About the Platform The Digital Office Platform is a multi-tenant, configuration-driven government case-management platform that lets many independent government bodies each configure their own case lifecycle data model, intake forms, versioned workflows, roles, SLAs, notifications, audit and reporting and run real cases end-to-end without custom code per tenant. It is built as ~20 independent Spring Boot microservices (engines), each owning its own PostgreSQL database, coordinated behind a Next.js web application, and deployed hosting-agnostic on sovereign/ government cloud using open-source components. Tenant isolation is by tenant_id; published workflow versions are immutable and live cases pin to their version; security and data boundaries fail closed.

Role and Responsibilities

1. Design and operate the hosting-agnostic environment on private / sovereign / government cloud: compute, network topology and segmentation, firewalls, TLS / ingress, DNS and strict environment separation (dev / staging / production).
2. Operate the self-managed data and messaging estate at fleet scale — PostgreSQL 16 with HA / streaming replication (one database per engine), Redis (Sentinel / Cluster) and a multi-broker Apache Kafka cluster — with capacity planning, tuning and growth headroom for ~20 services.
3. Own platform availability (target uptime, health management, self-healing), monitoring, alerting and capacity management across the fleet; ensure the append-only audit store and its immutability triggers are protected and backed up.
4.



Own backup and disaster-recovery architecture and rehearsed restore drills; define and prove RPO / RTO targets and maintain the DR runbook.
5. Own platform-layer and infrastructure security — hardening, network policy, least-privilege access, and the custody, storage and rotation of the platform-admin signing key, internal-service key and encryption keys (separated from the runtime application).
6. Define and enforce the production topology and scaling model (replicas for IAM / workflow / business-object and other high-load engines) and partner with DevSecOps on deployment and with AppSec on end-to-end hardening and audit evidence.

Qualifications and Experiences

1. Bachelor's degree in any discipline with 6+ years of experience in infrastructure / platform engineering with a robust security focus;

experience operating production microservice fleets preferred.

Required Skill Set

1. Hosting-agnostic experience on private / sovereign / government cloud (VMware, OpenStack or KVM) and Kubernetes — without dependence on public-hyper scaler managed services.
2. Deep self-managed PostgreSQL (HA, streaming replication, many databases); Redis and Apache Kafka operations; strong Linux and networking.
3. Infrastructure-as-Code (Terraform / Ansible), backup / DR tooling, and self-hosted observability (Prometheus / Grafana / ELK).
4. Key-management and secrets custody; familiarity with STQC / DPDP infrastructure controls and data-residency requirements.

📌 Platform & Security Engineer (Noida)
🏢 Digital India
📍 Noida