Website:
menthra.ai
Job details:
We are hiring a Senior Infrastructure & Cloud Security Engineer to own the cloud platform behind our AI-powered products, and to lead our planned migration from Azure to AWS starting mid-December.
This is a hands-on, high-ownership role. You will be the person accountable for how our platform runs, how secure it is, and what it costs. You will report to our CTO.
📍 Location: India, on-site or hybrid (not remote)
💼 Experience: 8+ years overall, including 3+ years running production on AWS, GCP or Azure (AWS or GCP preferred)
WHAT YOU WILL DO
• Own the platform: run production and non-production environments across Azure and GCP (Kubernetes, VMs, networking, storage, managed databases and caches). Build the inventory, runbooks, diagrams and on-call process.
• Lead the Azure to AWS migration: design the target architecture (EKS, VPC, load balancing, CDN, secrets, observability), plan the data migration for MongoDB, run cut-over and rollback, and decommission Azure. Sequence it around our existing Azure commitments, which end in Jan/Feb 2027.
• Automate everything: bring all environments under Terraform and GitOps (ArgoCD). Make non-production environments cheap, disposable and scheduled.
• Run our video stack: operate and scale self-hosted Jitsi Meet (Jicofo, Videobridge, Jibri) for low-latency, high-concurrency sessions.
• Secure the platform: identity and access (least privilege, SSO and MFA), secrets management, API-key hygiene and rotation, network security, and Cloudflare (WAF, DDoS, rate limiting, TLS). Run an access review and credential rotation as you take over.
• Find and fix vulnerabilities: regular network, cloud, container and application pentests and scans, with findings tracked to closure. Add security scanning to our CI/CD pipelines (Azure DevOps and GitHub).
• Keep it reliable: monitoring, logging and alerting (Grafana, Loki, cloud-native tools), SLOs, incident response, backups and disaster recovery with regular restore tests.
• Own cloud cost (FinOps): track commitments and renewals, right-size compute and databases, shut down idle environments, clean up after migrations, and report monthly spend by product.
• Manage vendors and access: keep one register of every third-party platform and API we use, with owner, plan and renewal date, and make sure accounts belong to the company, not individuals.
WHAT YOU BRING
• Strong production experience on AWS (EKS, EC2, VPC, IAM, S3, CloudFront/ALB, managed databases, Secrets Manager, CloudWatch), plus hands-on experience with Azure and/or GCP. You have led or substantially contributed to at least one migration between clouds.
• Deep Kubernetes experience in production (AKS, GKE and/or EKS), Helm, ingress, autoscaling, and GitOps with ArgoCD.
• Terraform (modules, state management, multi-environment), plus scripting in Python, Bash or Go. CI/CD with Azure DevOps and/or GitHub Actions.
• Experience operating MongoDB (Atlas or self-managed): backups, scaling, migration. Familiarity with Redis, Kafka and PostgreSQL.
• Hands-on experience with Jitsi or comparable WebRTC infrastructure.
• Security fundamentals: Cloudflare, IAM, secrets and key management, TLS/PKI, vulnerability management, and practical pentest tooling (Burp Suite, Nmap, Metasploit, Kali Linux, OWASP ZAP).
• Observability and operations: Prometheus, Grafana, Loki or similar; incident management, on-call, post-incident reviews.
• Experience reading cloud bills, working with reservations and savings plans, and reducing spend without reducing reliability.
NICE TO HAVE
• AWS Solutions Architect (Associate or Professional) or AWS Security Specialty; Azure or GCP architect/security certifications; or CEH, OSCP, CISSP.
• Experience with real-time voice, video or AI/ML workloads, and with guardrails on usage-based third-party APIs (rate limits, budgets, key restrictions).
• Exposure to compliance frameworks (SOC 2, ISO 27001, HIPAA-style controls, PCI DSS).
• Experience in a small, fast-moving company where you are the main infrastructure owner.
WHAT SUCCESS LOOKS LIKE
First 30 days: complete inventory and access review of every cloud, SaaS and API account; credentials rotated where needed; every production system has an owner, monitoring and an on-call path; a risk register and prioritised plan.
First 60 days: Terraform coverage for production, scheduled shutdown of non-production, verified backups and restores, a monthly cost report, and an approved Azure to AWS migration design.
First 90 days: first production workloads on AWS with a tested rollback, security scanning in all pipelines, a pentest completed with findings tracked, and no unowned or unmonitored resources.
HOW TO APPLY
Apply on LinkedIn, or send your resume to [email to be filled in by the company], with a short note on a migration or platform you owned end to end.
#Hiring #DevOps #CloudSecurity #AWS #Kubernetes #Terraform #InfrastructureEngineer #India
Click on Apply to know more.
