The Role
Owns the design, deployment, and evolution of an Azure-based container platform for a SaaS product. Responsibilities include AKS architecture, Kubernetes operations, CI/CD and GitOps, infrastructure as code, networking, scalability, disaster recovery, high availability, observability, security, and cloud cost optimization. The role establishes platform standards, leads migration to AKS, conducts architecture reviews, defines reliability practices, and serves as a technical escalation point for platform engineering.
Summary Generated by Built In
Job Description: Senior Cloud Platform Engineer
L3 / Senior | 5–8 Years Experience | Architecture & Design
Job Title
Senior Cloud Platform Engineer
Level
L3 — Senior
Department
Platform Engineering
Reporting To
Cloud Platform Architect
Collaborates With
Principal Architect, Product Heads, DevOps, Security
Experience
5–8 years (3+ years in cloud-native / Azure architecture)
Employment Type
Full-time
Location
Kolkata
ABOUT THE ROLE
The Senior Cloud Platform Engineer is the primary owner of the modern application platform for the Ginesys One retail SaaS suite. The core mandate is to design, build, and continuously evolve a container-native platform on Azure — making it scalable, stable, and manageable at SaaS scale. This role leads AKS adoption across Ginesys One product services, drives CI/CD maturity, and works closely with the Cloud Platform Architect to ensure the platform aligns with the Well-Architected Framework. It serves as the primary technical escalation point for platform engineering decisions.
CORE RESPONSIBILITIES
1. AKS & Modern Application Platform
• Own the design, deployment, and evolution of Azure Kubernetes Service (AKS) as the primary hosting platform for Ginesys One product services.
• Assess containerisation readiness of individual product services; define and drive the migration path from IaaS to AKS.
• Design cluster topology for SaaS scale — multi-tenancy, node pools, namespaces, resource quotas, and auto-scaling policies (HPA / VPA / KEDA).
• Architect for platform stability — define pod disruption budgets, liveness/readiness probes, graceful drain, and upgrade strategies.
• Design for manageability — standardise Helm chart structures, config management, and environment promotion across dev/staging/prod.
• Collaborate with product engineering teams to align container and service design with platform capabilities.
• Work with the Security team to baseline AKS security — RBAC, network policies, pod security standards, and image scanning policies.
2. CI/CD & DevOps Engineering
• Design and own the CI/CD pipeline architecture for all Ginesys One product services running on the platform.
• Establish pipeline standards — build, test, security scan, image publish, and deployment stages using Azure DevOps or GitHub Actions.
• Implement GitOps practices for AKS workload delivery; evaluate and adopt tooling such as Flux or ArgoCD.
• Define environment promotion gates — automated quality, compliance, and rollback triggers between dev, staging, and production.
• Drive IaC adoption using Terraform or Bicep for all platform infrastructure; enforce version control and peer-review discipline.
• Establish release management standards — versioning, changelogs, blue-green and canary deployment patterns.
3. Scalability, Stability & Platform Architecture
• Collaborate with the Cloud Platform Architect and Principal Architect on platform roadmap and architecture decisions.
• Design for horizontal and vertical scalability — workload-aware auto-scaling, cluster auto-provisioner, and burst capacity strategies.
• Conduct architecture reviews and produce Architecture Decision Records (ADRs) for significant platform changes.
• Evaluate new Azure and CNCF ecosystem capabilities; recommend adoption where they improve scalability, stability, or manageability.
• Contribute to Well-Architected Framework reviews — with focus on Reliability, Operational Excellence, and Performance Efficiency.
4. Networking Optimisation — Placement & Grouping
• Design and optimise VNet topology — hub-spoke architecture, peering, and segmentation for AKS and supporting services.
• Define subnet placement strategy aligned to workload classification (prod, non-prod, data, app, management).
• Evaluate and implement private endpoints, service endpoints, and DNS private zones for PaaS services.
• Optimise egress paths, NAT gateway usage, and bandwidth cost.
• Review NSG rule sets for operational efficiency and correctness; coordinate with the Security team for hardening.
5. Disaster Recovery & High Availability
• Define RTO/RPO targets per product tier in alignment with business requirements.
• Design and document DR architecture — geo-redundancy, backup strategy, failover procedures.
• Implement and periodically test HA configurations for critical workloads (DB clusters, AKS, app tiers).
• Establish and validate runbooks for partial, complete, and degraded-performance outage scenarios.
