– Senior Director, Cloud Infrastructure, DevOps & Platform Engineering

Location: Gurgaon, India

Experience: 14–18 Years

Earning Potential: 1.50 Cr – 1.70 Cr per annum

- Role Overview

We are seeking a highly accomplished technology leader to lead the architecture, engineering, and evolution of large-scale cloud infrastructure and platform engineering ecosystems.

The Senior Director will own the technical strategy and execution across Cloud Infrastructure, DevOps, Platform Engineering, Site Reliability Engineering (SRE), Infrastructure Automation, and Production Engineering.

The role demands exceptional technical depth in AWS and GCP, large-scale Kubernetes environments, distributed systems, cloud networking, Infrastructure as Code, CI/CD architecture, and cloud security.

The individual will be responsible for architecting highly scalable, resilient, self-service infrastructure platforms that support mission-critical applications, high-throughput workloads, and globally distributed engineering teams.

This is a technology leadership role requiring the ability to make complex architectural decisions, drive engineering transformation, and lead senior technical teams while maintaining strong hands-on architectural involvement.

- Core Technical Responsibilities

A. Advanced Cloud Architecture & Engineering

- Own the end-to-end architecture of enterprise-scale cloud infrastructure across AWS and GCP.
- Design multi-region, multi-zone, highly available and fault-tolerant cloud architectures.
- Define cloud-native reference architectures covering compute, storage, networking, databases, security, and application infrastructure.
- Architect AWS environments using EKS, ECS, EC2, Lambda, S3, RDS, Aurora, DynamoDB, ElastiCache, Route 53, CloudFront, Transit Gateway, PrivateLink and IAM.
- Architect GCP environments using GKE, Compute Engine, Cloud Run, Cloud Storage, Cloud SQL, Spanner, BigQuery, Cloud Load Balancing, Cloud CDN, Cloud DNS and VPC.
- Design cloud landing zones, multi-account structures, organizational policies, shared services, and centralized governance.
- Drive cloud-native modernization, workload migration, re-platforming, and application infrastructure transformation.
- Establish cloud architecture patterns for scalability, elasticity, availability, performance, and cost efficiency.
- Define strategies for cross-region replication, active-active architectures, failover, and disaster recovery.

B. Kubernetes, Container Orchestration & Cloud-Native Platforms
- Architect and manage large-scale Kubernetes environments across AWS EKS and Google GKE.
- Design multi-cluster, multi-region Kubernetes architectures supporting high-volume production workloads.
- Drive Kubernetes control plane architecture, node pool management, cluster autoscaling, workload scheduling, and resource optimization.
- Implement advanced container orchestration using Docker, Helm, Kustomize, and Kubernetes Operators.
- Establish service mesh architectures using Istio, Envoy, Linkerd, and mTLS-based service communication.
- Design ingress controllers, API gateways, service discovery, network policies, and east-west traffic management.
- Implement container image management, private registries, image signing, vulnerability scanning, and runtime security.
- Drive Kubernetes platform lifecycle management, cluster upgrades, workload migration, and capacity management.
- Establish standards for pod security, RBAC, admission controllers, resource quotas, HPA, VPA, and cluster autoscaling.
- Build reusable Kubernetes platform components and standardized deployment patterns.

C. Platform Engineering & Internal Developer Platforms (IDP)
- Define and lead the organization's platform engineering strategy.
- Architect Internal Developer Platforms enabling self-service infrastructure provisioning and application deployment.
- Build standardized developer platforms with reusable templates, service catalogs, golden paths, and automated workflows.
- Implement developer self-service capabilities for application onboarding, environment creation, deployment, and observability.
- Drive platform abstraction layers to simplify interactions with underlying cloud infrastructure.
- Establish Kubernetes-based application platforms supporting microservices, APIs, and distributed workloads.
- Implement Backstage or equivalent developer portals and service catalog frameworks.
- Integrate platform engineering with CI/CD, GitOps, secrets management, observability, and security controls.
- Measure developer productivity, platform adoption, deployment lead time, and infrastructure provisioning efficiency.

D. DevOps Architecture, CI/CD & GitOps
- Architect enterprise-wide CI/CD ecosystems supporting multiple applications, microservices, and distributed engineering teams.




