Senior DevOps Engineer

DevOps Engineer (AWS Fargate, Terraform, Bitbucket Pipelines) – India

Role Type: Full-time · Permanent (Hybrid)

Shift time- 12pm to 9pm

Experience Level: 7+ years

Tech Stack: AWS · Terraform · ECS Fargate · Bitbucket · Java · PHP · Docker

Role Overview

We’re hiring a Senior DevOps Engineer to be hands-on and scale our Global AWS infrastructure and deployment pipelines for our Java-based and PHP-based production applications. You’ll design and automate modern cloud delivery workflows using Terraform, Bitbucket Pipelines, ECS Fargate, and DevSecOps best practices — with full ownership over CI/CD, observability, and platform reliability.

This role is ideal for someone who wants to build platform-as-a-product, not just maintain servers.

Core Responsibilities

· Build and maintain AWS infrastructure using Terraform (modular, reusable, multi-env)

· Expert in managing containerised deployments for Java & PHP applications on ECS Fargate

· Own Bitbucket Pipelines CI/CD (build, test, scan, deploy, rollback)

· Build secure, repeatable delivery workflows supporting trunk-based + feature branch workflows

· Manage ECR image lifecycle, tagging strategy, vulnerability scanning, retention policies

· Implement monitoring, logging, tracing and alerting (CloudWatch, Site24x7)

· Improve runtime performance & scalability (autoscaling, load balancing, caching layers)

· Harden environments using IAM, Secrets Manager, WAF, policy-as-code

· Enable developers through internal tooling, self-service pipelines, docs & runbooks

· Participate in on-call rota and incident response (SRE-style postmortems)

Required Skills & Experience

Area Requirement

AWS ECS Fargate, ECR, ALB, IAM, CloudWatch, VPC, S3, RDS/Aurora, Secrets Manager, EC2

IaC Terraform (v1.5+) reusable module patterns

CI/CD Bitbucket Pipelines (YAML pipelines, environment variables, deployment environments)

Containers Docker, multi-stage builds, debugging, image optimisation, ECR scanning

Security IAM roles, KMS, image scanning, dependency scanning, least-privilege architecture

Monitoring CloudWatch Logs & Metrics, Site24x7

Scripting Python or Bash

Bitbucket Pipelines Git branching strategies, PR validation automations, change-review governance

Nice-to-Have

· Experience with Java application performance tuning (JVM, GC, connection pools)

· Experience containerising legacy PHP workloads into modern deployments

· Knowledge of AWS cost optimisation for Fargate (rightsizing, Graviton, task scheduling)

2025 DevOps Best-Practice Principles (We Expect)

· 100% Infrastructure as Code (no console changes)

· Enforced branch policies + mandatory PR reviews

· Shift-left security: SAST, SCA, container scan in pipeline

· Zero-trust IAM: no long-lived keys

· Automated rollback strategies + deployment health checks

· Monitoring = logs + metrics + traces

· Cost visibility dashboards per service/environment