Senior Cloud Devops Engineer

About the role

JOB TITLE: Senior Cloud Devops Engineer

EXPERIENCE: 5–10 Years

Approved Date:

REPORTS TO: Shivendra Ashish

Revised Dates:

POSITIONS SUPERVISED:

Role Summary:

We are looking for a Senior Cloud SecOps Engineer who thrives in a high-scale, multi-tenant environment. In this role, you will act as the bridge between Cloud Operations and Security Engineering. You will not just manage infrastructure; you will build the automated systems that allow us to securely onboard, monitor, and patch dozens of client environments simultaneously. Your goal is to deliver "Security-as-a-Service" efficiently, ensuring that a security issue in one tenant is detected and isolated instantly.

Core Responsibilities:

- Multi-Tenant Operations: Manage and secure cloud infrastructure across diverse client environments (AWS, Azure, GCP), ensuring strict data isolation and network segregation.

- Automated Onboarding: Build "Zero-Touch" pipelines using Infrastructure as Code (IaC) to provision security baselines (SIEM forwarders, Scanners, IAM roles) for new customers in minutes.

- Fleet Management: Design strategies to patch and update security agents across hundreds of servers/endpoints without causing downtime for clients.

- Centralized Observability: Maintain the central "Single Pane of Glass" platform that aggregates alerts and health metrics from all customer tenants into our SOC.

- Incident Response Support: Act as the Tier-3 escalation point for the SOC, investigating complex cloud infrastructure attacks or misconfigurations.

Must-Have Skills

- Cloud Agnostic: Deep hands-on experience with at least two major cloud providers (AWS / Azure / GCP) and their native security tools (GuardDuty, Sentinel, Security Hub).

- Infrastructure as Code: Expert in writing modular templates (e.g., Terraform, CloudFormation) that can be reused across different clients with variable inputs.

- Container Security: Strong knowledge of Kubernetes operations, including securing clusters, managing namespaces for isolation, and enforcing policies.

- DevSecOps Scripting: Proficiency in Python or Go to automate cross-account tasks (e.g., "Rotate access keys for these 50 client accounts").

- Compliance Ops: Understanding of how to implement technical controls for standards like SOC2, ISO 27001, or HIPAA in a cloud environment.

Preferred / Nice to Have:

- MSP Experience: Prior experience working at a Managed Service Provider or handling multi-customer setups (e.g., using Azure Lighthouse).

- Policy-as-Code: Experience with tools like OPA (Open Policy Agent) or Checkov to prevent misconfigurations before deployment.

- Certifications: Certified Kubernetes Security Specialist (CKS), AWS Security Specialty, or Azure Security Engineer.

Ability to embrace Clearwater's CLEAR core values (Commitment to Client Success, Lead with Accountability, Integrity & Collaboration, Excellence in All That We Do, Advance Colleague Success, Respect & Transparency) and culture.