- Build advanced deployment pipelines using Jenkins, GitHub Actions, GitLab CI/CD, Tekton, and ArgoCD.
- Implement GitOps-based infrastructure and application deployment models using ArgoCD and Flux.
- Establish automated build, testing, artifact management, deployment, and rollback mechanisms.
- Integrate automated quality gates, static code analysis, dependency scanning, container scanning, and security testing.
- Drive progressive delivery strategies including Canary, Blue-Green, Rolling Updates, and Feature Flag-based releases.
- Implement artifact repositories and package management using JFrog Artifactory, Nexus, and container registries.
- Establish deployment governance, release orchestration, environment promotion, and configuration management.
- Improve DORA metrics including deployment frequency, lead time for changes, change failure rate, and MTTR.

E. Infrastructure as Code & Infrastructure Automation
- Establish enterprise-grade Infrastructure as Code architecture using Terraform, Terragrunt, CloudFormation, and Pulumi.
- Design reusable Terraform modules, remote state management, module versioning, and automated provisioning frameworks.
- Implement configuration management and orchestration using Ansible and similar technologies.
- Build automated infrastructure provisioning pipelines integrated with CI/CD and GitOps workflows.
- Implement Policy as Code using Open Policy Agent (OPA), HashiCorp Sentinel, and cloud-native policy frameworks.
- Establish automated configuration drift detection, infrastructure compliance, and remediation.
- Drive immutable infrastructure practices and automated environment lifecycle management.
- Standardize infrastructure provisioning across development, staging, testing, and production environments.

F. Site Reliability Engineering & Production Engineering
- Define the overall SRE strategy and reliability engineering framework.
- Establish SLIs, SLOs, SLAs, error budgets, and reliability targets for critical platforms.
- Architect observability frameworks using OpenTelemetry, Prometheus, Grafana, Jaeger, Tempo, and distributed tracing.
- Implement centralized logging using ELK/EFK, Loki, Splunk, and cloud-native logging services.
- Establish application and infrastructure monitoring, alert correlation, anomaly detection, and proactive incident management.
- Drive automated incident response, self-healing infrastructure, auto-remediation, and operational automation.
- Lead capacity planning, performance engineering, load testing, stress testing, and bottleneck analysis.
- Establish production readiness reviews, resilience testing, chaos engineering, and fault injection practices.
- Define business continuity, disaster recovery, RTO/RPO, backup strategies, and cross-region failover mechanisms.
- Own production reliability, availability, scalability, and operational performance across cloud platforms.

G. Cloud Networking & Distributed Systems
- Design advanced cloud networking architectures covering VPC/VNet, subnetting, routing, peering, Transit Gateway, PrivateLink, VPN, and Direct Connect.
- Architect L4/L7 load balancing, ingress, egress, DNS, CDN, WAF, and global traffic management.
- Establish secure network segmentation, private connectivity, service-to-service communication, and zero-trust networking.
- Understand distributed systems architecture, microservices communication, asynchronous processing, and event-driven infrastructure.
- Design infrastructure supporting Kafka, RabbitMQ, Redis, distributed caching, API gateways, and high-throughput data pipelines.
- Drive latency optimization, network performance, connection management, and resource utilization.
- Establish infrastructure patterns supporting horizontally scalable and geographically distributed applications.

H. DevSecOps, Cloud Security & Governance
- Architect security-first cloud infrastructure and DevSecOps frameworks.
- Implement IAM, RBAC, ABAC, workload identity, federated authentication, and least-privilege access.
- Establish encryption at rest and in transit, KMS, secrets management, certificate management, and key rotation.
- Implement HashiCorp Vault, AWS Secrets Manager, AWS KMS, and GCP Secret Manager.
- Integrate SAST, DAST, SCA, container image scanning, and infrastructure security scanning into CI/CD pipelines.
- Establish cloud security posture management, vulnerability management, runtime protection,



and compliance automation.
- Drive policy enforcement using OPA, Kyverno, cloud-native organization policies, and admission controllers.
- Implement secure software supply chain practices, artifact provenance, SBOM, and image signing.

I. Cloud Economics & Infrastructure Optimization
- Own cloud infrastructure cost governance and FinOps strategy across AWS and GCP.
- Establish resource tagging, cost allocation, budgeting, forecasting, and chargeback/showback models.
- Drive compute optimization, autoscaling, storage lifecycle management, reserved capacity, and workload rightsizing.
- Optimize Kubernetes resource utilization and cluster efficiency.
- Establish infrastructure performance and cost benchmarks.
- Balance infrastructure cost, application performance, reliability, and scalability.

