DevOps Engineer

Kaufman Rossin Professional Services Private Limited’s (the “Company”) offices are located in the World Trade Center (WTC) in Bangalore, Karnataka, India, and at Udyog Vihar, in Gurgaon, Haryana, India. As one of the top accounting firms in the US, our foundation is “people first”.

• Build and maintain Azure DevOps YAML pipelines for WES suite, AI apps, and M365 workloads
• Build GitHub Actions pipelines for AWS workloads during migration transition
• Implement DevSecOps in every pipeline — SAST/DAST, dependency scanning, container image scanning, secrets detection
• Enforce branching strategies, PR policies, and code review gates in Azure Repos and GitHub
• Provision and manage Azure infrastructure using Bicep and/or Terraform — AKS, Container Apps, App Services, Functions, API Management, VNets, NSGs
• Deploy and orchestrate containerized workloads using Docker and Kubernetes (AKS)
• Configure Azure Monitor, Log Analytics, Application Insights, Prometheus, Grafana, and alerting
• Support the AWS-to-Azure migration — assess workloads, map to Azure equivalents, execute runbooks
• Manage existing AWS infrastructure — EC2, RDS, Lambda, S3, ECS, CloudWatch, IAM, VPC
• Maintain AWS IaC using Terraform until decommission
• Coordinate workload cutover activities — DNS transitions, data sync validation, traffic shifting
• Own FinOps practice across Azure and AWS — tagging, cost allocation, budget alerts, monthly reporting
• Conduct rightsizing reviews — over-provisioned VMs, idle resources, orphaned disks
• Manage Reserved Instances, Savings Plans, and Spot instance strategies
• Produce monthly FinOps reports with spend analysis and savings recommendations
• Implement Defender for Cloud, Sentinel, Azure Security Center, and AWS Security Hub controls
• Administer Linux/Unix systems — configuration, patching, hardening, and performance tuning
• Apply automation and scripting (Python, Bash, PowerShell) to eliminate manual toil

• 3–5 years hands-on DevOps / cloud engineering experience
• Azure IaC — Bicep/Terraform, AKS/Container Apps, Azure networking, RBAC, Azure Monitor, Key Vault
• AWS infrastructure — EC2, RDS, Lambda, S3, ECS, VPC, IAM, CloudWatch, Terraform
• CI/CD with DevSecOps — SAST, DAST, vulnerability scanning, secrets detection
• Containerization — Docker, Kubernetes (AKS), Helm
• FinOps — cost allocation, rightsizing, reserved instances across Azure and AWS
• Automation & scripting — Python, Bash, and/or PowerShell
• OS administration — strong Linux/Unix working knowledge
• AZ-400, AZ-104, AWS SA, or FinOps certifications preferred
• Excellent written and spoken English for stakeholder communication, technical documentation, and vendor interactions

• Work-Life Balance
• People First Company
• Hybrid work policy
• Working directly with peers in the US