We are looking for a hands-on Senior DevOps & Cloud Security Engineer to own and continuously improve our AWS. Infrastructure, deployment platform, observability and operational security. This is an ownership role for someone who can independently design, implement, troubleshoot and operate production systems without day-to-day guidance from another AWS specialist.

You will work closely with application engineers to make deployments repeatable, production systems reliable, security controls effective and operational issues diagnosable. The role goes beyond initial cloud setup: you will own the platform as our products and engineering team evolve.

What you will own

AWS infrastructure & Linux operations

- Design, configure and operate AWS environments using services such as ECS, ECR, EC2, VPC, ALB/NLB, Route 53, ACM, IAM, RDS, Elastic ache, Amazon MQ and S3.
- Administer Ubuntu/Linux systems, Nginx reverse proxies, TLS certificates, DNS, networking, system services, permissions, storage and resource utilisation.
- Design secure network boundaries, service-to-service connectivity, environment separation and production access patterns.
- Troubleshoot production incidents independently and document architecture, operational procedures and recovery steps.

Infrastructure as code & CI/CD

- Build and maintain infrastructure using Terraform and/or AWS CloudFormation; keep infrastructure reproducible, reviewed and version controlled.
- Develop and maintain GitHub Actions and/or Bitbucket Pipelines for builds, tests, container publishing, deployment and release approvals.
- Implement safe release strategies, health checks, database migration practices, rollback procedures and deployment traceability.
- Automate routine infrastructure and operational tasks using shell scripting and, where useful, Python.

Security & secure delivery

- Implement least-privilege IAM, MFA, controlled administrative access, secrets management, credential rotation and appropriate encryption at rest and in transit.
- Maintain security groups, network controls, patching, container image hygiene and secure configuration baselines.




- Integrate dependency, secret, container and infrastructure-as-code scanning into development and deployment workflows.
- Monitor and remediate findings from relevant AWS security services, such as CloudTrail, GuardDuty, Security Hub and Config, where appropriate.
- Support HIPAA-related technical safeguards and audit evidence for systems handling sensitive healthcare data; minimise PHI exposure in logs and operational tooling.

Observability & reliability

- Implement centralised structured logging, metrics, dashboards, actionable alerts and distributed tracing whereappropriate, using CloudWatch and/or Open Telemetry-based tooling.
- Monitor ECS services, databases, queues, application health, deployment status, capacity and background data-sync processes.
- Define useful health checks, service-level indicators (SLIs), service-level objectives (SLOs), alert thresholds and incident runbooks.
- For data-sync/adaptor services, monitor heartbeats, last successful sync, lag, throughput, retries, failures and queue backlogs.
- Establish backup monitoring, restoration tests, disaster-recovery procedures, incident reviews and root-cause remediation.

Cost, capacity & platform improvement

- Review cloud spend, resource utilisation, scaling behaviour and capacity trends; recommend cost improvements without compromising reliability or security.
- Reduce manual operational work through automation and self-service deployment workflows.
- Continuously improve platform standards as new services, environments and product requirements are introduced.

Required experience and skills

- Typically 6–9 years of relevant hands-on DevOps, cloud infrastructure,



platform engineering or production operations experience.
- Strong practical AWS experience operating production workloads—not just training, certification or console-based setup.
- Solid Ubuntu/Linux administration, networking fundamentals, DNS, TLS, Nginx, Docker and container troubleshooting.
- Hands-on experience with ECS and ECR, IAM, VPC, load balancers, CloudWatch and managed data services.
- Production CI/CD experience with GitHub Actions and/or Bitbucket Pipelines.
- Practical infrastructure-as-code experience with Terraform or CloudFormation.
- A security-first mindset, including access control, secrets, patching, encryption, auditability and vulnerability remediation.
- Ability to independently diagnose unfamiliar failures, explain trade-offs and make sound production decisions.
- Clear written communication and a habit of documenting architecture, changes, incidents and operational procedures.

Valuable to have

- AWS certifications such as Solutions Architect – Associate/Professional, SysOps Administrator or Security Specialty.
- Experience with Open Telemetry, Grafana, Prometheus, Sentry or similar observability tools.
- Experience supporting healthcare, fintech or other systems with sensitive data and formal security requirements.
- Knowledge of SLOs, incident management, disaster recovery, vulnerability management and cloud cost optimization.

What success looks like

- Developers can deploy through documented, repeatable pipelines without requiring manual execution for every release.
- Production health and critical background processing are visible through helpful dashboards and alerts.
- High-priority infrastructure and security findings are tracked, prioritised and remediated with evidence.
- Backups and recovery procedures are tested rather than merely configured.
- Infrastructure changes are version-controlled, reviewable and reproducible.
- Operational incidents are diagnosed systematically, documented and followed by corrective actions.

Location: Trivandrum, Kerala, India | Experience: Typically 6–9 years

📌 Senior DevOps & Cloud Security Engineer (Thiruvananthapuram)
🏢 Arillus Labs
📍 Thiruvananthapuram