Site Reliability Engineer III

Overview

Own and evolve Mitratech's CI/CD, infrastructure automation, and cloud platform engineering practice as a senior Site Reliability Engineer III, with AWS as the primary cloud platform and Azure as a secondary environment.

What you'll do

• Design, implement and maintain end-to-end CI/CD pipelines across GitHub Actions, Bitbucket Pipelines and Jenkins.
• Build reusable pipeline templates and shared libraries that standardize delivery patterns across all three CI/CD platforms.
• Drive pipeline governance: branch protection, PR-required checks, approval gates, environment promotion strategies and parallel job optimization.
• Implement and enforce pipeline quality gates including automated tests, SAST/SCA and container image scanning, Terraform plan validation, CDK diff review and compliance policy checks.
• Own artifact management across ECR, S3 and package feeds, including versioning, promotion and retention policies across dev, staging and prod.
• Migrate and consolidate pipelines between tools, designing the migration path, executing it and documenting the new standard.
• Architect and manage AWS compute services (EC2, ECS Fargate, EKS, Lambda), messaging and event-driven architectures (SQS, SNS, EventBridge), and data services (RDS and Aurora).
• Own AWS networking design, multi-account AWS Organizations and AWS security posture controls, integrated with CI/CD policy enforcement.
• Author and maintain AWS CDK applications (TypeScript or Python) and the Terraform/OpenTofu module library for AWS and Azure, with GitOps workflows and zero manual console changes in production.
• Author reusable CDK L3 constructs encoding Mitratech's opinionated defaults for Lambda, ECS, RDS and SQS patterns.
• Operate and maintain AWS Bedrock integrations and CI/CD pipelines for Bedrock-enabled applications, including guardrails and canary or blue-green deployments.
• Manage QuickSight infrastructure and automate QuickSight asset deployment via APIs in CI/CD pipelines.
• Support data pipeline reliability across RDS/Aurora, S3 data lake, SQS-driven ingestion and QuickSight, monitoring data freshness SLAs.
• Operate independently on complex problems, make architectural recommendations, mentor junior engineers and participate in on-call rotation for pipeline and infrastructure events.

What you'll need

• 5 to 7 years as a DevOps or Cloud/Infrastructure Engineer in production.
• 4+ years with AWS as the primary platform.
• Hands-on CI/CD expertise across GitHub Actions AND at least one of Bitbucket Pipelines or Jenkins, able to design, build and maintain pipelines on multiple platforms.
• AWS CDK proficiency (TypeScript or Python), authoring CDK stacks and reusable constructs for Lambda, ECS Fargate, SQS, RDS and supporting IAM patterns.
• Expert Terraform: module authoring, remote state (S3 + DynamoDB locking), workspace strategy and GitOps-driven apply pipelines.
• Deep AWS Fargate: task definition authoring, service auto-scaling, capacity provider strategies, VPC networking and ECR image lifecycle management.
• AWS Lambda operations: packaging and deployment automation, layers, function URLs, event source mappings (SQS, S3, EventBridge) and concurrency/throttle management.
• AWS SQS: queue design, DLQ configuration, visibility timeout tuning and batch processing integration with Lambda and Fargate.
• AWS RDS/Aurora: operational runbooks for failover, patching, parameter group management, IAM authentication and Performance Insights analysis.
• AWS Bedrock: at least one production integration, including model invocation pipelines, IAM permission design and deployment automation for Bedrock-enabled Lambda functions.
• AWS QuickSight: dataset management, SPICE, VPC connectivity and API-driven dashboard deployment in CI/CD.
• Strong Linux administration: RHEL/Amazon Linux/Ubuntu OS hardening, systemd, performance profiling, SSM Patch Manager and Ansible configuration management.
• Shift-left security across all pipeline platforms: SAST, SCA, container scanning, secrets scanning and IaC security scanning (Checkov, cfn-guard).

Nice to have

• Preferred AWS certifications: Solutions Architect Professional, DevOps Engineer Professional or Security Specialty.
• AWS Control Tower / Account Factory for Terraform (AFT) for multi-account landing zone management.
• HashiCorp Vault for dynamic credential issuance and secrets management.
• EC2 Image Builder or Packer for golden AMI pipeline automation.
• AWS Step Functions for complex serverless orchestration patterns alongside Lambda and SQS.
• DORA metrics instrumentation using LinearB, Sleuth or equivalent engineering productivity platforms.

Details

• Location: Mitratech India.
• On-call rotation for pipeline and infrastructure events.