AWS GCP Cloud Engineer AVP

AWS GCP Cloud Engineer AVP Location(s):

Pune, Maharashtra, India

Hybrid

Working at Citi is far more than just a job. A career with us means joining a team of approximately 219,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Job Description:
Public Cloud SME (RDS, Database, Automation Network, IAM & Terraform )

Experience Level: 7+ Years
Location: Pune Team: DBaaS Platform Engineering

Role Overview

We are seeking a highly experienced and motivated Public Cloud Subject Matter Expert (SME) specializing in Cloud Networking, IAM, and Database Technologies to join our DBaaS Platform Engineering team. In this role, you will serve as the technical authority driving the automation, security, and architecture of our database infrastructure across AWS and GCP environments.

You will design and implement secure VPC architectures, establish robust IAM frameworks, and automate the lifecycle of critical database platforms—including MongoDB Atlas, SQL Server on AWS, RDS,oracle elastic Cache , and Aurora
—using Terraform as your primary tool. While this role is infrastructure-focused, you will collaborate with portal developers to integrate these automated cloud capabilities into our self-service DBaaS platform.

Key Responsibilities

• Infrastructure as Code (IaC): Architect, develop, and maintain enterprise-grade Terraform configurations to automate the provisioning, scaling, and management of cloud resources across AWS and GCP.
• Cloud Networking & Security: Design and implement secure, high-performance VPC architectures, routing, firewalls, transit gateways, and hybrid connectivity solutions. Serve as the SME for public cloud network design.
• Identity & Access Management (IAM): Define and enforce robust cloud security postures by designing fine-grained IAM policies, roles, service accounts, and least-privilege access controls across AWS and GCP.
• Database Platform Automation: Automate the deployment, configuration, and operations of key database technologies, specifically:
  • MongoDB Atlas (multi-cloud deployments and integrations)
  • SQL Server on AWS (EC2-based deployments, clustering, and licensing optimization)
  • AWS RDS & Aurora (PostgreSQL/MySQL engines, high availability, and performance tuning)
• Automation & Scripting: Develop robust automation scripts (using Python or Bash) to integrate cloud infrastructure with monitoring, backup, and configuration management systems.
• Operational Excellence: Provide tier-3 engineering support for complex cloud networking, IAM, and database infrastructure issues.

Required Qualifications

• Experience: 7+ years of relevant experience in Cloud Engineering, Dev Ops, or Database Infrastructure Engineering within a large-scale enterprise environment.
• Cloud Platforms: Deep, hands-on SME-level expertise in both AWS and GCP
  .
• Infrastructure as Code: Expert-level proficiency with Terraform
  , including modular design, state management, and CI/CD integration.
• Networking & Security: Advanced knowledge of VPC design
  , subnetting, routing, security groups, network ACLs, and cloud security best practices.
• IAM Expertise: Proven experience designing and managing complex IAM policies, cross-account access, and identity federation.
• Database Technologies: Hands-on experience deploying, managing, and automating:
  • MongoDB Atlas
  • SQL Server on AWS
  • AWS RDS and Aurora
• Scripting: Strong proficiency in Python or Bash for cloud automation and API integration.
• Educational Background: Bachelor’s degree in Computer Science, Engineering, or a related technical field.

Preferred Qualifications (Secondary Skills)

• Full Stack Development: Familiarity with full-stack development concepts, including back-end services (
  Java
  ) and front-end frameworks (
  AngularJS
  , Angular, React) to support portal integration.
• API Integration: Experience building or consuming RESTful APIs to connect infrastructure automation with self-service portals.
• Containerization: Experience with Docker and container orchestration platforms like Kubernetes (EKS/GKE) or Open Shift.
• CI/CD Tools: Proficiency with Jenkins, Git Lab CI, or…