We are hiring a Senior Infrastructure & Cloud Security Engineer to own the cloud platform behind our AI-powered products, and to lead our planned migration from Azure to AWS starting mid-December.

This is a hands-on, high-ownership role. You will be the person accountable for how our platform runs, how secure it is, and what it costs. You will report to our CTO.

? Location: India, in office or hybrid (not remote)

? Experience: 8+ years overall, including 3+ years running production on AWS, GCP or Azure (AWS or GCP preferred)

WHAT YOU WILL DO

- Own the platform: run production and non-production environments across Azure and GCP (Kubernetes, VMs, networking, storage, managed databases and caches). Build the inventory, runbooks, diagrams and on-call process.
- Lead the Azure to AWS migration: design the target architecture (EKS, VPC, load balancing, CDN, secrets, observability), plan the data migration for MongoDB, run cut-over and rollback, and decommission Azure. Sequence it around our existing Azure commitments, which end in Jan/Feb 2027.
- Automate everything: bring all environments under Terraform and GitOps (ArgoCD). Make non-production environments cheap, disposable and scheduled.
- Run our video stack: operate and scale self-hosted Jitsi Meet (Jicofo, Videobridge, Jibri) for low-latency, high-concurrency sessions.
- Secure the platform: identity and access (least privilege, SSO and MFA), secrets management, API-key hygiene and rotation, network security, and Cloudflare (WAF, DDoS, rate limiting, TLS). Run an access review and credential rotation as you take over.
- Find and fix vulnerabilities: regular network, cloud, container and application pentests and scans, with findings tracked to closure. Add security scanning to our CI/CD pipelines (Azure DevOps and GitHub).
- Keep it reliable:



monitoring, logging and alerting (Grafana, Loki, cloud-native tools), SLOs, incident response, backups and disaster recovery with regular restore tests.
- Own cloud cost (FinOps): track commitments and renewals, right-size compute and databases, shut down idle environments, clean up after migrations, and report monthly spend by product.
- Manage vendors and access: keep one register of every third-party platform and API we use, with owner, plan and renewal date, and make sure accounts belong to the company, not individuals.

WHAT YOU BRING

- Strong production experience on AWS (EKS, EC2, VPC, IAM, S3, CloudFront/ALB, managed databases, Secrets Manager, CloudWatch), plus hands-on experience with Azure and/or GCP. You have led or substantially contributed to at least one migration between clouds.
- Deep Kubernetes experience in production (AKS, GKE and/or EKS), Helm, ingress, autoscaling, and GitOps with ArgoCD.
- Terraform (modules, state management, multi-environment), plus scripting in Python, Bash or Go. CI/CD with Azure DevOps and/or GitHub Actions.
- Experience operating MongoDB (Atlas or self-managed): backups, scaling, migration. Familiarity with Redis, Kafka and PostgreSQL.
- Hands-on experience with Jitsi or comparable WebRTC infrastructure.
- Security fundamentals: Cloudflare, IAM, secrets and key management, TLS/PKI, vulnerability management,



and practical pentest tooling (Burp Suite, Nmap, Metasploit, Kali Linux, OWASP ZAP).
- Observability and operations: Prometheus, Grafana, Loki or similar; incident management, on-call, post-incident reviews.
- Experience reading cloud bills, working with reservations and savings plans, and reducing spend without reducing reliability.

NICE TO HAVE

- AWS Solutions Architect (Associate or Professional) or AWS Security Specialty; Azure or GCP architect/security certifications; or CEH, OSCP, CISSP.
- Experience with real-time voice, video or AI/ML workloads, and with guardrails on usage-based third-party APIs (rate limits, budgets, key restrictions).
- Exposure to compliance frameworks (SOC 2, ISO 27001, HIPAA-style controls, PCI DSS).
- Experience in a small, fast-moving company where you are the main infrastructure owner.

WHAT SUCCESS LOOKS LIKE

First 30 days: complete inventory and access review of every cloud, SaaS and API account; credentials rotated where needed; every production system has an owner, monitoring and an on-call path; a risk register and prioritised plan.

First 60 days: Terraform coverage for production, scheduled shutdown of non-production, verified backups and restores, a monthly cost report, and an approved Azure to AWS migration design.

First 90 days: first production workloads on AWS with a tested rollback, security scanning in all pipelines, a pentest completed with findings tracked, and no unowned or unmonitored resources.

HOW TO APPLY

Apply on LinkedIn, or send your resume to [email to be filled in by the company], with a short note on a migration or platform you owned end to end.

#Hiring #DevOps #CloudSecurity #AWS #Kubernetes #Terraform #InfrastructureEngineer #India

📌 Senior Infrastructure & Cloud Security Engineer (Platform Owner) (Hyderabad)
🏢 Menthra
📍 Hyderabad