Senior DevOps Engineer

Engineering | Pune, India (Hybrid) | Full-Time

Mission-Critical Core Banking Platform

We are seeking a Senior DevOps Engineer to join a high-performing platform team building and operating a mission-critical, low-latency core banking application. You will be a key contributor to a cloud-native platform that is deployed first on Microsoft Azure, with roadmap targets extending to Red Hat OpenShift, AWS, and Google Cloud Infrastructure (GCI). This role demands deep hands-on expertise across the full DevOps spectrum — from infrastructure automation and CI/CD pipeline ownership to container orchestration, secrets management, and developer enablement.

You will work alongside Software Engineering, Quality Engineering, and Platform/SRE teams to ensure every release is secure, repeatable, observable, and operationally excellent. If you thrive in regulated, high-availability environments and have a passion for automation-first engineering, this role is for you.

Location: Pune, India

Work Model: Hybrid — on-site on designated days; remote-eligible on other days per team and business needs

Work Experience: 7+ years of relevant experience

1) CI/CD Pipeline Ownership

• Design, build, and maintain robust CI/CD pipelines using Jenkins and Gradle to support developer productivity and automated quality gates across dev, test, staging, and production environments.

• Manage container image builds, versioning strategies, and publishing workflows to Nexus artifact repositories; enforce image scanning and dependency hygiene.

• Own end-to-end pipeline reliability: fast feedback loops, deterministic builds, and clear failure diagnostics for development teams.

2) Kubernetes & Cloud-Native Platform Engineering

• Administer and evolve Kubernetes clusters on Azure (AKS), ensuring high availability, auto-scaling, and operational reliability aligned with SLOs.

• Extend the platform to OpenShift, AWS, and GCI as the multi-cloud roadmap progresses; maintain environment parity across targets.

• Implement and maintain GitOps-based deployment workflows; manage configuration-as-code using Carvel toolchain components (ytt, kapp-controller, imgpkg, vendir).

• Manage Kubernetes-native packaging and release workflows; enforce deployment standards across all environments.

3) Infrastructure Automation

• Own and evolve Ansible playbooks and roles for environment provisioning, configuration management, and platform component lifecycle management.

• Ensure secure, repeatable, and auditable provisioning across dev/test/stage/prod; treat infrastructure-as-code as a first-class deliverable.

• Build and maintain automation for platform component upgrades, patching cycles, and environment refresh workflows.

4) Secrets & Certificate Management

• Operate and extend External Secrets Operator (ESO) integrations with vaults and cloud-native secret stores to enforce zero-trust secret handling across all environments.

• Manage TLS certificate lifecycles: issuance, rotation, expiry monitoring, and automated renewal using cert-manager or equivalent tooling.

• Ensure no secrets, credentials, PCI data, or PII are embedded in code, pipelines, or container images; enforce policy-as-code controls.

5) Messaging & Data Infrastructure

• Support operational management and observability of NATS messaging clusters: configuration, topic management, monitoring, and failure recovery.

• Assist with PostgreSQL database infrastructure: provisioning, backup/recovery validation, connection pooling, and performance monitoring in Kubernetes-native deployments.

• Collaborate with application teams to ensure messaging and data infrastructure SLOs are met and operationalized with runbooks.

6) Test Orchestration & Quality Infrastructure

• Implement and maintain Testkube for Kubernetes-native test orchestration; integrate automated test execution into CI pipelines as a quality gate.

• Drive security and compliance testing as part of CI/CD: SAST, DAST, container vulnerability scanning, and dependency analysis.

• Maintain test environment infrastructure: provisioning, data seeding, isolation, and teardown automation.

7) Developer Enablement & Observability

• Serve as a force multiplier for development teams: reduce friction in the build-test-deploy cycle, document platform patterns, and provide self-service tooling where possible.

• Build and maintain observability infrastructure: logging pipelines, metrics collection, distributed tracing, and alerting for platform and application services.

• Contribute to runbooks, on-call playbooks, and incident response processes; participate in on-call rotation as the platform matures.

• in DevOps, Platform Engineering, or Site Reliability Engineering roles; experience with regulated or high-availability environments strongly preferred.

• — hands-on cluster administration (AKS or equivalent); deep understanding of workload scheduling, networking (CNI, ingress, service mesh), RBAC, and storage.

• — Jenkins pipeline authoring (declarative and scripted); Gradle build tooling for Java/JVM projects; artifact lifecycle management with Nexus.

• — writing and maintaining playbooks, roles, and inventories for infrastructure automation and configuration management.

• — practical experience with ytt (templating), kapp-controller (GitOps), imgpkg (bundle packaging), and related tools.

• — Dockerfile authoring, multi-stage builds, image optimization, registry management, and vulnerability scanning integration.

• — External Secrets Operator (ESO), Kubernetes Secrets, and integration with secret stores (Azure Key Vault, HashiCorp Vault, or equivalent).

• — TLS lifecycle management, cert-manager or similar tooling, and certificate rotation automation.

• — operational experience with NATS messaging: configuration, monitoring, and failure recovery.

• — operational familiarity: provisioning, backup/restore, connection management, and basic performance tuning in containerized environments.

• — experience deploying and integrating Testkube for Kubernetes-native test orchestration.

• — Azure (primary); working knowledge of OpenShift, AWS, or GCI is a strong plus.

• Strong security mindset: experience with SAST/DAST tooling, supply chain security, and compliance controls (PCI-DSS, SOC2, or equivalent).

• Experience with multi-cloud or cloud-agnostic platform delivery (Azure + OpenShift + AWS or GCI simultaneously).

• Familiarity with GitOps patterns: Flux, ArgoCD, or kapp-controller-based deployment pipelines.

• Experience with policy-as-code tooling: OPA/Gatekeeper, Kyverno, or similar.

• Exposure to AI-assisted DevOps tooling (AI-driven alerting, anomaly detection, or intelligent pipeline optimization).

• Experience in banking, payments, or other regulated transaction processing environments.

• Knowledge of service mesh technologies (Istio, Linkerd) and mTLS within Kubernetes.

• Familiarity with internal developer platform concepts: golden paths, self-service portals, and developer experience metrics.

• The opportunity to work on a mission-critical platform that processes high-value banking transactions at scale.

• A collaborative, engineering-first culture with strong investment in automation, quality, and developer experience.

• A clear multi-cloud evolution roadmap with real technical depth and growth opportunities.

• Competitive compensation, benefits, and a hybrid work environment

#LI-AP

ACI Worldwide is an equal opportunity employer.