Staff Cloud Infrastructure Engineer

Reports To

Senior Manager - Information Security

What You Will Be Doing

We are seeking an experienced and driven Infrastructure Engineer to join our platform engineering team. In this role, you will be at the heart of our engineering organisation — designing and owning the infrastructure, CI/CD pipelines, observability stack, and cloud platforms that power our products. You will partner closely with development, QA, and security teams to build reliable, scalable, and secure systems, while championing a culture of automation, continuous improvement, and operational excellence.

What You Will Bring to ChargePoint

CI/CD & Automation

• Design, build, and maintain robust CI/CD pipelines that support rapid, high-quality software delivery across multiple teams and environments.
• Automate repetitive operational tasks — build, test, release, and deployment workflows — to improve speed and consistency.
• Own release management processes including versioning, tagging, rollback strategies, and progressive delivery (canary, blue-green deployments).
• Integrate automated testing, code quality gates, and security scanning into delivery pipelines.

Cloud Infrastructure & Architecture

• Architect, provision, and manage scalable cloud infrastructure across AWS, GCP, or Azure using Infrastructure-as-Code (IaC) tools such as Terraform, Pulumi, or CloudFormation.
• Design for high availability, fault tolerance, and cost efficiency; regularly review and optimise cloud spend.
• Manage multi-environment setups (dev, staging, production) with environment parity and configuration management best practices.
• Evaluate and adopt new cloud-native services that align with business and engineering goals.

Container Orchestration & Microservices

• Build and manage containerised workloads using Docker and Kubernetes (EKS, GKE, AKS, or self-managed clusters).
• Define standards for container image builds, registry management, security scanning, and image lifecycle.
• Implement and maintain service mesh, ingress, and networking solutions within Kubernetes environments.
• Drive adoption of Helm charts or Kustomize for consistent and repeatable Kubernetes deployments.

Observability & Reliability

• Build and maintain a comprehensive observability stack covering metrics, logs, and distributed tracing (e.g., Prometheus, Grafana, Datadog, ELK/EFK, Jaeger, or equivalent).
• Define SLIs, SLOs, and error budgets in partnership with engineering teams; lead SRE practices across the organisation.
• Lead incident response processes — on-call rotation, blameless post-mortems, and systematic reliability improvements.
• Proactively identify and address toil, bottlenecks, and single points of failure in the platform.

Security & Compliance

• Embed security practices into infrastructure and pipelines — secrets management (Vault, AWS Secrets Manager), least-privilege IAM, network segmentation, and vulnerability scanning.
• Ensure infrastructure compliance with relevant standards (SOC 2, ISO 27001, CIS Benchmarks, PCI-DSS where applicable).
• Collaborate with the security team on audit readiness, penetration testing remediation, and security posture improvements.
• Implement and enforce IaC security scanning (Checkov, tfsec, or similar).

Collaboration & Leadership

• Act as a technical lead and mentor for junior and mid-level DevOps/platform engineers.
• Define and document engineering standards, runbooks, architectural decision records (ADRs), and operational playbooks.
• Participate in architecture and design reviews; advocate for infrastructure and operational concerns early in the product lifecycle.
• Evaluate and manage third-party tooling and vendor relationships.

Requirements

• 7–9 years of hands-on experience in a DevOps, Site Reliability Engineering (SRE), or Platform Engineering role.
• Strong expertise with at least one major cloud provider (AWS, GCP, or Azure) — including compute, networking, storage, IAM, and managed services.
• Deep experience with CI/CD tools such as GitHub Actions, GitLab CI, Jenkins, CircleCI, or Tekton.
• Proficiency in Infrastructure-as-Code using Terraform and/or Pulumi/CloudFormation.
• Hands-on expertise with Docker and Kubernetes in production environments.
• Strong scripting and automation skills in Python, Bash, or Go.
• Solid understanding of networking fundamentals — DNS, TCP/IP, load balancing, VPNs, and CDNs.
• Experience with observability and monitoring platforms (Prometheus/Grafana, Datadog, Splunk, ELK, or equivalent).
• Familiarity with configuration management tools (Ansible, Chef, Puppet, or similar).
• Demonstrated ability to lead complex technical initiatives and mentor team members.

Mandatory to Have

• Experience with Git workflows and tools such as ArgoCD or Flux.
• Knowledge of service mesh technologies (Istio, Linkerd, Envoy).
• Exposure to FinOps practices and cloud cost optimisation tooling.
• Experience with database administration and managed data services (RDS, CloudSQL, DynamoDB, etc.).
• Familiarity with ML/AI infrastructure or data platform engineering.
• Relevant certifications: AWS Solutions Architect / DevOps Engineer, CKA/CKAD, Google Professional Cloud DevOps Engineer, HashiCorp Terraform Associate, or equivalent.
• Background in regulated or high-compliance environments (FinTech, Healthcare, eCommerce).

Location

Gurgaon/Remote