Position: Team Lead – Infrastructure Engineering

Department: Infrastructure & Security Operations (Infra & SecOps)

Location: Kochi, Kerala - Work from office

Role Summary

Softobiz is establishing a centralized Infrastructure & SecOps function to move project delivery streams away from manual cloud configurations toward a modern, self-service Infrastructure-as-a-Product model. As Team Lead – Infrastructure Engineering, you will lead this transformation on the ground by authoring production-grade Terraform golden modules, establishing automated CI/CD provisioning pipelines, and embedding ISO 27001 compliance guardrails. Operating in a hands-on player-coach capacity from our Kochi office, you will directly build scalable multi-cloud infrastructure while mentoring platform engineers and shaping our core engineering baselines.

Key Responsibilities

Infrastructure Architecture & Golden Modules

Design, build, and maintain reusable Terraform golden modules across AWS and Azure for core infrastructure patterns, including VPC/networking, compute, Kubernetes (EKS/AKS), databases, IAM, and storage.
Define and enforce enterprise governance baselines across AWS Organizations and Azure Management Groups, including standardized resource naming, landing zone architecture, and mandatory tagging structures.
Write and maintain thorough, developer-friendly technical documentation and runbooks for every infrastructure module and pipeline stage to ensure seamless adoption by project teams.

CI/CD Provisioning & Shift-Left Security

Own the end-to-end provisioning pipeline by combining golden modules, automated security scanning, and policy gates into unified CI/CD workflows (GitLab CI, Azure DevOps, or GitHub Actions).
Embed security controls and guardrails directly into pipelines using static code analysis (tfsec, Checkov), Policy-as-Code frameworks (OPA, Sentinel), and secrets management to ensure resources are secure by default.
Partner with Cloud Security Engineers and the CISO's office to align infrastructure controls with ISO 27001:2022 Annex A requirements and maintain versioned, audit-ready compliance trails.
Review infrastructure change requests and pull requests submitted by engineering teams to enforce standards around security, modularity, and cloud cost optimization before production deployment.

Team Leadership & Capability Building

Build and scale the Infrastructure team as a founding member, initially operating in a player-coach capacity (0–2 direct reports) and expanding as organizational demands grow.
Mentor platform and DevOps engineers, establish engineering best practices, lead sprint planning, conduct code reviews, and act as an escalation lead for infrastructure operational issues.

Required Technical Skills

Domain

Skills & Technologies

Must / Preferred

Infrastructure as Code (IaC)	Terraform (modular design, state management, module registries)	Must-Have
Cloud Platforms	AWS (VPC, IAM, EKS, RDS, CloudTrail) and Microsoft Azure (VNets, AKS, Management Groups, Key Vault)	Must-Have
Cloud Platforms	Google Cloud Platform (GCP)	Good-to-have
Containers & Orchestration	Kubernetes architecture, EKS, AKS, Docker containerization	Must-Have
CI/CD & Automation	GitLab CI, GitHub Actions, or Azure DevOps pipelines	Must-Have
Policy as Code & Security Scanning	tfsec, Checkov, Open Policy Agent (OPA), HashiCorp Sentinel, Trivy	Must-Have
Security & Compliance	ISO 27001:2022 Annex A controls implementation, Secrets Management (Vault/Key Vault)	Must-Have
Scripting & Tooling	Bash, Python, or Go for automation scripting	Preferred

Qualifications & Certifications

Education: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field (or equivalent practical experience).
Experience: 8–11 years of hands-on experience in Systems, Cloud, and Infrastructure Engineering, with at least 2+ years leading engineers, designing landing zones, or architecting multi-cloud foundations.
Compliance Exposure: Demonstrated experience implementing and maintaining infrastructure environments aligned to formal frameworks (ISO 27001, SOC 2, or NIST).

Preferred Certifications:

HashiCorp Certified: Terraform Associate
AWS Certified Solutions Architect – Professional or DevOps Engineer – Professional
Microsoft Certified: Azure Solutions Architect Expert or DevOps Engineer Expert

Soft Skills & Cultural Fit

Strong Ownership & Builder Mindset: Proven ability to build greenfield infrastructure processes and operate independently in an evolving, high-growth environment.
Cross-Functional Communication: Exceptional ability to translate complex cloud governance, security, and infrastructure concepts to application teams, delivery managers, and executive stakeholders.
Mentorship & Leadership: Passion for coaching team members, conducting constructive pull request reviews, and fostering a culture of operational excellence.
Cross-Timezone Collaboration: Ability to collaborate seamlessly across distributed global teams spanning India, the US, and Australia.

What We Offer

Strategic Impact: Greenfield opportunity to architect and shape the core multi-cloud infrastructure and security standards across the entire enterprise.
Global Exposure: Work alongside enterprise clients and cross-functional engineering teams across India, Australia, and the US.
Leadership Trajectory: Direct pathway to grow and lead a dedicated Infrastructure & Platform Engineering team.
Continuous Learning: Comprehensive support for advanced cloud architecture, security, and IaC certifications.