{"id":3235105,"url":"https://alion.io/job/sarvagram-platform-architect-cloudnative","title":"Platform Architect - Cloudnative","company":{"id":95951,"name":"SarvaGram","domain":"sarvagram.com","url":"https://alion.io/company/sarvagram","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":51000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Docker","optional":false},{"name":"FinOps","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Istio","optional":false},{"name":"Jenkins","optional":false},{"name":"Kong","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linkerd","optional":false},{"name":"LLM","optional":false},{"name":"n8n","optional":false},{"name":"OpenAI","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Python","optional":false},{"name":"Service Mesh","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-25T10:35:30Z","employer_posted_date":null,"last_verified_at":"2026-10-25T10:35:30Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"The Cloud-Native Platform Architect is the hands-on technical authority for SarvaGram's platform engineering function. You design and build, not just advise. You own the IAM/RBAC SDK that every squad uses for authentication. You design the AI SDK integration layer that allows lending engineers to call LLM APIs safely and consistently. You establish the infrastructure-as-code standards, the DevSecOps pipeline, and the observability framework that makes the squads faster without accumulating security debt. This is a platform-first identity role. You do not think of yourself as an infrastructure engineer who happens to write Terraform - you think of yourself as a platform engineer who builds the surfaces that product squads use. The distinction matters: your output is developer experience, not just uptime.\n\nThe core responsibilities for the job include the following:\n\nPlatform Engineering - SDK and Shared Services: \nDesign and build the IAM/RBAC SDK - the authentication and authorization layer that every squad integrates with.\nDesign and build the AI SDK integration layer - a consistent, secure interface for squads to call LLM APIs (Claude, OpenAI) with rate limiting, cost tracking, fallback handling, and PII guardrails built in.\nOwn and evolve the API gateway configuration - routing rules, rate limiting, authentication enforcement, and observability instrumentation for all service-to-service and external API traffic.\nDefine and maintain the shared platform services catalogue - what your squad provides as a platform capability (logging, tracing, feature flags, config management) versus what squads build themselves.\nEstablish platform engineering standards and contribute to ADRs - documenting platform design decisions with context and rationale for the twelve squads that depend on these surfaces.\n\nInfrastructure as Code and Cloud Architecture: \nOwn SarvaGram's AWS architecture - VPC design, subnet segmentation, security groups, IAM roles, and the overall cloud topology that supports multi-environment (dev, staging, and production) deployments.\nBuild and maintain a Terraform module library - reusable, versioned IaC modules that squads can use to provision their own resources consistently without requiring Atlas involvement for every change.\nDesign the environment promotion strategy - how code moves from development through staging to production with appropriate gates, approvals, and rollback capabilities.\nOwn RDS, ElastiCache, SQS, SNS, and S3 configuration standards - how databases are provisioned, backed up, and scaled; how message queues are configured for reliability and observability.\nDesign disaster recovery and business continuity architecture - RTO and RPO targets defined, tested, and documented for an RBI-regulated financial institution.\n\nDevSecOps and Security by Design: \nBuild CI/CD pipelines that embed security scanning (SAST, SCA, container vulnerability scanning) as non-negotiable gates - not optional bolt-ons that slow delivery.\nOwn secrets management architecture - how API keys, database credentials, and certificates are stored, rotated, and accessed across twelve squads without creating single points of compromise.\nImplement infrastructure compliance scanning - AWS Config rules, Security Hub findings, and automated remediation for common misconfigurations.\nWork with the CISO on application-layer security architecture - providing the infrastructure and SDK components that enforce the security policies.\nEstablish the shift-left security culture on the platform side - every new infrastructure component is reviewed for security implications before deployment.\n\nObservability and Platform Reliability: \nDesign and implement the observability stack - distributed tracing (OpenTelemetry), structured logging, and metrics collectionthat gives twelve squads visibility into their services without each building their own.\nDefine SLOs and SLAs for platform services - what reliability guarantees Phoenix and Atlas make to product squads, how they are measured, and what happens when they are breached.