L3 Cloud Infra Engineer

Company Description

CLOUDiOPS Consultancy Pvt. Ltd. is an IT solutions and services company that provides comprehensive cloud services and support. The company has partnered with leading industry players like Microsoft and Amazon Web Services. In addition to cloud services, CLOUDiOPS is also involved in laptop sales and after-sales services as a Lenovo Partner.

Role Description

The engineer will be responsible for managing, deploying, and optimizing cloud infrastructure, while also designing, implementing, and maintaining network and IT environments. Key responsibilities include troubleshooting and resolving complex cloud-related issues, monitoring system performance, implementing robust security measures, and ensuring high availability of services. The role requires hands-on expertise in AWS and Azure cloud platforms, automation, network and firewall management, server administration, and information security tools. In addition, the engineer will collaborate with cross-functional teams to support business objectives, mentor junior staff, and act as the primary escalation point for L1/L2 support teams.

Key Responsibilities:

1. Cloud Infrastructure & DevOps:

• Design, deploy, and manage AWS and Azure cloud solutions, including:
• AWS:
  EC2, VPC, IAM, ELB, SNS, DynamoDB, Aurora, CloudWatch, CloudFront, Route53 etc
• Azure:
  Virtual Machines, Virtual Networks, Load Balancers, Network Security Groups, Azure Active Directory, Azure Storage, Azure Monitor, Azure SQL, Azure App Services, Azure Bastion, Azure Key Vault, Azure Automation etc
• Build high-availability, fault-tolerant, and geographically redundant cloud architectures.
• Develop and maintain CI/CD pipelines, automate build, release, and deployment processes.
• Implement Infrastructure-as-Code (IaC) using CloudFormation, Terraform, or Azure Resource Manager (ARM) templates.
• Monitor cloud environments for performance, security, and compliance.
• Manage DNS using Route53 / Azure DNS and implement identity & access management policies.

2. Network & Security Management:

• Design, configure, and maintain LAN/WAN networks, routers, switches, load balancers, and VPNs (IPsec/SSL).
• Implement and manage firewalls (Fortinet, NGFW), IDS/IPS, WAF, DDoS protection, and Email Gateways.
• Administer MDM, DLP, ZTNA, SSO, SIEM to enforce enterprise security policies.
• Conduct vulnerability assessments, penetration testing, and risk mitigation.
• Ensure compliance with PCI-DSS, SAR/DL, SOC, ISO 27001, and other relevant standards.
• Monitor network traffic and proactively address potential security threats.

3. IT Infrastructure & Server Administration:

• Manage physical and virtual servers, ensuring optimal performance and availability.
• Conduct regular server maintenance, updates, and patching for Windows and Linux systems.
• Apply ITIL best practices for incident, problem, and change management.
• Troubleshoot advanced issues related to OS performance, applications, and system stability.
• Maintain accurate documentation for cloud, network, server, and security configurations.
• Linux/Ubuntu and Windows Server administration

4. Collaboration & Leadership:

• Work closely with IT, engineering, and business teams to ensure secure deployment practices.
• Act as L3 escalation point for critical incidents and provide root cause analysis.
• Mentor junior engineers and provide guidance on best practices.
• Prepare SOWs, technical documentation, and architecture diagrams for projects.

Other Required Skills & Expertise:

Compliance & Standards:

PCI-DSS, SAR/DL, SOC, ISO 27001, certificate/key management, ITIL

Soft Skills:

Analytical thinking, problem-solving, excellent communication, time management, proactive team player

Qualifications & Certifications:

• Bachelor's degree in
  Computer Science, IT, or related field

A. Cloud & Infrastructure Certifications (Required/Preferred):

• AWS Certified Solutions Architect – Associate (SAA-C03)
• AWS Certified Solutions Architect - Professional (SAP-C02)
• Microsoft Azure Administrator Associate (AZ-104)
• Azure Solutions Architect Expert (AZ-305)
• Azure Networking Solutions (AZ-700)
• Network/Security Certifications:
  CCNA, CISSP, CEH, Fortinet NSE (preferred)