooks in business-critical environments.
Experience with Harness, Git-based source control, or comparable enterprise CI/CD tooling.
Explicit technical writing and communication skills, including the ability to explain designs, operational risk, and trade-
offs to technical and business stakeholders.
Nice-to-Have
Experience with Backstage or comparable developer platforms, including Scaffolder templates, TechDocs, and self-
service portal extensions.
Hands-on experience with AWS ARC, AWS DMS, Database Activity Streams, AMP, CloudFormation, AWS Config, and
SSM Automation Documents.
Experience with Datadog, AWS DevOps Guru, Qualys, CIS-CAT Pro, StrongDM, Flyway, and database compliance
automation.
Knowledge of VSS snapshots, Windows Server administration, SQL Server cluster troubleshooting, and database host
observability.
AWS and/or HashiCorp certifications are beneficial.
KPIs & Success Measures
Self-service adoption: increasing percentage of database services provisioned or operated through supported
Terraform modules, templates, and Harness pipelines.
Recovery readiness: repeatable, tested, and documented recovery workflows with improved RTO/RPO confidence
and cross-account visibility.
Automation quality: versioned, validated modules and playbooks with clear ownership, release practices, and
reduced manual intervention.
Security and compliance: measurable improvements in secrets rotation, secure access, compliance evidence,
vulnerability management, and database platform guardrails.
Operational enablement: production-ready documentation, monitoring, dashboards, and DB Ops handoffs for
supported capabilities.
Tooling Stack
AWS: RDS, Aurora, Aurora Serverless v2, Aurora DSQL, EC2, EBS, DMS, Secrets Manager, SSM, AWS Config, AWS ARC,
AMP, CloudWatch, Lambda, IAM/SCP.
Database: Oracle, Microsoft SQL Server standalone and Always On AG, PostgreSQL, Aurora PostgreSQL, and Aurora
DSQL.
Automation: Terraform, Ansible, AWS SSM Automation Documents, CloudFormation, snapshots and recovery tooling.
CI/CD and Developer Platform: Harness, DevHub/Backstage, Git, Scaffolder templates, TechDocs, and Flyway.
Security and Observability: StrongDM, Qualys, CIS-CAT Pro, AWS Secrets Manager, custom SQL Rotator Lambda,
MasterUserSecret, Datadog, AWS DevOps Guru, CloudWatch, and Database Activity Streams.
📌 Senior Cloud Database Engineer - Automation & Terraform (Secunderabad)
🏢 Principle Pride
📍 Secunderabad