6. Cost Estimation, Budgeting & Optimisation
• Produce Azure cost models for new architectures and migration scenarios using Azure Pricing Calculator and Retail Prices API.
• Conduct monthly cost reviews; identify and act on rightsizing, reserved instance, and savings plan opportunities.
• Define cost allocation tagging taxonomy and governance; ensure 100% tag compliance.
• Present cost vs. architecture trade-offs to stakeholders for informed decision-making.
SKILLS & QUALIFICATIONS
Area : AKS / Containers
AKS design and operations; Docker; Helm; Kubernetes networking, scaling, upgrades (MUST HAVE)
Area: CI/CD & DevOps
Azure DevOps or GitHub Actions; GitOps (Flux / ArgoCD); release management; Jenkins
Area: IaC
Terraform or Bicep — production-grade, version-controlled infrastructure (MUST HAVE)
Area: Cloud Platform
Azure — advanced IaaS/PaaS, architecture patterns, landing zones
Area: Networking
Hub-spoke VNet design, NSG, DNS, private endpoints, routing concepts
Area: DR / HA
Azure Site Recovery, geo-redundancy, backup design, RTO/RPO modelling
Area: Multi-cloud
AWS / GCP architecture awareness — strong added advantage
Area: OS / Infra
Windows Server & Linux — working knowledge; not a primary focus
Area: WAF / Security
Well-Architected Framework; Defender for Cloud, RBAC, WAF — knowledge is a plus
Area: Observability
Azure Monitor, Log Analytics, Prometheus, Grafana, APM — knowledge is a plus
CERTIFICATIONS
• AZ-104 + AZ-305: Required (Solutions Architect Expert strongly preferred).
• CKA / CKAD (Kubernetes): Preferred.
• AZ-400 (DevOps Engineer): Preferred.
• AZ-700 (Network Engineer): Preferred.
• AZ-500 (Security Engineer): Good to have.
• AWS Solutions Architect Associate / GCP Professional Cloud Architect — significant advantage.
BEHAVIOURAL COMPETENCIES
• Systems thinking — sees platform-wide implications of individual design choices.
• Collaborative by default — designs are shaped with teams, not handed to them.
• Bias for documentation — decisions, trade-offs, and designs are written down.
• Cost-aware engineering — considers financial impact as a first-class design constraint.
• Mentorship — actively raises the technical bar of the L1/L2 operations team.
• Vendor-neutral judgement — selects the right tool, not the familiar one.
Skills Required
- 5-8 years of professional experience, including at least 3 years in cloud-native or Azure architecture
- Advanced Azure IaaS/PaaS architecture experience and knowledge of landing zones
- Production AKS design and operations experience
- Docker and Kubernetes experience, including networking, scaling, and upgrades
- Helm experience
- Azure DevOps or GitHub Actions experience
- GitOps experience with Flux or ArgoCD
- Release management experience
- Jenkins experience
- Production-grade Terraform or Bicep infrastructure as code experience
- Hub-spoke VNet design, NSGs, DNS, private endpoints, and routing knowledge
- Azure Site Recovery, geo-redundancy, backup design, and RTO/RPO modeling experience
- Working knowledge of Windows Server and Linux
- AZ-104 and AZ-305 certifications
- CKA or CKAD certification
- AZ-400 certification
- AZ-700 certification
- AZ-500 certification
- AWS or GCP architecture awareness
- Solutions Architect Expert certification
- Well-Architected Framework, Defender for Cloud, RBAC, and WAF knowledge
- Azure Monitor, Log Analytics, Prometheus, Grafana, and APM knowledge
- AWS Solutions Architect Associate or GCP Professional Cloud Architect certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Ginesys One is the leading omnichannel suite of complete solutions for the entire retail value chain. Our cloud-based Ecommerce Order Management System, POS, ERP, BI, and GST software simplifies retail operations, enabling retailers to manage inventory, sales, and accounting seamlessly. With over 1200 customers and 50,000+ users across various verticals of retail, including apparel, footwear, fabrics, consumer durables, FMCG, departmental stores, supermarkets, and furnishings, we have established ourselves as experts in the retail space. Our pan-India presence includes offices in Gurgaon, Kolkata, Mumbai, Hyderabad, Goa, and Bangalore. Visit our website to learn more about how Ginesys One can transform your retail operations
