高级云工程师 - DevOps 与 DevSecOps
Senior Cloud Engineer - DevOps & DevSecOps
职位描述
你将加入一个技术小组,负责在 Azure 和 GCP 上构建和运营云门户工作负载。该职位的核心是 DevOps 和 DevSecOps:基础设施即代码、安全的 CI/CD 流水线、自动化和可靠性工程。当团队需要时,你还需要参与门户本身的应用级工作,因此需要具备全栈开发能力,而非可选。你将与一位亲力亲为的技术团队负责人一起工作,并期望每天使用 AI 优先的开发实践。
职责
基础设施即代码
- 设计、开发并维护适用于 Azure 和 GCP 的可重用 Terraform 和 Ansible 模块。
- 在所有环境中实施配置标准和政策即代码(policy-as-code)实践。
云工程(Azure 和 GCP)
- 构建和运营可扩展、安全的 Azure 和 GCP 环境:AKS/GKE、App Gateway、VNets、NSGs、Key Vault、托管标识。
- 在订阅和项目中实现治理、成本优化和合规控制。
CI/CD 与自动化
- 构建和优化 Jenkins 和 GitHub Actions 流水线,以实现跨环境的自动化构建、测试和部署。
- 实现蓝绿、灰度和回滚部署策略,并集成可观测性和告警机制。
DevSecOps 与安全
- 将漏洞扫描、代码分析和合规检查集成到 CI/CD 流程中。
- 使用安全的密钥库解决方案管理秘密、证书和密钥材料。
- 与安全团队合作,确保基础设施符合 FedRAMP、FIPS、ISO、PCI 标准。
应用开发(门户用例)
- 在需要时贡献基础门户应用代码(现代 JS/TS 前端、REST API 端点、简单后端处理程序)。
- 将应用接入平台:可观测性、密钥、认证和团队已制定的标准部署模式。
监控与可靠性
- 使用 Azure Monitor、Google Cloud Monitoring、Prometheus、Grafana、Log Analytics 实现主动监控。
- 定义并调整 SLO、SLI 和错误预算,使其与业务成果保持一致。
协作与敏捷实践
· 与产品和工程团队成员在敏捷活动中合作:计划、站会、回顾、发布管理和事故后复盘。
我们寻找
· 5 年以上 DevOps、站点可靠性工程或平台工程经验,具备全栈应用开发背景。
必备技能
A. 技术
- 在以下任一平台上有实际经验:Azure(优先)、AWS 或 GCP 云架构
查看英文原文
About the Role
You will join a technical pod building and operating cloud portal workloads across Azure and GCP. The center of gravity for this role is DevOps and DevSecOps: infrastructure as code, secure CI/CD pipelines, automation, and reliability engineering. You also pick up application-level work on the portal itself when the team needs it, so full-stack comfort is expected, not optional. You will work alongside a hands-on Technical Team Leader and are expected to use AI-first development practices daily.
Responsibilities
Infrastructure as Code
- Design, develop, and maintain reusable Terraform and Ansible modules for Azure and GCP.
- Enforce configuration standards and policy-as-code practices across environments.
Cloud Engineering (Azure and GCP)
- Build and operate scalable, secure Azure and GCP environments: AKS/GKE, App Gateway, VNets, NSGs, Key Vault, Managed Identities.
- Implement governance, cost optimization, and compliance controls across subscriptions and projects.
CI/CD & Automation
- Build and optimize Jenkins and GitHub Actions pipelines for automated build, test, and deployment across environments.
- Implement blue/green, canary, and rollback deployment strategies with observability and alerting.
DevSecOps & Security
- Integrate vulnerability scanning, code analysis, and compliance checks into CI/CD workflows.
- Manage secrets, certificates, and key material with secure vault solutions.
- Partner with security teams to align infrastructure with FedRAMP, FIPS, ISO, PCI standards.
Application Work (Portal Use Cases)
- Contribute to basic portal application code (modern JS/TS frontend, REST API endpoints, simple backend handlers) when the work calls for it.
- Wire applications into the platform: observability, secrets, auth, and deployment patterns the team has standardized on.
Monitoring & Reliability
- Implement proactive monitoring with Azure Monitor, Google Cloud Monitoring, Prometheus, Grafana, Log Analytics.
- Define and tune SLOs, SLIs, and error budgets aligned to business outcomes.
Collaboration & Agile Practices
· Partner with product and engineering teammates in agile ceremonies: planning, standups, retrospectives, release management, and post-incident reviews.
Looking For
· 5+ years of experience in DevOps, Site Reliability, or Platform Engineering, with full-stack application exposure.
Mandatory Skills
A. Technical
- Proven expertise on any of the following: Azure (preferred), AWS, or GCP cloud architecture and automation.
- Hands-on with Terraform, Helm, Kubernetes, and reusable module design.
- Strong with CI/CD tooling: Jenkins or GitHub Actions
- Familiarity with security frameworks.
- Experience with container security, image scanning, and supply chain security.
- Proficiency in scripting: Bash, Python, or PowerShell.
- Application-level comfort: building or maintaining portal-style web apps (modern JS/TS frontend plus a REST backend).
- Working fluency with AI-first development: daily use of AI coding assistants, prompt and context discipline, comfort reviewing AI-generated output for correctness and security.
- Excellent troubleshooting across infrastructure, network, and application layers.
B. Soft Skills
- Strong written and verbal English; able to collaborate in US-EST hours.
- Clear, accountable communicator.
- Strong problem-solving instincts.
- Ownership: takes responsibility for end-to-end delivery.
- Collaboration: builds trust across teams and communicates transparently.
- Adaptability: adjusts quickly to new priorities and technologies.
- Continuous learning: proactively explores automation, AI, and new DevOps practices.
- Security mindset: integrates security at every stage of development and deployment.
- Outcome focus: measures success through reliability, speed, and cost efficiency.
Good to Have
- Certifications: Azure (AZ-104/AZ-400), GCP (Professional Cloud DevOps Engineer), CKA/CKAD, HashiCorp Terraform Associate.
- Prior experience in regulated environments (FedRAMP, BFSI, healthcare).
- Ansible
- ArgoCD
- Familiarity with security frameworks, such as: FedRAMP, FIPS, CIS Benchmarks, ISO, PCI.
- Full-stack application fluency for portal use cases (modern JS/TS frontend, REST APIs, common backend frameworks).
- Bachelor's degree in Computer Science, Information Systems, Engineering, or equivalent professional experience.
- This role requires US Eastern Time working hours: Monday-Friday. For India-based candidates this is typically a 6:30 PM - 3:30 AM IST shift (adjusting with US daylight saving time). Comfort with this schedule is a hard requirement.
- Engineering the AI-powered enterprise. With AI and cloud-native solutions, BETSOL accelerates cloud transformation for enterprises across 17+ countries. BETSOL holds several engineering patents, and is recognized with industry awards. BETSOL maintains a net promoter score that is 2x the industry average.
- BETSOL’s open source backup and recovery product line, Zmanda (Zmanda.com), delivers up to 50% savings in total cost of ownership (TCO) and delivers best-in-class performance.
- BETSOL Global IT Services (BETSOL.com) builds and supports end-to-end enterprise solutions, reducing time-to-market for customers.
- BETSOL offices are set against the vibrant backdrops of Broomfield, Colorado and Bangalore & Belagavi, India.
- We take pride in being an employee-centric organization, offering comprehensive benefits and opportunities.
- Learn more at betsol.com
- Originally posted on Himalayas