About the role

Resource Job Descriptions

L1 & L2 DevOps / Platform Engineering

Engagement context

The L1 resource operates at the site level, executing deployments and handling first-line support. The L2 resource provides central architecture oversight, complex troubleshooting, automation, and escalation support across all sites. He will travel across sites as and when necessary, however, we will deploy him centrally/remotely primarily.

L1 vs L2 — at a glance

Dimension

L1 — Platform Operations Engineer

L2 — Senior DevOps / Cloud Engineer

Role focus

Day-to-day deployment, integrations, monitoring, and first-line support at site level

Architecture decisions, complex troubleshooting, automation, and escalation support

Experience

1–4 years in DevOps / Cloud / Kubernetes operations

5–8 years in Platform Engineering, Cloud Architecture, or SRE

Kubernetes

Operate and maintain clusters; deploy using Helm charts; basic kubectl usage

Design cluster topology; tune HPA/VPA; manage Operators, CRDs, network policies

Cloud (AWS/GCP/Azure)

Work with managed services under guidance; configure basic IAM and networking

Architect VPC, IAM, managed DB, object storage; multi-cloud experience preferred

Helm

Install, upgrade, configure values.yaml; read release outputs

Author and maintain Helm charts; manage chart versioning and dependencies

Terraform / IaC

Apply existing Terraform plans; understand state files

Write and maintain Terraform modules; design repeatable IaC pipelines

Networking

Understand DNS, TLS, ports, load balancers; follow runbooks

Diagnose complex TLS/mTLS issues; design private clusters, peering, hybrid setups

Troubleshooting

Use kubectl logs, describe, exec; follow escalation runbook

Root cause analysis across app/k8s/cloud layers; resolve novel/undocumented issues

Monitoring & observability

Operate dashboards; acknowledge and route alerts; maintain logs

Design monitoring strategy; integrate Prometheus, ELK, Datadog; define alert thresholds

Security

Apply IAM roles and secret configs as defined; follow security runbook

Design IAM policies, secret management strategy, network policies, zero-trust patterns

Scripting

Basic Bash for operational tasks; read Python scripts

Write Bash/Python automation scripts; build CI/CD pipeline integrations

Deployment scope

Single site / entity deployment and support

Cross-site architecture oversight; pilot-to-scale transition planning

Escalation

Escalates to L2 for unresolved issues within defined SLA

Final escalation point before OEM; owns P1/P2 incident resolution

Documentation

Follows runbooks; updates operational logs

Authors runbooks, architecture diagrams, post-mortems

Engagement model

On-site at assigned entity during deployment window; remote support thereafter

Centrally deployed or rotating across sites; remote escalation support

Detailed responsibilities

Responsibility area

L1 — Platform Operations Engineer

L2 — Senior DevOps / Cloud Engineer

DEPLOYMENT & PLATFORM OPERATIONS

Deploy Data Plane on customer-managed environments using provided Helm charts and values.yaml templates

Design and validate reference architecture for on-prem + cloud hybrid deployment

Install and configure on-prem discovery agent at each of the Sites

Author and maintain Helm chart configurations and values.yaml templates for all site profiles

Follow site-specific deployment runbooks authored by L2

Manage EKS / GKE / AKS cluster setup and baseline configuration

Validate successful deployment using defined health checks and smoke tests

Define environment-specific deployment runbooks for L1 execution

TROUBLESHOOTING & SUPPORT

First-line diagnosis using kubectl logs, describe, exec, and Helm release outputs

Root cause analysis across application, Kubernetes, networking, and cloud layers

Resolve known issues using L2-authored runbooks

Resolve connectivity, DNS, TLS, mTLS, IAM permission, and performance issues

Escalate to L2 within defined SLA for unresolved issues

Own P1/P2 incident resolution; interface directly with OEM OEM for product-level issues

Log all incidents and resolutions in the engagement tracker

Build post-mortem documentation and update runbooks after each resolution. He should have understanding of building connectors.(final connectors and API building can be asked to L3 level at OEM.)

