About the Role

We are looking for a highly skilled and hands-on Lead Platform & Infrastructure Engineer to take end-to-end ownership of our infrastructure, right from the bare-metal hardware and hypervisor layers up to container orchestration and application delivery.

In this role, you will act as the technical anchor for our architecture, automation, security, and day-to-day IT operations across virtualized and on-premise/bare-metal environments. You will be responsible for building a hardened, production-ready Kubernetes cluster from the ground up, implementing zero-trust network security, managing storage solutions, and driving automated CI/CD pipelines.

Key Responsibilities

Systems & Virtualization Engineering:

- Provision, tune, and manage bare-metal hosts and Linux-based virtual machines (VMs).
- Drive the shift from manual configurations to declarative Infrastructure as Code (IaC) and configuration management.
- Perform L3 troubleshooting across physical servers, guest OS, and virtualized storage volumes.

Network Security & Access Management:

- Architect, scale, and maintain secure mesh overlay networks and point-to-point VPNs.
- Implement least-privilege IAM policies, network micro-segmentation, and identity-aware routing across hosts, developer endpoints, and infrastructure tiers.
- Debug end-to-end network connectivity, routing partitions, MTU mismatches, and firewall/access control issues in hybrid setups.

Production Kubernetes (K8s) Architecture & Hardening:

- Design, bootstrap, secure, and operate high-availability (HA), production-grade Kubernetes clusters on self-managed infrastructure.
- Enforce strict InfoSec baselines: cluster RBAC, secret management/rotation, runtime security, admission controllers, and pod-to-pod network policies.
- Architect highly durable persistent storage solutions, integrate Container Storage Interface (CSI) drivers, and manage volume encryption, snapshots, and Disaster Recovery (DR).

Observability, Monitoring & SRE:





- Deploy and scale a comprehensive, full-stack observability platform for metrics, distributed tracing, and centralized log aggregation.
- Instrument proactive alerting, health checks, and dashboards across hosts, hypervisors, and container workloads to drastically reduce MTTR.

CI/CD & DevSecOps Implementation:

- Build, optimize, and maintain automated CI/CD pipelines for seamless delivery of both application and infrastructure code.
- Integrate automated security checkpoints (Shift-Left security), including container image scanning, vulnerability assessments, and policy-as-code validations.

Experience & Qualifications

- Educational Background: B.Tech/B.E. in Computer Science, IT, MCA, or related field.
- Core Experience: 7+ years of hands-on, progressive experience in DevOps, Systems Engineering, SRE, or Platform Engineering.

Required Skills

- Linux Mastery: Deep internal knowledge of Linux OS, kernel tuning, networking primitives, block devices, and file systems.
- Bare-Metal & Private Cloud: Proven capability in deploying, securing, and maintaining self-managed hypervisors and virtualization ecosystems natively (without reliance on public cloud managed services).
- Self-Hosted Kubernetes: Extensive hands-on experience bootstrapping and troubleshooting production-grade bare-metal/on-prem K8s clusters (managing control planes, etcd quorums, CNI plugins, CSI drivers, and Ingress).
- Networking & Security: Robust grasp of encrypted overlay networks, modern VPN protocols, SDN, and advanced firewalling. Practical experience with zero-trust architectures, mTLS, credential management, and workload isolation.
- Automation/IaC: Expert-level proficiency in automating infrastructure provisioning and configuration management.

Preferred Skills

- Prior experience setting up and managing GitOps-driven workflows for cluster and infrastructure lifecycle management.
- Hands-on expertise with configuring distributed, clustered, or networked storage backends for container ecosystems.

📌 Platform & Infrastructure Engineer (Mumbai)
🏢 BharatGen
📍 Mumbai