3. Technical Expertise & Technology Stack

Technical DomainRequired Technologies

Cloud Architecture

AWS, GCP, Multi-Cloud, Hybrid Cloud

AWS Ecosystem

EKS, ECS, EC2, Lambda, S3, RDS, Aurora, DynamoDB, VPC, IAM, Route 53, CloudFront

GCP Ecosystem

GKE, Compute Engine, Cloud Run, Cloud Storage, Cloud SQL, Spanner, BigQuery, VPC

Containerization

Docker, Kubernetes, Helm, Kustomize, Operators

Service Mesh

Istio, Envoy, Linkerd

CI/CD

Jenkins, GitLab CI, GitHub Actions, Tekton

GitOps

ArgoCD, Flux

IaC

Terraform, Terragrunt, CloudFormation, Pulumi

Configuration Management

Ansible, Chef, Puppet

Platform Engineering

Backstage, IDP, Developer Portals, Golden Paths

Observability

Prometheus, Grafana, OpenTelemetry, Jaeger, ELK, Datadog

Programming

Go, Python, Bash, Shell Scripting

Messaging & Distributed Systems

Kafka, RabbitMQ, Redis

Security

Vault, OPA, Kyverno, IAM, KMS, DevSecOps

Networking

VPC, Transit Gateway, Direct Connect, VPN, DNS, CDN, WAF

SRE

SLI, SLO, SLA, Error Budgets, Chaos Engineering, DR

FinOps

Cloud Cost Optimization, Resource Governance, Capacity Planning

- Mandatory Experience & Qualifications

- 14–18 years of experience in Cloud Infrastructure, DevOps, Platform Engineering, SRE, or Infrastructure Engineering.
- Robust architectural expertise in AWS and GCP, with experience operating enterprise-scale production environments.
- Deep experience designing and managing Kubernetes infrastructure, particularly EKS and GKE.
- Proven track record of architecting large-scale CI/CD and GitOps ecosystems.
- Strong hands-on expertise in Terraform and Infrastructure as Code.
- Experience building internal developer platforms and self-service infrastructure capabilities.
- Strong understanding of distributed systems, microservices, cloud networking, and cloud-native architectures.
- Experience implementing production-grade observability, SRE, disaster recovery, and high-availability frameworks.
- Strong programming and automation experience in Go, Python, or Shell.
- Experience managing complex cloud transformation and infrastructure modernization programs.
- Demonstrated ability to lead senior architects, engineering managers, and large technical teams.

5. Preferred Candidate Background
- Senior engineering leadership experience in large-scale product companies, SaaS, fintech, cloud-native platforms, or technology organizations.
- Experience supporting high-traffic applications, mission-critical platforms, and distributed production workloads.
- Experience building cloud platforms from the ground up or transforming legacy infrastructure into modern cloud-native environments.
- Experience leading multi-cloud adoption, Kubernetes modernization, and enterprise platform engineering initiatives.
- Exposure to AI/ML infrastructure, GPU-based workloads, distributed computing, and large-scale data platforms would be an advantage.
- AWS Solutions Architect Professional, AWS DevOps Engineer Professional, or Google Cloud Professional Cloud Architect certifications are desirable.

6. Leadership & Technical Ownership The Senior Director will be accountable for:
- Overall architecture and engineering ownership of cloud infrastructure and platform ecosystems.
- Technical direction and long-term roadmap across DevOps, Cloud, SRE, and Platform Engineering.
- Architecture reviews, technology selection, engineering standards, and technical governance.
- Building high-performing teams of cloud architects, DevOps engineers, SREs, and platform engineers.
- Driving engineering productivity, infrastructure automation, reliability, scalability, and cost efficiency.
- Collaborating with CTO, VP Engineering, Security, Product Engineering, and other technology leadership teams.

The ideal candidate is expected to be a deeply technical engineering leader who can architect complex cloud-native systems, solve large-scale infrastructure challenges, and build world-class DevOps and Platform Engineering organizations.

📌 Head of DevOps (Gurugram)
🏢 Questhiring
📍 Gurugram