Senior Engineer - Cloud & Infrastructure DevSecOps

Role Overview

As a Cloud & Infrastructure Security Engineer, you will be the hands-on engineer for TYLsemi’s cloud, network edge, security and compliance work. You will work closely with the Head of Cloud & Security to turn requirements into working systems: secure cloud setups, firewall and DLP policies, audit-ready controls, and DR/BCP plans. These include the security and compliance requirements of our foundry partner. You will also act as the internal backup for services moving over from our managed service partner, so you can run and support them yourself. This role suits an engineer who enjoys building, automating and owning results.

What You’ll Do

• Build and operate AWS infrastructure (VPC, IAM, EC2, S3, networking) and other cloud , on-prem using infrastructure as code tools. Implement foundry partner and customer security requirements and keep evidence ready for internal and external audits.
• Configure and maintain edge network security: firewalls, VPN, DLP and web filtering. Harden systems, manage vulnerability scanning and patch compliance, and follow up on findings until they are fixed.
• Manage IAM and least-privilege access across cloud, Entra ID and engineering environments.
• Implement and test backup, disaster recovery and business continuity plans.
• Run secure, logged data movement between sites, cloud and partners.
• Support change and downtime schedules: prepare changes, run them in approved windows and record outcomes.
• Track cloud costs, find savings and support budget reporting.
• Act as backup for support tower. Learn , document and run SOPs.
• Serve as second-level escalation for Linux, SLURM and engineering environment issues when needed.
• Document architecture, runbooks and procedures, and take part in on-call.

What We’re Looking For

• 5-8 years in cloud, infrastructure or security engineering, with real hands-on work. Strong hands-on AWS experience. Azure is a plus.
• Production experience with Terraform and infrastructure as code.
• Hands-on with firewalls (Palo Alto, Fortinet or similar), VPN and network security. Good knowledge of Linux administration and scripting (Bash, Python).
• Working knowledge of security frameworks and audits, such as ISO 27001, SOC 2 or NIST.
• Able to take high-level direction and deliver it on your own. Clear documentation and communication skills.

Good to Have

• Experience in semiconductor, EDA or HPC environments with sensitive IP.
• Experience with DLP, SIEM or EDR tools. DevSecOps practices: CI/CD security and secrets management.
• FinOps experience (AWS Cost Explorer, budgets, rightsizing). Data center planning or provisioning experience.
• Certifications such as AWS Solutions Architect / Security Specialty.

Success in This Role Looks Like

• Foundry partner and audit requirements put in place on schedule with no major findings.
• Cloud and network setups are documented, codified in Terraform and repeatable.
• DR/BCP plans tested and proven to work. Services from the managed partner can be run in-house without outages. Cloud costs visible, tracked and reduced where possible.
• Recognized as the go-to hands-on engineer who takes Manager's direction and delivers.

Location Office/Hybrid – Bengaluru, India