CLOUD & INFRASTRUCTURE MANAGEMENT

Apply pre-defined IAM roles and VPC configurations under L2 guidance

Architect IAM roles, VPC networking, managed database, and object storage for each entity

Configure managed database connections and object storage access as per runbook

Ensure secure and scalable production deployment patterns across all sites

Validate infrastructure components post-deployment

Multi-cloud support across AWS / GCP / Azure as applicable to CLIENT entity landscape

AUTOMATION & RELIABILITY

Apply existing Terraform plans; execute IaC scripts as directed

Build and maintain repeatable Terraform / IaC deployment modules for all 50 entities

Operate monitoring dashboards; acknowledge and route alerts per SLA

Design monitoring, logging, and alerting strategy (Prometheus, ELK, Datadog, or CLIENT-standard tools)

Maintain operational logs and daily status reports

Define SLOs and operational runbooks for steady-state

Skills matrix

Skill area

L1 — Platform Operations Engineer

L2 — Senior DevOps / Cloud Engineer

MUST-HAVE SKILLS

Kubernetes

Pods, Deployments, Services, Ingress, ConfigMaps, Secrets — operate and maintain

Full cluster design; Operators, CRDs, HPA/VPA, network policies, advanced scheduling

Helm

Install, upgrade, configure values.yaml; read and interpret release outputs

Author charts; manage versioning, dependencies, and chart repositories

Cloud platform

Working knowledge of at least one: AWS / GCP / Azure — operate under guidance

Deep expertise in at least one; multi-cloud preferred; design IAM, VPC, storage, DB

Linux & containers

Linux CLI, Docker basics, container lifecycle management

Advanced Linux; container security hardening; image optimisation

Networking

DNS, ports, TLS, load balancers — understand and follow runbooks

Design and debug mTLS, private clusters, peering, hybrid connectivity, network policies

Troubleshooting

Follow runbooks; first-line triage using standard kubectl commands

Cross-layer root cause analysis; novel issue resolution; incident ownership

PREFERRED SKILLS

IaC (Terraform etc.)

Apply existing Terraform plans; understand state and plan output

Write and maintain Terraform modules; CloudFormation / ARM as applicable

Observability

Operate Prometheus dashboards, ELK, cloud logging; route alerts

Design full observability stack; define alert thresholds and SLOs

CI/CD

Awareness of pipeline stages; trigger deployments via pipeline

Design and maintain CI/CD pipelines for Helm chart deployments

Secret management

Apply pre-configured secret stores (Vault, AWS Secrets Manager)

Design secret management strategy; implement rotation and audit policies

Stateful workloads

Connect to managed databases per runbook; basic PV usage

Design DB connectivity patterns; manage migrations, persistent volumes, backup

GOOD TO HAVE

Advanced Kubernetes

Awareness of HPA/VPA concepts

Implement HPA/VPA, custom metrics autoscaling, cluster cost optimisation

SRE / Incident mgmt

Follow incident response runbook; update status page

Own incident management process; conduct post-mortems; define error budgets

Scripting

Read and execute Bash scripts

Write Bash/Python automation; build operational tooling

Advanced networking

—

Private cluster design, VPC peering, hybrid cloud connectivity

1.L1 Devops Engineer:

Location : Mumbai

Experience : 1-3Years

JD:

Key Responsibilities:

• Deploy and upgrade Java/Spring Boot services on Kubernetes clusters inside customer datacentres, using Helm with per-customer value sets.

• Manage the Kubernetes clusters themselves — installation and version upgrades, node lifecycle and capacity, control-plane and etcd health, certificate rotation, CNI, ingress and storage classes — both on clusters we build and on enterprise distributions the customer provides.

• Provision, tune and operate self-managed databases on Linux VMs — MySQL, PostgreSQL and MongoDB — including replication, backup, verified point-in-time restore, and version upgrades.

• Provision and operate the middleware layer on VMs — Redis (Sentinel), Apache Kafka and RabbitMQ — including clustering, authentication and capacity planning.

• Run OpenSearch as the centralised application log store: shard and heap sizing, index lifecycle and retention policies, cluster health.

• Automate the full infrastructure build with Ansible — reusable roles plus per-customer inventories, so the same automation installs the stack at every customer without being forked.

• Own day-2 Kubernetes operations: rollouts, probe and resource tuning, persistent storage, ingress and TLS, and diagnosis of pod, scheduling and networking failures.

• Troubleshoot production issues across the VM, network, Kubernetes and JVM boundaries — determine whether a fault is infrastructure or application, and drive root-cause analysis.

• Debug connectivity problems at the command line: routing, firewalls, DNS, MTU, TLS chains and certificate trust, packet capture.

• Manage certificates, truststores and private container registry (Harbor) content for restricted and air-gapped environments.

• Monitor the platform using Prometheus, Grafana and OpenSearch — define what gets alerted on, not only what gets dashboarded.

• Write Python and Shell automation for provisioning, health checks and routine operational tasks.

• Apply security and access hygiene appropriate to regulated customer environments — least privilege access, secret handling, network segmentation, audit readiness.

• Produce and maintain runbooks and handover documentation so a customer's own operations team can run what we install.

• Work directly with customer infrastructure, network and security teams during deployment and issue resolution, on-site where required.

• Collaborate with development and QA teams to plan and execute releases.

• Support periodic out-of-hours deployment and upgrade windows at customer sites