About the role

You will be the technical owner of the AWS estate for a leading RBI-regulated NBFC, delivered under Bootlabs' 247 multi-cloud managed services engagement. The estate runs the client's core lending, payments and customer channels: 300+ EC2 instances, 600+ Lambda functions, 36 EKS clusters/resources, 70 RDS instances, 250+ load balancers, MSK, ElastiCache and DynamoDB. You are the final technical escalation point for AWS and lead P1/P2 incidents from detection to RCA.

Key responsibilities

- Own the architecture, stability and operational health of the AWS estate across production and non-production accounts.
- Lead EKS platform operations: cluster upgrades, node groups, add-ons, ingress, autoscaling and workload troubleshooting.
- Own AWS networking: VPC design, Transit Gateway, Direct Connect, Route 53, security groups, NACLs and hybrid connectivity with Azure, GCP and the data centre.
- Govern IAM, KMS and Secrets Manager: least-privilege roles, key policies, secret rotation and access reviews.
- Own Terraform/IaC: module standards, state management, drift control and code review for infrastructure changes.
- Maintain CI/CD pipelines on Jenkins, GitHub, Bitbucket and Azure DevOps; guide safe deployment, rollback and release practices.
- Act as L3 escalation point and incident commander for P1/P2 incidents; deliver RCAs with corrective actions within 5 business days.
- Plan and execute DR drills: readiness checks, DB/replica failover, traffic switch, failback and post-drill health verification.
- Drive infra-layer patching (OS, EKS, RDS versions) and remediation of VAPT and vulnerability findings,



including emergency/zero-day patches.
- Run quarterly cost optimisation reviews: rightsizing, unused resource clean-up and tagging compliance.
- Mentor L1/L2 engineers, own runbooks and contribute to architecture reviews and audit evidence.
- Be available on-call for P1 incidents.

Must-have skills

- 710 years in cloud/DevOps, with 4+ years hands-on in production AWS at scale.
- Deep EKS/Kubernetes expertise: upgrades, networking (CNI), RBAC, Helm, troubleshooting.
- Strong AWS networking: VPC, Transit Gateway, Direct Connect, Route 53, ALB/NLB, PrivateLink.
- IAM, KMS, Secrets Manager, CloudTrail, AWS Config and CloudWatch.
- Terraform at production level, including module design and state management.
- CI/CD with Jenkins and at least one of GitHub Actions, Bitbucket Pipelines or Azure DevOps.
- Proven incident command and RCA writing in a 247 environment.
- Scripting in Bash and Python.

Valuable to have

- AWS Certified Solutions Architect Professional or DevOps Engineer – Professional.
- Experience in BFSI/NBFC or other RBI-regulated environments (RBI IT guidelines, PCI-DSS, ISO 27001, DPDP Act).
- Exposure to Azure or GCP in a multi-cloud setup.
- MSK/Kafka, ElastiCache/Redis, RDS/Aurora operations.
- Managed-services or client-facing delivery experience.

What success looks like in the first 90 days

- Full ownership of the AWS runbooks, inventory and escalation path.
- Zero SLA breaches on AWS P1/P2 incidents you command.
- At least one DR drill executed end to end with a published report.
- Open AWS VAPT findings on the infra layer reduced and tracked to closure.

📌 Aws Devops Engineer (Mumbai)
🏢 BootLabs
📍 Mumbai