Reports to : Engineering Manager, Platform Infrastructure

Level : Software Engineer / DevOps Engineer (SWE-II)

Experience : 4 years of relevant industry experience

Employment : Full-time - Permanent

Location : Hyderabad

Required Skills &

Experience :

- Terraform / Terragrunt : Advanced - Own the full IaC codebase for all cloud resources across AWS and GCP; enforce zero-drift policy with CI-integrated plan runs and Checkov security scanning.

- Kubernetes (EKS / GKE 1.28 ) : Advanced - Manage production clusters end-to-end : node groups, GPU node pools, Cluster Autoscaler, Karpenter, HPA/VPA, PodDisruptionBudgets, RBAC, and network policies.

- AWS (core services) : Advanced - Primary cloud : EKS, MSK, RDS PostgreSQL, ElastiCache Redis, EC2 GPU (g5.xlarge), S3, IAM (IRSA), VPC, CloudTrail, GuardDuty, Cost Explorer.

- Helm : Advanced - Author, version, and maintain Helm charts for all 6 platform service layers; manage values files per environment; chart linting and testing in CI.

- ArgoCD & GitOps : Advanced - App-of-Apps pattern, ApplicationSets, RBAC policies, auto-sync staging, manual production gates, Flagger integration for canary deployments.

- GitHub Actions / GitLab CI : Advanced - Design multi-stage pipelines : build, test, SAST, Trivy scan, staging deploy, production promote with approval gate; reusable workflow/include templates.

- Docker & container engineering : Advanced - Multi-stage Dockerfiles, image signing with Cosign, ECR lifecycle policies, Trivy vulnerability gate, Falco runtime security.

- Istio service mesh : Proficient - Install via Helm, enforce STRICT mTLS,



configure PeerAuthentication and DestinationRule, set up Prometheus and Tempo integrations, Flagger traffic splitting for canary.

- HashiCorp Vault : Proficient - HA cluster on K8s, KV v2, database and PKI secret engines, AppRole and Kubernetes auth, Vault Agent Injector, lease TTL enforcement.

- Python / Bash scripting : Advanced - Automation scripts for operational tasks, pipeline glue code, Vault lease renewal utilities, cost analysis scripts, and IaC testing helpers.

- Linux systems administration : Advanced - Diagnose cluster and node-level issues : kernel parameters, network interfaces, cgroup limits, disk I/O; configure OS-level settings for high-throughput data workloads.

- Kong Gateway : Proficient - Declarative configuration (deck), JWT and rate-limiting plugins, Prometheus plugin, WAF rules, certificate management for external TLS termination.

Background &

Education :

- 4 years of professional experience in DevOps, cloud infrastructure, or platform engineering.
- Demonstrable experience provisioning and operating a cloud environment from scratch.
- Production Kubernetes experience : debugging, scheduling, and resource tuning.
- Experience designing CI/CD pipelines end-to-end with security gates.
- Experience with secrets management in production (Vault, AWS Secrets Manager).
- Familiarity with service mesh concepts.
- Bachelor's degree in Computer Science, Software Engineering, or equivalent practical experience.

Personal attributes :

- Infrastructure-as-code fundamentalism.
- Security by default.
- Documentation as a deliverable.
- Curiosity about AI workloads.
- Team-oriented ownership.

📌 Qentelli - DevOps/Software Engineer II - Platform Infrastructure (India)
🏢 Qentelli
📍 India