Track Manager (Tools & Automation)

Job Summary

The Automation SME is responsible for designing, standardizing, and governing Day 0 and Day 1 automation capabilities across hybrid, multi‑cloud, and sovereign cloud environments.
The role ensures that security, compliance, regional sovereignty, and operational resilience are embedded by design using Policy as Code and automation frameworks.

The SME acts as a technical authority, defining automation patterns, enforcing guardrails, and enabling platform and application teams to consume compliant automation at scale.

--- ## Key Responsibilities

1. Day 0 Automation – Platform & Environment Readiness

• Design and implement Day 0 automation for:

• Cloud account/subscription landing zones

• Network topologies and segmentation

• Identity foundations (IAM, RBAC, ABAC)

• Logging, monitoring, and audit enablement

• Embed security and compliance controls by default, eliminating post‑deployment hardening.

• Define region‑specific and sovereign cloud baselines, including:

• Approved regions and services

• Mandatory encryption and key management

• Data residency and locality enforcement

--- 2. Day 1 Automation – Workload Onboarding

• Build Day 1 automation for:

• Application and platform onboarding

• Secure infrastructure provisioning

• Kubernetes and container platform enablement

• Ensure all deployments comply with:

• Policy as Code validations

• Regional security mandates

• Sector‑specific compliance requirements

• Enable self‑service onboarding through approved, standardized automation frameworks.

--- 3.

Policy as Code & Guardrails:

Define and maintain Policy as Code for:

• Identity and access controls

• Network exposure and segmentation

• Encryption (at rest, in transit, key ownership)

• Tagging, metadata, and audit requirements

• Implement policy enforcement at:

• CI/CD pipeline level

• Infrastructure provisioning stage

• Kubernetes admission control

• Ensure policies are version‑controlled, testable, traceable, and auditable.

--- 4. Security Automation (Region‑Wise & Sovereign Cloud)

• Design automation that enforces region‑specific security controls, such as:

• Geo-fencing and region allow‑listing

• Country‑specific encryption and key custody

• Regulatory logging and retention policies

• Enable sovereign cloud requirements including:

• Restricted service usage

• Customer‑managed or HSM‑backed keys

Skill Requirements

null

Other Requirements

null