Senior Cloud Platform Engineer

The Senior Cloud Platform Engineer designs, builds, and operates automated, secure, and scalable cloud platforms across AWS and Azure for enterprise clients. This is a hands-on engineering role — owning landing zone architecture, Infrastructure as Code, CI/CD pipelines, container platforms, and observability — with the technical depth to troubleshoot production issues and the maturity to mentor junior engineers and influence platform standards across client engagements. KEY RESPONSIBILITIES 1. Platform & Landing Zone Engineering Design and build secure, multi-account/multi-subscription landing zones on AWS (Control Tower, Organizations) and Azure (Landing Zones, Management Groups). Implement network architecture — VPCs/VNets, transit gateways, hybrid connectivity, DNS, and security group / NSG design. Define and enforce account/subscription governance guardrails, tagging standards, and cost controls. 2. Infrastructure as Code & Automation Author and maintain infrastructure using Terraform (primary) and/or CloudFormation / ARM / Bicep, structured as reusable modules. Build and maintain CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab CI, or Jenkins) for both infrastructure and application deployments. Drive GitOps practices for environment provisioning and change management. 3. Containers & Orchestration Deploy, operate, and troubleshoot Kubernetes clusters (EKS, AKS) including networking (CNI), ingress, autoscaling, and RBAC. Support containerization of legacy and modernized workloads in partnership with application and modernization teams. Implement service mesh, secrets management, and workload identity patterns where applicable. 4. Observability & Reliability Implement monitoring, logging, and alerting using CloudWatch, Azure Monitor, Prometheus/Grafana, or equivalent. Define and track SLIs/SLOs for platform services; participate in on-call rotation and incident response. Conduct root-cause analysis for production issues and drive permanent fixes, not just workarounds. 5. Security & Compliance Implement identity and access management (IAM roles/policies, Azure AD/Entra ID RBAC), least-privilege access, and secrets management (Secrets Manager, Key Vault, HashiCorp Vault). Embed security controls into pipelines (SAST/DAST, image scanning, policy-as-code with tools such as OPA/Sentinel). Support compliance requirements relevant to client engagements, including DPDP Act 2023, ISO 27001, and client-specific regulatory frameworks under Minfy's Kavach360 programme. 6. Cost & Operational Efficiency Monitor and optimize cloud spend using native cost tools (Cost Explorer, Azure Cost Management) and rightsizing recommendations. Identify automation opportunities to reduce manual operational toil across managed environments. 7. Client & Cross-Functional Engagement Work directly with client engineering and infrastructure teams as a trusted technical resource on managed services and migration engagements. Partner with…