Infrastructure Automation Engineer

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

Infrastructure Automation Engineer (DevSecOps) – Azure, Kubernetes & Terraform

Experience: 6–9 years

Role Overview

We are seeking experienced and hands-on Senior Infrastructure Automation Engineers (DevSecOps) with strong proficiency in Azure and Kubernetes to design, provision, automate, secure, and support scalable multicloud infrastructure for enterprise workloads.

The role requires deep expertise in Infrastructure as Code with Terraform, container orchestration on Kubernetes, automated CI/CD pipeline engineering, Python-based infrastructure automation, and embedding security controls across the build, deploy, and run lifecycle, with a strong focus on reliability, compliance, cost-awareness, and delivery quality.

Key Responsibilities

• Design, provision, and manage scalable multicloud infrastructure with Azure as the primary platform and AWS as the secondary platform.
• Architect and operate production-grade Kubernetes clusters (AKS / EKS / self-managed) covering deployments, scaling, networking, ingress, secrets, RBAC, upgrades, and operational troubleshooting.
• Implement and govern Infrastructure as Code using Terraform — module design, remote state, workspaces, policy-as-code, and reusable platform components for repeatable, secure, and auditable deployments.
• Build, maintain, and optimize end-to-end CI/CD pipelines for application and infrastructure delivery, including build, test, scan, approval, and progressive deployment workflows.
• Develop Python-based automation, tooling, and operators to streamline provisioning, configuration, remediation, and day-2 operations across cloud platforms.
• Embed DevSecOps practices across the SDLC — SAST, DAST, SCA, container image scanning, IaC scanning, secrets management, and policy-as-code (OPA / Sentinel / Kyverno).
• Integrate cloud infrastructure with enterprise networking, IAM, security, monitoring, logging, and DevOps toolchains in line with enterprise standards.
• Monitor platform health, lead incident response, perform root cause analysis, and drive continuous service and reliability improvements.
• Ensure infrastructure is resilient, secure, compliant, cost-aware, and aligned with enterprise architecture, security baselines, and operational standards.