Architect, Cloud Site Reliability (SRE)

Description

About CloudOps Team:

CloudOps team is responsible for Availability, Reliability, Disaster Recovery, Performance, Monitoring, Emergency Response, and Capacity Planning of Icertis SaaS application & related services. CloudOps executes Infra & Access Provisioning, Upgrades, Deployments & Change management to drive faster time to market. This team plays critical part in building & executing the cloud strategy for the company.

In addition to above, CloudOps also drives architectural improvements to improve scalability & optimize overall cost.

Responsibilities

• Architect and lead large-scale cloud and infrastructure projects focused on scalability, performance, reliability, availability, security, and cost optimization across Azure, AWS, and GCP.

• Drive initiatives end-to-end from POC to production, including technical evaluation, architecture, implementation, rollout, and operational handover.

• Lead project delivery and execution, managing technical scope, milestones, dependencies, risks, and collaboration across Product Engineering, SRE, Security, and other stakeholders.

• Provide technical leadership for 24x7 mission-critical multi-cloud environments, ensuring operational stability, resilience, and continuous improvement.

• Drive observability, telemetry, automation, self-healing, and proactive incident prevention to improve platform reliability and reduce production issues.

• Evaluate and adopt cloud-native technologies and modern architectures to improve scalability, agility, performance, and infrastructure efficiency.

• Design and implement cloud security and data protection solutions, including encryption at rest and in transit, Azure Key Vault, Customer-Managed Keys (CMK), Bring Your Own Key (BYOK), key rotation, certificate management, and encryption capabilities across Azure services.

• Lead application and infrastructure performance analysis and drive end-to-end cloud cost optimization and FinOps best practices.

• Partner with Microsoft, Amazon, and Google to evaluate new technologies, optimize cloud services, resolve technical challenges, and drive innovation.

• Work with internal and external customers on performance, reliability, security, troubleshooting, root-cause analysis, and resolution of critical technical issues, while driving knowledge management and continuous improvement.

Qualifications

Experience & Leadership

• 12 to 15+ years in mission-critical, 24x7 Cloud Operations/SRE teams within B2B/B2C SaaS organizations.

• Experience designing and implementing large-scale solutions across Azure (Primarily) , AWS, GCP.

• Proven experience leading large teams in complex, fast-changing, 24x7 environments.

• Strong customer focus, analytical and communication skills, with the ability to build relationships, meet SLAs/deadlines and deliver results under pressure.

• Ability to simplify complex technical issues, develop innovative solutions/workarounds and operate effectively in agile, constantly changing environments.

Cloud, Systems & Networking

• Strong systems and network architecture expertise across Linux/Windows, SQL databases, compute, storage and cloud networking.
• Hands-on Windows and Linux administration and troubleshooting across compute, memory, storage, processes, services, networking and kernel/system issues.
• Working knowledge of Windows and Linux, SQL database and network administration, including TCP/IP, DNS, routing, SSH, firewalls, certificates, permissions and system hardening.
• Experience managing systems at scale, including patching, vulnerability remediation, OS upgrades, configuration management and performance optimization.
• Strong scripting/automation skills using PowerShell, Bash/Shell, or Python.

AKS / Kubernetes

• Strong hands-on experience designing, deploying, administering, upgrading, and troubleshooting large-scale production AKS/Kubernetes environments.
• Strong Linux administration skills across Ubuntu/RHEL and container environments.
• Hands-on experience with Docker, container images, Dockerfiles, container registries (ACR), and container security.
• Strong Kubernetes knowledge covering workloads, Services, Ingress, ConfigMaps, Secrets, StatefulSets, DaemonSets, Jobs/CronJobs, Namespaces, scheduling, probes, PDBs, HPA, and Cluster Autoscaler.
• Strong AKS networking and security expertise, including Azure CNI, IP/subnet planning, Network Policies, NSGs, UDRs, Load Balancers, DNS, ingress/egress, private clusters, RBAC, Azure RBAC, Managed Identity, and Workload Identity.
• Experience with AKS node pools, VM sizing, availability zones, workload placement, autoscaling, capacity planning, and resource requests/limits.
• Strong experience with AKS monitoring and troubleshooting using Azure Monitor, Log Analytics, and Datadog.
• Experience designing highly available, self-healing, scalable, secure, zero-downtime, and disaster-recovery solutions for mission-critical AKS workloads.