Senior DevOps Engineer

Job description

About Sitero Sitero is a leading clinical research organization (CRO) delivering technology-enabled solutions for the life sciences industry. Our platform portfolio — spanning CTMS, EDC, RTSM, eConsent, Site Payments, and our AI Platform (Ash) — supports the full clinical trial lifecycle for sponsors, CROs, and research sites worldwide. We operate at the intersection of healthcare compliance and modern engineering, running production workloads on both Microsoft Azure and Amazon Web Services (AWS) with a strong emphasis on reliability, security, and regulatory integrity (SOC 2, 21 CFR Part 11, GxP, HIPAA, GDPR). Role Overview We are looking for a Senior DevOps Engineer to join Sitero's Platform & Infrastructure team. In this role you will own the CI/CD pipelines, multi-cloud infrastructure (Azure and AWS), observability stack, and release engineering processes that underpin six mission-critical SaaS products. You will work closely with application engineers, the Head of Architecture, and product teams to drive automation, reliability, and security at scale across both cloud platforms. This is a high-impact, hands-on role with a clear path to Staff Engineer or Engineering Lead. Key Responsibilities CI/CD & Release Engineering Design, build, and maintain end-to-end CI/CD pipelines using GitLab CI/CD for multiple product teams across Azure and AWS. Implement GitOps workflows, trunk-based development practices, and automated deployment gates. Own release branching strategy, versioning, and artefact management using GitLab Package Registry and Container Registry. Drive zero-downtime deployment patterns (blue-green, canary, rolling) across staging and production environments on both clouds. Cloud Infrastructure (Azure & AWS) Provision and manage infrastructure on both Azure and AWS using Infrastructure-as-Code — Terraform as the primary tool; Bicep/ARM for Azure-specific resources and CloudFormation/CDK for AWS-specific needs. Azure: manage AKS, Azure SQL, Service Bus, Key Vault, App Service, Azure Monitor, and Azure AD. AWS: manage EKS/ECS, RDS, SQS/SNS, Secrets Manager, Lambda, CloudWatch, and IAM. Optimise multi-cloud resource utilisation and contribute to FinOps practices — reservation planning, Savings Plans, PAYG analysis, cost tagging, and monthly spend reviews across both platforms. Manage multi-region disaster recovery (DR) architecture across Sitero's product suite spanning Azure and AWS. Containerisation & Orchestration Own Kubernetes cluster operations on both AKS (Azure) and EKS/ECS (AWS): node pool management, Helm chart authoring, RBAC, network policies, and version upgrades. Maintain container image registries (Azure Container Registry, Amazon ECR), base image hygiene, and vulnerability scanning pipelines. Implement horizontal pod autoscaling (HPA), cluster autoscaler, and resource quota policies across clusters. Observability & Incident Management Build and maintain centralised monitoring, alerting, and dashboarding using Azure Monitor / Application Insights and AWS CloudWatch / X-Ray, unified through Grafana or a similar aggregation layer. Define SLOs/SLAs and create runbooks for common failure modes across both cloud environments. Lead blameless post-incident reviews and drive systemic reliability improvements. Participate in an on-call rotation for production incidents. Security & Compliance Implement DevSecOps practices: SAST, DAST, SCA, and secrets scanning integrated into pipelines across both cloud environments. Maintain compliance posture for SOC 2, 21 CFR Part 11, GxP, HIPAA, and GDPR controls. Manage identity and access: Azure AD / Entra ID, AWS IAM, Managed Identities, and secrets vaults (Key Vault, Secrets Manager). Support internal and external audit activities, providing evidence artefacts as required. Developer Productivity & Platform Engineering Champion internal developer platform (IDP) initiatives — self-service templates, golden paths, and environment provisioning automation across Azure and AWS. Reduce toil through scripting, automation, and toolchain integrations. Mentor junior DevOps engineers and conduct technical design reviews. Collaborate with Head of Architecture on multi-cloud strategy, cost governance, and technical roadmap. Required Qualifications Experience & Education 5 – 8 years of hands-on DevOps / Site Reliability Engineering / Platform Engineering experience. Bachelor's or Master's degree in Computer Science, Information Technology, or a related field (or equivalent experience). Demonstrable production experience on both Microsoft Azure and Amazon Web Services. Technical Skills Azure (AKS, Azure SQL, Service Bus, Key Vault, App Service, Azure Monitor) + AWS (EKS/ECS, RDS, SQS/SNS, Secrets Manager, CloudWatch, Lambda); Terraform (primary), Bicep/ARM, CloudFormation/CDK: Cloud & IaC GitLab CI/CD (pipelines, runners, environments, GitLab Package & Container Registry); GitOps tooling (ArgoCD / Flux a plus): CI/CD Docker, Kubernetes (AKS + EKS/ECS); Helm, Kustomize: Containers & Orchestration Python, Bash, and/or PowerShell: Scripting & Automation Azure Monitor, Application Insights, AWS CloudWatch, X-Ray, Prometheus, Grafana: Observability SAST/DAST tools (SonarQube, OWASP ZAP, Trivy or equivalents); Azure AD / Entra ID, AWS IAM: Security Azure SQL, AWS RDS (PostgreSQL/MySQL); backup and failover automation: Databases VNets, AWS VPC, NSGs/Security Groups, Private Endpoints, DNS, TLS/certificate management: Networking Preferred Qualifications Experience in a regulated industry — life sciences, healthcare, or fintech — with SOC 2 / 21 CFR Part 11 / GxP exposure. Familiarity with clinical trial technology platforms (CTMS, EDC, RTSM, or eClinical SaaS). Cloud certifications on both platforms: Azure (AZ-104, AZ-400, AZ-305) and/or AWS (SAA-C03, DVA-C02, SysOps). Hands-on experience with service mesh technologies (Istio, Linkerd) on managed Kubernetes. Exposure to AI/ML workload infrastructure — GPU node pools, model serving, vector databases. Experience with Datadog, New Relic, or similar third-party unified observability platforms. Contributions to open-source DevOps tooling or active GitHub presence. Behavioural Competencies Ownership mindset — takes end-to-end accountability for systems and outcomes across both cloud platforms. Collaborative — bridges the gap between development, QA, security, and operations teams. Compliance-conscious — understands the gravity of regulated software environments and acts accordingly. Data-driven — uses metrics and observability data to prioritise improvements. Continuous learner — keeps pace with evolving Azure and AWS services, DevOps tooling, and industry best practices. What We Offer Competitive compensation benchmarked against market rates, including performance-linked variable pay. Hybrid work model with flexibility between our Bengaluru office and remote work. Hands-on exposure to a true multi-cloud environment (Azure + AWS) supporting six distinct regulated SaaS platforms. Access to Anthropic Claude Enterprise AI tools for productivity and development acceleration. Learning & development budget including cloud certifications (Azure + AWS), conferences, and professional courses. Collaborative engineering culture with blameless post-mortems, architecture guilds, and internal tech talks. Health insurance and employee wellness programmes.