Architect, Cloud Site Reliability (SRE)

Icertis

13h

About The Position

The CloudOps team is responsible for availability, reliability, disaster recovery, performance, monitoring, emergency response, and capacity planning for Icertis SaaS applications and related services. The team also handles infrastructure and access provisioning, upgrades, deployments, and change management to accelerate time to market. It contributes to the company's cloud strategy and drives architectural improvements that increase scalability and optimize costs. The Architect, Cloud Site Reliability (SRE) leads large-scale cloud and infrastructure initiatives across Azure, AWS, and GCP, from proof of concept through production rollout and operational handover. The role provides technical leadership for mission-critical, 24x7 multi-cloud environments, with a focus on resilience, security, performance, observability, automation, incident prevention, and cost optimization. It also works with internal and external customers and cloud providers to resolve technical challenges and improve services.

Requirements

12 to 15+ years of experience in mission-critical, 24x7 Cloud Operations/SRE teams within B2B/B2C SaaS organizations.
Experience designing and implementing large-scale solutions across Azure (primarily), AWS, and GCP.
Proven experience leading large teams in complex, fast-changing, 24x7 environments.
Strong customer focus, analytical and communication skills, and the ability to build relationships, meet SLAs and deadlines, and deliver results under pressure.
Ability to simplify complex technical issues, develop innovative solutions or workarounds, and operate effectively in agile, constantly changing environments.
Strong systems and network architecture expertise across Linux/Windows, SQL databases, compute, storage, and cloud networking.
Hands-on Windows and Linux administration and troubleshooting across compute, memory, storage, processes, services, networking, and kernel/system issues.
Working knowledge of Windows and Linux, SQL database and network administration, including TCP/IP, DNS, routing, SSH, firewalls, certificates, permissions, and system hardening.
Experience managing systems at scale, including patching, vulnerability remediation, OS upgrades, configuration management, and performance optimization.
Strong scripting and automation skills using PowerShell, Bash/Shell, or Python.
Strong hands-on experience designing, deploying, administering, upgrading, and troubleshooting large-scale production AKS/Kubernetes environments.
Strong Linux administration skills across Ubuntu/RHEL and container environments.
Hands-on experience with Docker, container images, Dockerfiles, container registries (ACR), and container security.
Strong Kubernetes knowledge covering workloads, Services, Ingress, ConfigMaps, Secrets, StatefulSets, DaemonSets, Jobs/CronJobs, Namespaces, scheduling, probes, PDBs, HPA, and Cluster Autoscaler.
Strong AKS networking and security expertise, including Azure CNI, IP/subnet planning, Network Policies, NSGs, UDRs, Load Balancers, DNS, ingress/egress, private clusters, RBAC, Azure RBAC, Managed Identity, and Workload Identity.
Experience with AKS node pools, VM sizing, availability zones, workload placement, autoscaling, capacity planning, and resource requests/limits.
Strong experience with AKS monitoring and troubleshooting using Azure Monitor, Log Analytics, and Datadog.
Experience designing highly available, self-healing, scalable, secure, zero-downtime, and disaster-recovery solutions for mission-critical AKS workloads.

Responsibilities

Architect and lead large-scale cloud and infrastructure projects focused on scalability, performance, reliability, availability, security, and cost optimization across Azure, AWS, and GCP.
Drive initiatives end-to-end from proof of concept to production, including technical evaluation, architecture, implementation, rollout, and operational handover.
Lead project delivery and execution, managing technical scope, milestones, dependencies, risks, and collaboration across Product Engineering, SRE, Security, and other stakeholders.
Provide technical leadership for 24x7 mission-critical multi-cloud environments, ensuring operational stability, resilience, and continuous improvement.
Drive observability, telemetry, automation, self-healing, and proactive incident prevention to improve platform reliability and reduce production issues.
Evaluate and adopt cloud-native technologies and modern architectures to improve scalability, agility, performance, and infrastructure efficiency.
Design and implement cloud security and data protection solutions, including encryption at rest and in transit, Azure Key Vault, Customer-Managed Keys (CMK), Bring Your Own Key (BYOK), key rotation, certificate management, and encryption capabilities across Azure services.
Lead application and infrastructure performance analysis and drive end-to-end cloud cost optimization and FinOps best practices.
Partner with Microsoft, Amazon, and Google to evaluate new technologies, optimize cloud services, resolve technical challenges, and drive innovation.
Work with internal and external customers on performance, reliability, security, troubleshooting, root-cause analysis, and resolution of critical technical issues.
Drive knowledge management and continuous improvement.