Overview

Lead DevOps Engineer -Cloud & Platform Infrastructure

Responsibilities

• Design and operate secure, highly available and cost-efficient AWS environments across networking, compute, storage, IAM, load balancing, encryption, DNS and monitoring.
• Implement least-privilege access, environment isolation, capacity planning, cost governance and strong operational controls.
• Diagnose and resolve complex infrastructure, networking, identity and access-control issues.
• Provision, upgrade and operate production-grade EKS clusters, add-ons, networking, ingress, storage, DNS and workload identity.
• Implement HPA-based workload scaling and Karpenter-based node provisioning, with appropriate on-demand capacity, isolation
• Secure and troubleshoot Kubernetes using RBAC, Pod Security Admission, network policies, admission controls, secret management and strong deployment standards.
• Operate and manage private-cloud platforms, smaller or regional cloud service providers, dedicated or virtual server environments,
• Establish consistent standards for access, configuration, patching, monitoring, backup, recovery, security, incident handling, vendor management and cost control across heterogeneous platforms.
• Integrate these environments with central identity, secrets management, logging, alerting, automation, governance and operational reporting wherever technically feasible.
• Design reusable, versioned and secure Terraform modules; manage remote state, locking, imports, drift, provider upgrades and controlled recovery.
• Build and maintain CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions or equivalent, with GitOps deployments through
• Implement automated validation, security scanning, plan review, environment promotion and safe rollback or progressive deployment practices.
• Implement metrics, logs and traces using Prometheus, Grafana, CloudWatch and OpenTelemetry; define actionable dashboards,
• Lead incident response, root-cause analysis, corrective actions, runbooks and automated remediation.
• Own backup validation, disaster-recovery planning and recovery exercises against agreed RTO and RPO targets.
• Establish secrets management, vulnerability scanning, WAF, audit logging and software-supply-chain controls.
• Administer MongoDB Atlas clusters covering private connectivity, access control, scaling, alerts, backups, restoration, upgrades and performance monitoring.
• Build operational automation and platform integrations using Python and Bash; use PowerShell where required.
• Review Terraform, Kubernetes, pipeline and platform changes; define reusable engineering standards and production-readiness expectations.
• Mentor engineers, strengthen technical ownership and translate platform risks into a prioritised roadmap.
• Partner with Engineering, Product, Security and external platform vendors on scalability, reliability, security, cost and service

Qualifications

• PRIMARY CLOUD:AWS
• ROLE TYPE:Hands-on leadership
• ROLE SUMMARY
• NST Cyber is seeking a hands-on Lead DevOps Engineer to architect, implement, operate and secure the infrastructure supporting its cybersecurity products. The role owns AWS, Amazon EKS, Terraform, CI/CD, GitOps, observability, reliability,
• security and MongoDB Atlas. It also covers private-cloud environments, smaller or regional cloud providers, dedicated and virtual server platforms, and third-party Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a
• Service (SaaS) systems. The successful candidate will remain directly involved in design, automation, production troubleshooting and technical reviews while mentoring engineers and establishing platform standards.
• Experience: 8+ years in DevOps, SRE, Cloud Engineering or Platform Engineering, including at least 4 years of substantial hands-on work with AWS, Kubernetes/EKS and Terraform.
• AWS: Deep production experience with VPC design, IAM, networking, load balancing, S3, CloudWatch, KMS, availability, security and cost optimisation.
• EKS/Kubernetes: Hands-on ownership of production clusters, upgrades, add-ons, ingress, storage, scheduling, HPA, Karpenter,RBAC and workload security.
• Terraform: Advanced HCL, reusable module design, remote-state management, versioning, drift management, imports, code
• Platform Operations: Experience operating heterogeneous environments such as private cloud, non-hyperscaler CSPs,dedicated/virtual servers and IaaS, PaaS or SaaS platforms, including identity, monitoring, backup, security and vendor coordination.
• CI/CD and GitOps: Strong experience with at least one CI platform and hands-on use of ArgoCD, Flux or an equivalent GitOps
• Observability and Reliability: Practical Prometheus, Grafana and CloudWatch experience, including production incidents, alerting,
• Automation: Strong Python or Bash scripting capability for infrastructure and operational automation.
• MongoDB Atlas: Hands-on administration covering security, private connectivity, scaling, backup/restore, alerts and performance monitoring.
• Leadership: Demonstrated technical leadership, production ownership, infrastructure reviews and mentoring while remaining hands-on.
• AWS Solutions Architect Professional, AWS DevOps Engineer Professional or CKA certification.
• OpenStack, VMware or equivalent private-cloud/virtualisation platforms; Azure, GCP, CloudFormation or Bicep exposure.
• Multi-account AWS, multi-cluster or multi-region operations, hybrid networking and internal developer platforms.
• HashiCorp Vault, OPA Gatekeeper, Kyverno, SIEM integration, policy-as-code or Zero Trust practices.
• Experience supporting ISO 27001, SOC 2 or comparable security-control frameworks.
• LangTrace or AI-assisted operational automation.
• Bachelor's degree in Computer Science, Engineering or a related discipline, or equivalent practical experience.
• Proven ownership of business-critical infrastructure with measurable improvements in reliability, recovery, deployment efficiency,
• Clear written and verbal communication and experience working with distributed Agile engineering teams and external technology providers.