DevOps Engineer (AWS, Kubernetes) — Thales · Noida

About the role

Mid / senior DevOps engineer for Thales's defence, aerospace and cybersecurity engineering hub in Noida — AWS, EKS, Terraform, GitLab CI, full DevSecOps. 4-9 years, hybrid, INR 18-32 LPA band.

About this role and the team at Thales Group. Mid / senior DevOps engineer for Thales's defence, aerospace and cybersecurity engineering hub in Noida — AWS, EKS, Terraform, GitLab CI, full DevSecOps. 4-9 years, hybrid, INR 18-32 LPA band. This listing on cloudsoftsol.com is curated for engineers in India who are actively interviewing for senior cloud and DevOps roles. The role is permanent / full-time, hybrid, and the salary band reflects market rates in Noida as of mid-2026. If you are seeking a multi-year career platform rather than a stop-gap, this listing rewards depth — read the responsibilities and requirements below carefully and tailor your application to the specifics. Cloudsoft Solutions runs the leading AWS, Azure, GCP, DevOps, Citrix and VMware training and placement programmes in Hyderabad and Bangalore — if you would like coaching for this exact role, mock interviews, resume review or salary-negotiation help, please contact us at info@cloudsoftsol.com. We do not charge candidates a fee for placement assistance; companies sponsor our involvement.

Responsibilities

Build and operate AWS-based development and integration environments for Thales's defence, aerospace and cybersecurity product lines — VPC, EKS, S3, KMS, IAM, RDS Aurora and Step Functions, all provisioned through Terraform modules in a Thales-internal registry. Design and run CI/CD pipelines on GitLab CI and (legacy) Jenkins, with reusable templates, image-signing via cosign, SBOM generation (CycloneDX) and signed-artefact promotion through environments. Operate production EKS clusters with hardened baselines: Pod Security standards, NetworkPolicy, OPA / Kyverno admission policies, IRSA for workload IAM, and AWS GuardDuty + Security Hub centralised in a delegated administrator account. Lead DevSecOps adoption: SAST (SonarQube), DAST (OWASP ZAP), software composition analysis, IaC scanning (Checkov, tfsec), secret-scanning, and image scanning (Trivy / Grype) — all gating in pipelines for higher environments. Provision and maintain observability via Prometheus + Grafana for metrics, Elastic Stack for logs, and Jaeger / Tempo for distributed tracing. Define SLOs jointly with product teams and review them quarterly. Drive operational excellence: capacity planning, runbook automation via Ansible, blameless post-incident reviews, and a rolling chaos-engineering programme on the integration environments. Support the Indian engineering teams' contribution into global Thales product lines through clean documentation, structured handovers and active participation in cross-site architecture review boards. Continuously improve cost-efficiency: instance rightsizing, Spot adoption for non-production, Savings Plans for production, and image / volume cleanup automation.

Requirements & qualifications

4-9 years of DevOps / Platform Engineering experience, including 2+ years on AWS and 2+ years on production Kubernetes (EKS preferred). Strong Terraform; comfortable across at least two AWS accounts with separate state and remote backends. Production CI/CD in GitLab CI or Jenkins; reusable templates and security-gating in pipelines. Hands-on Linux administration, Bash and Python at automation-quality level. DevSecOps fluency — at least one of SAST, DAST, SCA, IaC scanning, image scanning, or secret-scanning practitioner-level experience. Working knowledge of observability stacks (Prometheus, Grafana, Elastic / OpenSearch). Familiarity with regulated or security-sensitive industries (defence, aerospace, BFSI, healthcare) is a strong plus. B.Tech / B.E. / M.Tech in Computer Science or equivalent. Cloud certifications (AWS, CKA / CKAD) preferred.

Why this role in 2026

Thales operates one of the most respected engineering organisations in defence and cybersecurity globally. The Noida engineering centre contributes to flagship product lines used by governments and Fortune-500 enterprises — meaning the engineering rigor (security review, change-control, testing depth) is genuinely higher than the typical Indian services shop.

Application tips

Apply via the Thales global careers portal — the requisition number is R0297745. The recruitment process is structured and can take 3-5 weeks end-to-end; chase via the recruiter directly if you have not heard back after 7 working days. Reference any clearance-relevant work prominently if applicable.

Interview preparation

Five rounds: recruiter, technical screen on AWS + Kubernetes + DevSecOps fundamentals, hands-on technical loop (Terraform module review + a CI pipeline-design exercise), system design (design a hardened multi-environment AWS landing zone) and a hiring-manager + values round.

Career growth

Track: Senior DevOps Engineer → Lead → Architect → Engineering Manager. Lateral mobility into the Cybersecurity Products and Cloud Protection & Licensing business units (the higher-margin parts of Thales) is structured and accessible from the Noida hub.

Company & benefits

INR 18-32 LPA fixed plus 10-15% bonus. Thales group medical for self + family + parents. Sponsored cloud and security certifications. Hybrid 3 days office. 26+ days leave. Group personal accident, life and disability cover. Subsidised meals on-campus.