DevOps Engineer

AWS Infrastructure, CI/CD \& Production Operations

Mumbai (On-site) \| Full-time \| 2-4 years

About The Role

Unico Connect is an AI-first technology partner that builds custom mobile, web, and AI products for clients across multiple geographies. We are hiring a DevOps Engineer who will own day-to-day cloud infrastructure, deployment automation, and production operations across active customer engagements.

The mandatory requirement for this role is hands-on production experience on AWS, with infrastructure as code, container orchestration, and CI/CD pipelines owned end to end on at least one live customer workload. The role is hands-on. Expect to operate Kubernetes clusters, build CI/CD pipelines, automate environment provisioning, manage TLS and DNS, set up observability, and partner with backend and AI engineers to ship reliably. A typical week includes a Terraform refactor, a deployment pipeline build for a new service, an incident response on a production cluster, and a cost review.

Responsibilities

• AWS infrastructure: Design and operate production infrastructure on AWS using EC2, EKS or ECS, S3, RDS, IAM, VPC, CloudFront, and Route53\. Own configuration, networking, and cost.
• Infrastructure as code: Write and maintain Terraform or Pulumi modules. Drive consistency across environments and tenants through IaC rather than manual configuration.
• Kubernetes and containers: Operate production EKS clusters. Manage Helm charts, Ingress, autoscaling, secrets, and workload isolation.
• CI/CD pipelines: Build and maintain pipelines using GitHub Actions, GitLab CI, or equivalent. Include automated tests, security scans, and rollback paths.
• TLS, DNS, and CDN automation: Automate domain provisioning, TLS issuance (Let's Encrypt, cert-manager, ACM), and CDN configuration (CloudFront, Cloudflare).
• Observability and incident response: Set up monitoring, logging, and alerting using Prometheus, Grafana, ELK, Loki, or CloudWatch. Lead incident response and write postmortems.
• Secrets and security: Manage secrets through Vault, AWS Secrets Manager, or KMS. Apply least-privilege IAM and review access regularly.
• Cost monitoring: Track and optimise AWS spend across environments. Surface waste and propose remediations.

Requirements

• Hands-on AWS production experience (mandatory). Must have personally operated production workloads on AWS, with responsibility for IaC, deployments, and incident response on at least one live customer or internal-platform deployment. POCs and lab environments do not qualify.
• 2 to 4 years of hands-on DevOps or infrastructure experience. Candidates with slightly less experience but strong demonstrated ownership are welcome to apply.
• AWS depth. Hands-on with EC2, S3, IAM, VPC, EKS or ECS, RDS, CloudFront, and Route53\. Working knowledge of CloudWatch and AWS cost tooling.
• Kubernetes in production. Hands-on operation of EKS or equivalent. Comfort with Helm, Ingress controllers, autoscaling, and resource quotas.
• Infrastructure as code. Strong with Terraform (preferred) or Pulumi. Modular code, state management, and review discipline.
• CI/CD pipelines. Production experience with GitHub Actions, GitLab CI, or equivalent. Comfort with multi-environment pipelines and release strategies.
• Scripting and automation. Strong Bash and Python (or Go) for tooling. Linux fluency at the command line.
• Observability stack. Hands-on with Prometheus, Grafana, ELK or Loki, and at least one APM tool (Datadog, New Relic, or equivalent).
• Networking, TLS, and security fundamentals. Comfortable with DNS, TLS certificate lifecycle, VPC peering, and security groups.

Nice to have:

multi-tenant SaaS infrastructure experience; service mesh (Istio, Linkerd); GitOps (ArgoCD, Flux); sandboxed execution environments (Firecracker, gVisor); exposure to platform engineering or developer-platform teams.