Cloud Platform Engineer

Senior Cloud Platform Engineer

Key Responsibilities

Platform & Landing Zone Engineering

• Design and build secure, multi-account/multi-subscription landing zones on AWS (Control Tower, Organizations) and Azure (Landing Zones, Management Groups).
• Implement network architecture — VPCs/VNets, transit gateways, hybrid connectivity, DNS, and security group / NSG design.
• Define and enforce account/subscription governance guardrails, tagging standards, and cost controls.

Infrastructure as Code & Automation

• Author and maintain infrastructure using Terraform (primary) and/or CloudFormation / ARM / Bicep, structured as reusable modules.
• Build and maintain CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab CI, or Jenkins) for both infrastructure and application deployments.
• Drive GitOps practices for environment provisioning and change management.

Containers & Orchestration

• Deploy, operate, and troubleshoot Kubernetes clusters (EKS, AKS) including networking (CNI), ingress, autoscaling, and RBAC.
• Support containerization of legacy and modernized workloads in partnership with application and modernization teams.
• Implement service mesh, secrets management, and workload identity patterns where applicable.

Observability & Reliability

• Implement monitoring, logging, and alerting using CloudWatch, Azure Monitor, Prometheus/Grafana, or equivalent.
• Define and track SLIs/SLOs for platform services; participate in on-call rotation and incident response.
• Conduct root-cause analysis for production issues and drive permanent fixes, not just workarounds.

Security & Compliance

• Implement identity and access management (IAM roles/policies, Azure AD/Entra ID RBAC), least-privilege access, and secrets management (Secrets Manager, Key Vault, HashiCorp Vault).
• Embed security controls into pipelines (SAST/DAST, image scanning, policy-as-code with tools such as OPA/Sentinel).
• Support compliance requirements relevant to client engagements, including DPDP Act 2023, ISO 27001, and client-specific regulatory frameworks under Minfy's Kavach360 programme.

Cost & Operational Efficiency

• Monitor and optimize cloud spend using native cost tools (Cost Explorer, Azure Cost Management) and rightsizing recommendations.
• Identify automation opportunities to reduce manual operational toil across managed environments.

Client & Cross-Functional Engagement

• Work directly with client engineering and infrastructure teams as a trusted technical resource on managed services and migration engagements.
• Partner with the MiMo and Cloud Advisory teams to implement platforms that support migration and modernization roadmaps.
• Produce clear runbooks, architecture diagrams, and platform documentation.

Mentorship & Technical Contribution

• Mentor junior and mid-level platform engineers; review their IaC and pipeline contributions.
• Contribute reusable modules, scripts, and accelerators to Minfy's internal platform engineering toolkit.
• Participate in architecture reviews and champion platform engineering best practices across the BU.

Required Qualifications

Experience

• 5–8 years of experience in cloud infrastructure, platform engineering, DevOps, or Site Reliability Engineering roles.
• Demonstrated hands-on experience operating production workloads on both AWS and Azure (multi-cloud experience required).

Core Technical Skills

• Strong hands-on expertise with Terraform for multi-cloud Infrastructure as Code.
• Production experience with Kubernetes (EKS and/or AKS) — deployment, troubleshooting, and day-2 operations.
• Strong CI/CD skills — designing and building end-to-end pipelines (GitHub Actions, Azure DevOps, GitLab CI, or Jenkins) with automated testing, security gates, and deployment strategies (blue-green, canary, rolling).
• Strong containerisation skills — Docker image build and optimization, multi-stage builds, container registries (ECR, ACR), and container security scanning.
• Scripting proficiency in Python, Bash, or Go for automation and tooling.
• Solid networking fundamentals — VPC/VNet design, routing, DNS, load balancing, and hybrid connectivity.

Security & Governance

• Working knowledge of IAM/RBAC design, secrets management, and policy-as-code.
• Familiarity with security and compliance frameworks relevant to enterprise cloud environments (Well-Architected Framework, ISO 27001, DPDP Act 2023 or equivalent).

Collaboration & Communication

• Comfortable working directly with client technical stakeholders and cross-functional Minfy teams (advisory, MiMo, security).
• Able to produce clear technical documentation and communicate incident/root-cause findings effectively.

Preferred Qualifications

• Certifications: AWS Certified Solutions Architect / DevOps Engineer, Microsoft Certified: Azure Administrator / DevOps Engineer Expert, or CKA/CKAD.
• Experience with GitOps tooling (ArgoCD, Flux).
• Exposure to service mesh technologies (Istio, Linkerd).
• Prior experience in a partner/SI or managed services environment (AWS Premier/Advanced Partner or Microsoft Solutions Partner).
• Familiarity with FinOps practices and cloud cost optimization.