Senior Cloud Devops Engineer

JOB TITLE: Senior Cloud Devops Engineer
EXPERIENCE: 5–10 Years
Approved Date
REPORTS TO: Shivendra Ashish
Revised Dates
POSITIONS SUPERVISED:
Role Summary
We are looking for a Senior Cloud SecOps Engineer who thrives in a high-scale, multi-tenant environment. In this role, you will act as the bridge between Cloud Operations and Security Engineering. You will not just manage infrastructure; you will build the automated systems that allow us to securely onboard, monitor, and patch dozens of client environments simultaneously. Your goal is to deliver "Security-as-a-Service" efficiently, ensuring that a security issue in one tenant is detected and isolated instantly.
Core Responsibilities
Multi-Tenant Operations: Manage and secure cloud infrastructure across diverse client environments (AWS, Azure, GCP), ensuring strict data isolation and network segregation.
Automated Onboarding: Build "Zero-Touch" pipelines using Infrastructure as Code (IaC) to provision security baselines (SIEM forwarders, Scanners, IAM roles) for new customers in minutes.
Fleet Management: Design strategies to patch and update security agents across hundreds of servers/endpoints without causing downtime for clients.
Centralized Observability: Maintain the central "Single Pane of Glass" platform that aggregates alerts and health metrics from all customer tenants into our SOC.
Incident Response Support: Act as the Tier-3 escalation point for the SOC, investigating complex cloud infrastructure attacks or misconfigurations.
Must-Have Skills
Cloud Agnostic: Deep hands-on experience with at least two major cloud providers (AWS / Azure / GCP) and their native security tools (GuardDuty, Sentinel, Security Hub).
Infrastructure as Code: Expert in writing modular templates (e.g., Terraform, CloudFormation) that can be reused across different clients with variable inputs.
Container Security: Strong knowledge of Kubernetes operations, including securing clusters, managing namespaces for isolation, and enforcing policies.
DevSecOps Scripting: Proficiency in Python or Go to automate cross-account tasks (e.g., "Rotate access keys for these 50 client accounts").
Compliance Ops: Understanding of how to implement technical controls for standards like SOC2, ISO 27001, or HIPAA in a cloud environment.
Preferred / Nice To Have
MSP Experience: Prior experience working at a Managed Service Provider or handling multi-customer setups (e.g., using Azure Lighthouse).
Policy-as-Code: Experience with tools like OPA (Open Policy Agent) or Checkov to prevent misconfigurations before deployment.
Certifications: Certified Kubernetes Security Specialist (CKS), AWS Security Specialty, or Azure Security Engineer.
Ability to embrace Clearwater's CLEAR core values (Commitment to Client Success, Lead with Accountability, Integrity & Collaboration, Excellence in All That We Do, Advance Colleague Success, Respect & Transparency) and culture.
Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues in the role. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed.
Clearwater is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Clearwater/Redspin’s Recruiting team if you need any assistance completing any forms or to otherwise participating in the application process.
Mental/Physical Requirements: Fast paced environment handling multiple demands. Must be able to exercise appropriate judgment as necessary. Requires a high level of initiative and independence. Excellent written and oral communication skills required. Requires the ability to use a personal computer for extended periods of time.

Work arrangement
No