\nBuild the on-call runbook library - documented incident response procedures for platform components that any engineer can follow at 2am without needing the Architect on the phone.\nOwn the cost optimisation program - AWS cost visibility, rightsizing recommendations, reserved instance strategy, and FinOps practices appropriate for a growth-stage NBFC.\n\nAI-Native Platform Practice: \nPioneer AI-augmented platform engineering - use Claude for Terraform module generation, CI/CD pipeline configuration, runbook drafting, and infrastructure ADR authoring.\nDesign the automation integration - how n8n workflows and AppSmith dashboards connect to platform infrastructure APIs safely and with appropriate access controls.\nLead the Platform Guild - fortnightly sessions on cloud architecture, DevSecOps practices, and AI-augmented infrastructure engineering for DevOps engineers across Atlas.\nConsult with the Lending Platform Architect on infrastructure implications of lending domain designs - API gateway configuration, database topology, and observability requirements for lending services.\n\nRequirements: \n12 to 14 years in software/infrastructure engineering with at least 4 years in a platform or cloud architecture role - hands-on AWS experience is mandatory, not advisory.\nHas designed and built shared platform services that other engineering teams consumed - IAM libraries, observability frameworks, or deployment platforms; understands that developer experience is a product.\nHas built DevSecOps pipelines with embedded security scanning, not bolted-on audits - knows the difference between security theater and shift-left practice.\nActive AI tool user for infrastructure work - uses Claude or equivalent to generate Terraform, write runbooks, and explore architecture trade-offs today.\nFintech or regulated industry experience is a meaningful plus - understands that RBI compliance and data localization constraints affect infrastructure decisions.\n\nMindset and Soft Skills: \nPlatform-first identity: thinks 'how do I make 10+ squads faster and safer? ' ' not 'how do I keep the servers running? \"'.\nBuilder by default: reaches for code before PowerPoint - designs are expressed in Terraform, Go, and YAML, not just diagrams.\nSecurity by design: treats security as a platform feature, not a review gate - every new service has IAM, logging, and secrets management built in from day one.\nAI-native operator: uses Claude daily for IaC generation, runbook drafting, and architecture exploration - models this practice for the DevOps engineers in Atlas.\nDomain curiosity: Lending domain curiosity: interested in understanding why the lending platform makes the architecture demands it does - not just executing infrastructure tickets.\n\nTechnical Skills: \nAWS Platform - Mandatory.\nVPC / subnet / security group design and IAM / RBAC architecture.\nEKS / ECS container orchestration and RDS / ElastiCache / SQS / S3\nTerraform / IaC and AWS Config / Security Hub and CloudWatch / X-Ray / Open Telemetry.\n\nPlatform Engineering - Core: \nSDK design and development and API gateway (Kong / AWS API GW).\nCI/CD pipeline design (GitHub Actions / Jenkins) and Secrets management (Vault / AWS Secrets Manager).\nService mesh (Istio / Linkerd) and Docker / Kubernetes and Python / Go for platform tooling.\n\nDevSecOps - Core: \nSAST / SCA integration and Container security scanning.\nShift-left security practice and Compliance-as-code.\nDevSecOps pipeline design and Incident response runbooks.\n\nAI Native - Core Expectation: \nClaude / LLM API integration architecture and AI SDK design patterns.\nAI-augmented IaC generation and Prompt engineering for infrastructure tooling.\nSkills\nAWS, DevSecOps, IaC, Infrastructure as Code, Terraform","description_format":"text","description_chars":7793,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Personal Finance Apps & Education"],"lifecycle":[{"event":"open","at":"2026-10-25T10:35:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":45,"reasons":["seen:2","win:early"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/sarvagram-platform-architect-cloudnative","json_url":"https://alion.io/job/sarvagram-platform-architect-cloudnative.json","meta":{"generated_at":"2026-10-28T07:41:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9829,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":95951},"rest":"https://alion.io/mcp/rest/get_company?id=95951"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsarvagram-platform-architect-cloudnative"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsarvagram-platform-architect-cloudnative"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsarvagram-platform-architect-cloudnative"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sarvagram-platform-architect-cloudnative\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsarvagram-platform-architect-cloudnative"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3235105}},{"tool":"search_jobs","arguments":{"company":"sarvagram.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3235105},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}