Buscar Empregos Remotos

Staff Platform Engineer

🕒 Junho 11

🇮🇳 Índia – Remoto

⏰ Tempo Integral

🔴 Especialista

🏗️ Engenheiro de Plataforma

🗣️🇺🇸🇬🇧 Inglês obrigatório

De onde vem esta vaga

Publicada na página de carreiras da First American (India), não em um site de vagas

Vista pela primeira vez pelo Remote Rocketship Junho 11

Ainda aberta no site da First American (India). Verificada 7 horas atrás.

Logo of First American (India)

First American (India)

1001 - 5000 funcionários

Fundada em 1994

🛡️ Seguros

💼 Consultoria

🏥 Saúde

💰 $450.000.000 Post-IPO Debt - First American em 2024-09

Insurance • Consulting • Healthcare

A First American (India) é um Centro de Capacitação Global (GCC) da First American Financial Corporation que oferece serviços de desenvolvimento de software, dados e análises, back office e processamento de conhecimento para apoiar operações de seguro de título, serviços de regularização, soluções de hipoteca e gerenciamento de riscos relacionados nos EUA, Reino Unido, Austrália e Canadá. Com localidades em Bangalore, Hyderabad e Salem, a FAI oferece serviços corporativos de TI e produção para sua empresa-mãe e enfatiza uma cultura centrada nas pessoas, reconhecida como um dos melhores locais para trabalhar.

Descrição

• Serve as technical lead for First American’s enterprise AWS platform powering application modernization • Define strategy and reference architectures across AWS and Azure • Lead complex networking, security, identity, observability, centralized root account management, Config, and GuardDuty designs • Guide multiple squads building a secure, compliant, self-service platform • Own end-to-end AWS platform architecture and roadmap, including Organizations, OU model, Control Tower, account vending, identity, network, security, observability, and cost • Partner with Azure Platform Engineering on landing zones, management groups, subscription vending, identity, networking, security, observability, and cost governance • Set and enforce security-by-default, IaC-only, least-privilege, and defense-in-depth platform principles • Lead AWS and Azure hub-and-spoke networking, connectivity, DNS, routing, Palo Alto inspection, and centralized endpoints • Define and govern AWS SCPs, IAM policies, permission boundaries, Azure Policy, deny assignments, RBAC, policy-as-code, exceptions, and Well-Architected reviews • Own AWS root account management and Azure break-glass controls with monitoring, auditing, and privileged-access governance • Define AWS Config, GuardDuty, Security Hub, Defender for Cloud, and unified security-posture architectures with remediation and operational response • Direct AWS and Azure identity architectures, including federation, RBAC, PIM/JIT, managed identities, workload roles, and OIDC • Own AWS and Azure observability architectures and log aggregation pipelines into Splunk/Elastic • Partner with InfoSec on posture management, controls, SLAs, and drift remediation using AWS, Azure, Prisma Cloud, and Qualys • Drive shared multi-cloud guardrails and standards across AWS, Azure, and GCP • Define modernization paths for EKS, ECS, RDS, AKS, Container Apps, Azure SQL, and data services • Champion AI-assisted engineering and agentic automation using Claude and Cursor • Lead Terraform IaC migration, module standards, and GitHub/Spacelift pipeline governance • Prioritize platform capabilities, roadmap trade-offs, measurable value, and application-team adoption • Mentor senior and mid-level engineers through design reviews, pairing, and career guidance • Collaborate across AWS, Azure, GCP, Blueprint and Modules, and DNA Enablement teams • Communicate with engineering, InfoSec, operations, and leadership; represent the platform in architecture councils, CAB, and executive updates

🎯 Requisitos

• 12+ years in platform/cloud engineering, including 6+ years on AWS at enterprise scale • Proven multicloud exposure with hands-on Azure platform engineering in regulated environments • Expert Terraform knowledge, including modules and workspaces • IaC governance, policy-as-code/OPA, and CI/CD experience with GitHub; Spacelift OIDC federation, policies, and stacks preferred • Deep AWS networking experience: VPC design, Transit Gateway, centralized VPC endpoints, routing, load balancing, and centralized inspection • Solid Azure networking experience: VNet design, Azure Virtual WAN, Private Link/Private Endpoints, routing, load balancing, and centralized inspection • Strong AWS security engineering: SCPs, IAM least-privilege/deny patterns, centralized root account management, AWS Config, GuardDuty, Security Hub, KMS/CMEK, Secrets Manager, and enterprise secrets integrations • Strong Azure security engineering: Azure Policy, deny assignments, RBAC least-privilege, Defender for Cloud, Key Vault/CMEK, and enterprise secrets integrations • AWS identity experience with Entra ID federation via IAM Identity Center, group-based RBAC, JIT/PIM concepts, and OIDC for CI/CD and Kubernetes (IRSA) • Azure identity experience with Entra ID federation, group-based RBAC, PIM/JIT access, managed identities, OIDC for CI/CD, and AKS workload identity • AWS observability experience with CloudTrail, CloudWatch, log streaming pipelines, Splunk/Elastic design, and cost optimization • Azure observability experience with Activity Log, Diagnostic Settings, Azure Monitor, log streaming pipelines, Splunk/Elastic design, and cost optimization • Hands-on experience with AWS Control Tower, AVM, Organizations, and AWS Well-Architected Framework • Hands-on experience with Azure Management Groups, subscription vending/Enterprise Scale landing zones, and Azure Well-Architected Framework • Track record of shaping platform roadmaps around application-team needs, adoption, and measurable outcomes • Excellent communication, accountability, and ownership of complex initiatives end to end • Ability to mentor and grow engineers and collaborate across Platform Engineering and partner teams • Leadership experience in roadmaps, cross-BU influence, vendor management, risk trade-offs, and executive communication • Spacelift knowledge or hands-on experience preferred • Cloudflare Zero Trust/Tunnels, WAF/DDoS, and Palo Alto VM-Series design experience advantageous • CloudFormation, Bicep/ARM, GitHub Actions federation, or GCP platform familiarity advantageous

🏖️ Benefícios

• Remote work arrangement • Equal Opportunity Employer commitment • Inclusive, diverse, and supportive workplace culture

Candidatar-se

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Desenvolvido por Lior Neu-ner. Adoraria receber seu feedback — entre em contato por DM ou pelo e-mail support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok