Job Description: Public Cloud SME (RDS, Database, Automation Network, IAM & Terraform )
Experience Level: 7+ Years
Location: Pune Team: DBaaS Platform Engineering
Role Overview
We are seeking a highly experienced and motivated Public Cloud Subject Matter Expert (SME) specializing in Cloud Networking, IAM, and Database Technologies to join our DBaaS Platform Engineering team. In this role, you will serve as the technical authority driving the automation, security, and architecture of our database infrastructure across AWS and GCP environments.
You will design and implement secure VPC architectures, establish robust IAM frameworks, and automate the lifecycle of critical database platforms—including MongoDB Atlas, SQL Server on AWS, RDS,oracle elastic Cache , and Aurora—using Terraform as your primary tool. While this role is infrastructure-focused, you will collaborate with portal developers to integrate these automated cloud capabilities into our self-service DBaaS platform.
Key Responsibilities
- Infrastructure as Code (IaC): Architect, develop, and maintain enterprise-grade Terraform configurations to automate the provisioning, scaling, and management of cloud resources across AWS and GCP.
- Cloud Networking & Security: Design and implement secure, high-performance VPC architectures, routing, firewalls, transit gateways, and hybrid connectivity solutions. Serve as the SME for public cloud network design.
- Identity & Access Management (IAM): Define and enforce robust cloud security postures by designing fine-grained IAM policies, roles, service accounts, and least-privilege access controls across AWS and GCP.
- Database Platform Automation: Automate the deployment, configuration, and operations of key database technologies, specifically:
- MongoDB Atlas (multi-cloud deployments and integrations)
- SQL Server on AWS (EC2-based deployments, clustering, and licensing optimization)
- AWS RDS & Aurora (PostgreSQL/MySQL engines, high availability, and performance tuning)
- Automation & Scripting: Develop robust automation scripts (using Python or Bash) to integrate cloud infrastructure with monitoring, backup, and configuration management systems.
- Operational Excellence: Provide tier-3 engineering support for complex cloud networking, IAM, and database infrastructure issues.
Required Qualifications
- Experience: 7+ years of relevant experience in Cloud Engineering, DevOps, or Database Infrastructure Engineering within a large-scale enterprise environment.
- Cloud Platforms: Deep, hands-on SME-level expertise in both AWS and GCP.
- Infrastructure as Code: Expert-level proficiency with Terraform, including modular design, state management, and CI/CD integration.
- Networking & Security: Advanced knowledge of VPC design, subnetting, routing, security groups, network ACLs, and cloud security best practices.
- IAM Expertise: Proven experience designing and managing complex IAM policies, cross-account access, and identity federation.
- Database Technologies: Hands-on experience deploying, managing, and automating:
- MongoDB Atlas
- SQL Server on AWS
- AWS RDS and Aurora
- Scripting: Strong proficiency in Python or Bash for cloud automation and API integration.
- Educational Background: Bachelor’s degree in Computer Science, Engineering, or a related technical field.
Preferred Qualifications (Secondary Skills)
- Full Stack Development: Familiarity with full-stack development concepts, including back-end services (Java) and front-end frameworks (AngularJS, Angular, React) to support portal integration.
- API Integration: Experience building or consuming RESTful APIs to connect infrastructure automation with self-service portals.
- Containerization: Experience with Docker and container orchestration platforms like Kubernetes (EKS/GKE) or OpenShift.
- CI/CD Tools: Proficiency with Jenkins, GitLab CI, or similar CI/CD tools.
- Financial Services Experience: Previous experience working in a highly regulated, large-scale financial enterprise.
- Agile Methodologies: Experience working in an Agile/Scrum development environment.
------------------------------------------------------
Job Family Group:
Technology
------------------------------------------------------
Job Family:
Systems & Engineering
------------------------------------------------------
Time Type:
Full time
------------------------------------------------------
Most Relevant Skills
Please see the requirements listed above.
------------------------------------------------------
Other Relevant Skills
For complementary skills, please see above and/or contact the recruiter.
------------------------------------------------------
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.
