DevOps Engineer

*AWS Infrastructure, CI/CD \& Production Operations* *Mumbai (On\-site) \| Full\-time \| 2\-4 years* **About The Role** Unico Connect is an AI\-first technology partner that builds custom mobile, web, and AI products for clients across multiple geographies. We are hiring a DevOps Engineer who will own day\-to\-day cloud infrastructure, deployment automation, and production operations across active customer engagements. The mandatory requirement for this role is hands\-on production experience on AWS, with infrastructure as code, container orchestration, and CI/CD pipelines owned end to end on at least one live customer workload. The role is hands\-on. Expect to operate Kubernetes clusters, build CI/CD pipelines, automate environment provisioning, manage TLS and DNS, set up observability, and partner with backend and AI engineers to ship reliably. A typical week includes a Terraform refactor, a deployment pipeline build for a new service, an incident response on a production cluster, and a cost review. **Responsibilities** * AWS infrastructure: Design and operate production infrastructure on AWS using EC2, EKS or ECS, S3, RDS, IAM, VPC, CloudFront, and Route53\. Own configuration, networking, and cost. * Infrastructure as code: Write and maintain Terraform or Pulumi modules. Drive consistency across environments and tenants through IaC rather than manual configuration. * Kubernetes and containers: Operate production EKS clusters. Manage Helm charts, Ingress, autoscaling, secrets, and workload isolation. * CI/CD pipelines: Build and maintain pipelines using GitHub Actions, GitLab CI, or equivalent. Include automated tests, security scans, and rollback paths. * TLS, DNS, and CDN automation: Automate domain provisioning, TLS issuance (Let's Encrypt, cert\-manager, ACM), and CDN configuration (CloudFront, Cloudflare). * Observability and incident response: Set up monitoring, logging, and alerting using Prometheus, Grafana, ELK, Loki, or CloudWatch. Lead incident response and write postmortems. * Secrets and security: Manage secrets through Vault, AWS Secrets Manager, or KMS. Apply least\-privilege IAM and review access regularly. * Cost monitoring: Track and optimise AWS spend across environments. Surface waste and propose remediations. **Requirements** * Hands\-on AWS production experience (mandatory). Must have personally operated production workloads on AWS, with responsibility for IaC, deployments, and incident response on at least one live customer or internal\-platform deployment. POCs and lab environments do not qualify. * 2 to 4 years of hands\-on DevOps or infrastructure experience. Candidates with slightly less experience but strong demonstrated ownership are welcome to apply. * AWS depth. Hands\-on with EC2, S3, IAM, VPC, EKS or ECS, RDS, CloudFront, and Route53\. Working knowledge of CloudWatch and AWS cost tooling. * Kubernetes in production. Hands\-on operation of EKS or equivalent. Comfort with Helm, Ingress controllers, autoscaling, and resource quotas. * Infrastructure as code. Strong with Terraform (preferred) or Pulumi. Modular code, state management, and review discipline. * CI/CD pipelines. Production experience with GitHub Actions, GitLab CI, or equivalent. Comfort with multi\-environment pipelines and release strategies. * Scripting and automation. Strong Bash and Python (or Go) for tooling. Linux fluency at the command line. * Observability stack. Hands\-on with Prometheus, Grafana, ELK or Loki, and at least one APM tool (Datadog, New Relic, or equivalent). * Networking, TLS, and security fundamentals. Comfortable with DNS, TLS certificate lifecycle, VPC peering, and security groups. **Nice to have:** multi\-tenant SaaS infrastructure experience; service mesh (Istio, Linkerd); GitOps (ArgoCD, Flux); sandboxed execution environments (Firecracker, gVisor); exposure to platform engineering or developer\-platform teams.