Position Details Job Title: Senior DevOps Engineer (GCP & Azure – Network Security Focus)

Employment Type: Full-time

Experience Level: Senior Level (8+ years)

Location: Chennai

Work Mode: Hybrid/ 11:30 AM -9:30PM Shift

Interview Mode: In-Person Interview (Chennai Location)

Role Summary

We are seeking an experienced Senior DevOps Engineer with solid expertise in Google Cloud Platform (GCP) and Microsoft Azure, combined with deep knowledge of cloud networking and security. The ideal candidate has 6–10 years of experience building secure, automated, and scalable cloud infrastructures using DevOps, IaC, and Zero Trust principles. This role is ideal for someone who can work across cloud, networking, security, and automation.

Key Responsibilities

1. Cloud Engineering (GCP & Azure)

Google Cloud Platform (Primary or Equal Focus)

- Architect and deploy secure GCP infrastructure:
- VPC, Subnets, Cloud NAT, Private Service Connect
- VPC Service Controls (VPC‑SC), Firewall Rules, Hierarchical Policies
- Cloud Load Balancing (Global/Regional), Cloud Armor (WAF/DDoS)
- Deploy secure connectivity solutions:
- Cloud VPN, HA VPN, Cloud Interconnect
- Private Google Access & Restricted APIs
- Manage IAM policies, service accounts, workload identity federation

Microsoft Azure

- Design and implement secure Azure cloud networks:
- VNets, Subnets, NSGs/ASGs, UDRs
- Azure Firewall, DDoS Protection, Application Gateway (WAF)
- Private Link, Private Endpoints, Service Endpoints
- Configure hybrid and cross‑cloud connectivity:
- VPN Gateway, ExpressRoute
- Manage Azure RBAC, Managed Identities, Key Vault

2. Network Security Engineering

- Implement Zero Trust network segmentation across GCP & Azure
- Configure and maintain cloud firewalls:




- GCP Firewall Policies (hierarchical)
- Azure Firewall, NSG, App Gateway WAF
- Implement secure traffic routing, segmentation, and micro‑segmentation
- Harden cloud workloads using:
- SSL/TLS management
- Identity-aware networking (GCP IAP)
- Service perimeter boundaries
- Work with network flow logs, firewall logs, packet captures, and policy analytics
- Contribute to threat modelling, vulnerability reviews, and cloud security posture

3. DevOps, Automation & Infrastructure-as-Code

- Build and manage Infrastructure-as-Code using:
- Terraform (mandatory)
- Terragrunt (preferred)
- Build CI/CD pipelines for infrastructure using:
- Azure DevOps, GitHub Actions, GitLab CI, Jenkins
- Automate:
- network provisioning
- firewall rule deployment
- secrets management
- compliance validation
- Implement policy-as-code (OPA / Conftest or similar)
- Integrate security scanning into pipelines (DevSecOps)

4. Kubernetes & Container Security

- Deploy and secure workloads on:
- GKE
- AKS
- Configure:
- Network Policies
- Private clusters
- Ingress controllers
- Pod identity/security policies
- Integrate container registry + vulnerability scanning workflows
- Implement secure service communication patterns (MTLS, Istio optional)

5. Monitoring, Observability & SRE Practices

- Build and maintain cloud observability stacks:
- GCP Cloud Logging/Monitoring




- Azure Monitor, Log Analytics
- Prometheus & Grafana (optional)
- Configure alerts for:
- network anomalies
- firewall activity
- workload identity misuse
- Lead incident response, RCA, and continuous improvement cycles
- Define SLOs, SLIs, and SLAs for cloud network reliability

6. Collaboration, Governance & Leadership

- Collaborate with cloud architects, network teams, and security engineers
- Review designs, terraform modules, and architecture proposals
- Mentor junior DevOps engineers and drive talent development
- Write and maintain documentation, runbooks, and best practices
- Support on‑call rotation for critical cloud and network issues.

Required Skills

- 6+ years of experience in DevOps, Cloud, or SRE roles
- Strong hands‑on experience with GCP and Azure
- Deep understanding of cloud network security
- Strong expertise with Terraform
- Good understanding of:

-TCP/IP, routing, firewalls -VPNs, load balancing

-DNS, SSL/TLS, Zero Trust

- Experience with CI/CD tools (Azure DevOps, GitHub Actions, GitLab CI)
- Strong scripting in PowerShell, Bash, or Python
- Hands-on with Kubernetes (AKS/GKE), container security, and cloud IAM

Preferred Skills

- Experience with:
- Cloud Armor, Azure WAF
- VPC Service Controls (GCP)
- Azure DDoS Protection
- Anthos, Istio, or service mesh
- Familiarity with multi-cloud governance & compliance
- Experience with API Gateway / Apigee security

Certifications (Nice to Have)

- Google Professional Cloud Security Engineer
- Google Professional Cloud Network Engineer
- Azure Security Engineer (AZ‑500)
- Azure Network Engineer (AZ‑700)
- Terraform Associate
- Kubernetes CKA/CKS

📌 Senior Devops Engineer (GCP & Networking) (Chennai)
🏢 Kyndryl India
📍 Chennai