DevOps Engineer

BusPatrol
Hyderabad, India
Hybrid

Who this role is best for

Best suited to experienced DevOps engineers with strong cloud infrastructure and security expertise working in enterprise-scale environments in India.

Best fit for

  • Experienced DevOps engineers with multi-account AWS and IaC expertise
    — “multi‑account AWS. You’ll modernize legacy monoliths and accelerate microservices delivery”
  • Candidates with a security-first mindset and policy-as-code experience
    — “Security-first mindset: Secrets management, encryption, vulnerability scanning, image signing/SBOMs, Policy-as‑Code”

Things to consider

  • This role demands on-call responsibilities and incident management participation
    — “On‑call participation, incident management, and post‑incident improvement”
  • Candidates must be capable of working with multiple AWS services and environments
    — “IaC at scale: Design, build, and maintain reusable Terraform modules and CDK constructs for landing zones, VPC/networking, compute, databases, and security controls across multiple accounts/environments”

How to stand out

  • Highlight experience with reusable IaC modules and cross-account strategies
    — “Design, build, and maintain reusable Terraform modules and CDK constructs for landing zones, VPC/networking, compute, databases, and security controls across multiple accounts/environments”
  • Emphasize specific security tools and practices like IAM, KMS, and Policy-as-Code
    — “Enforce least‑privilege IAM, KMS encryption, Secrets Manager/Parameter Store, GuardDuty/Security Hub, CloudTrail/Lake”
  • Showcase GitOps and CI/CD pipeline experience with GitHub Actions and reliability practices
    — “Implement and operate Github Actions for app and platform workloads; declarative config, drift detection, and progressive delivery (canary/blue‑green)”
  • Demonstrate knowledge of observability tools like CloudWatch and Datadog in your projects
    — “Standardize metrics/logs/traces with CloudWatch/Datadog codify dashboards, alerts, and runbooks”
  • Include examples of developer experience improvements like self-service templates or documentation
    — “Ship self‑service templates, Backstage scaffolds/golden paths, and documentation that make the paved road the easiest road”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • secure cloud platforms
  • modernized legacy systems
  • reliable microservices delivery
Typical background
DevOpsPlatform EngineeringSRE

Skills & requirements

Required

Infrastructure-as-codeGitopsCloud SecurityMulti-account ArchitectureModernizationCI/CDObservability

Preferred

Backstage ExperienceNetwork SecurityData SecurityCompliance Program ExperienceCost Management

Stack & domain

TerraformAWS CDKGitopsMulti-account AWSInfrastructure-as-codeAWSKubernetesECSEKSLambdaRDSAuroraS3CloudfrontRoute 53IAMKMSGuarddutySecurity HubCloudtrailCloudwatchDatadogBackstageCI/CDUnit/integration/e2e TestingSavings PlansRI StrategyTeam PlayerAWS DevopsAWS Solutions ArchitectHashicorp Terraform AssociateKubernetes CKAKubernetes CKADCloud SecurityObservabilityCost Management

About the role

Original posting from BusPatrol via Ashby

Overview

We’re hiring a Sr. DevOps Engineer to build and secure cloud platforms with Infrastructure-as-Code (Terraform & AWS CDK), GitOps, and multi‑account AWS. You’ll modernize legacy monoliths and accelerate microservices delivery while embedding security-by-default and reliability into everything we ship.

Key Responsibilities

· IaC at scale: Design, build, and maintain reusable Terraform modules and CDK constructs for landing zones, VPC/networking, compute, databases, and security controls across multiple accounts/environments.

· GitOps enablement: Implement and operate Github Actions for app and platform workloads; declarative config, drift detection, and progressive delivery (canary/blue‑green).

· Cloud security & compliance: Enforce least‑privilege IAM, KMS encryption, Secrets Manager/Parameter Store, GuardDuty/Security Hub, CloudTrail/Lake; contribute to SOC 2/ISO27001/CIS hardening and policy‑as‑code.

· Multi‑account architecture: Evolve AWS Organizations/Control Tower/SCPs, cross‑account roles, and shared services (observability, CI/CD, artifact registries, networking) with clear blast‑radius boundaries.

· Modernization: Partner with teams to decompose monoliths via the strangler‑fig pattern, carve‑outs, and data migration strategies; define microservice standards (contracts, observability, release patterns).

· CI/CD & reliability: Own build/test/release pipelines (GitHub Actions) quality gates, artifact/version promotion, rollbacks;

· Observability & ops: Standardize metrics/logs/traces with CloudWatch/Datadog codify dashboards, alerts, and runbooks. Drive cost visibility and guardrails.

· Developer experience: Ship self‑service templates, Backstage scaffolds/golden paths, and documentation that make the paved road the easiest road.

Preferred Qualifications

· Minimum 8+ years in DevOps/Platform/SRE roles operating production systems.

· Advanced Terraform and/or AWS CDK (TypeScript/Python); authored reusable modules/constructs and remote state strategies.

· AWS depth: VPC design (subnets, routing, NAT, TGW), ALB/NLB, ECS/EKS/Lambda, RDS/Aurora, S3, CloudFront, Route 53, IAM, KMS; experience with Control Tower/Organizations/SCPs.

· Containers & GitOps: Docker image build/hardening, Kubernetes and/or ECS operations.

· Security‑first mindset: Secrets management, encryption, vulnerability scanning, image signing/SBOMs, Policy-as‑Code;

· CI/CD & testing: Pipelines with unit/integration/e2e gates, environment promotion, and rollback strategies.

· Operations: On‑call participation, incident management, and post‑incident improvement.

Nice to Haves

· Backstage or internal developer platform (IDP) experience; golden‑path templates.

· Network security (WAF, Zero‑Trust), data security (PII tokenization/DLP), or compliance program experience.

· Additional policy‑as‑code tools: AWS Config conformance packs, CloudFormation Guard, tfsec/Checkov, Snyk.

· Cost management: CUR/Cost Explorer, anomaly detection, unit economics/chargeback, Savings Plans/RI strategy.

· Certifications: AWS DevOps/Solutions Architect, HashiCorp Terraform Associate, Kubernetes CKA/CKAD.

Source: BusPatrol careers (Ashby)

Similar roles

More roles at BusPatrol