Staff Platform Engineer

🕒 June 11

🇮🇳 India – Remote

⏰ Full Time

🔴 Lead

🏗️ Platform Engineer

👻 Ghost score 35%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

First American (India)

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1994

🛡️ Insurance

💼 Consulting

🏥 Healthcare

💰 $450M Post-IPO Debt - First American on 2024-09

Insurance • Consulting • Healthcare

First American (India) is a Global Capability Center (GCC) of First American Financial Corporation that provides software development, data & analytics, back-office, and knowledge-processing services to support title insurance, settlement services, mortgage solutions and related risk-management operations across the US, UK, Australia and Canada. With locations in Bangalore, Hyderabad and Salem, FAI delivers corporate IT and production services for its parent company and emphasizes a people-first culture recognized as a top workplace.

📋 Description

• Serve as technical lead for First American’s enterprise AWS platform powering application modernization • Define strategy and reference architectures across AWS and Azure • Lead complex networking, security, identity, observability, centralized root account management, Config, and GuardDuty designs • Guide multiple squads building a secure, compliant, self-service platform • Own end-to-end AWS platform architecture and roadmap, including Organizations, OU model, Control Tower, account vending, identity, network, security, observability, and cost • Partner with Azure Platform Engineering on landing zones, management groups, subscription vending, identity, networking, security, observability, and cost governance • Set and enforce security-by-default, IaC-only, least-privilege, and defense-in-depth platform principles • Lead AWS and Azure hub-and-spoke networking, connectivity, DNS, routing, Palo Alto inspection, and centralized endpoints • Define and govern AWS SCPs, IAM policies, permission boundaries, Azure Policy, deny assignments, RBAC, policy-as-code, exceptions, and Well-Architected reviews • Own AWS root account management and Azure break-glass controls with monitoring, auditing, and privileged-access governance • Define AWS Config, GuardDuty, Security Hub, Defender for Cloud, and unified security-posture architectures with remediation and operational response • Direct AWS and Azure identity architectures, including federation, RBAC, PIM/JIT, managed identities, workload roles, and OIDC • Own AWS and Azure observability architectures and log aggregation pipelines into Splunk/Elastic • Partner with InfoSec on posture management, controls, SLAs, and drift remediation using AWS, Azure, Prisma Cloud, and Qualys • Drive shared multi-cloud guardrails and standards across AWS, Azure, and GCP • Define modernization paths for EKS, ECS, RDS, AKS, Container Apps, Azure SQL, and data services • Champion AI-assisted engineering and agentic automation using Claude and Cursor • Lead Terraform IaC migration, module standards, and GitHub/Spacelift pipeline governance • Prioritize platform capabilities, roadmap trade-offs, measurable value, and application-team adoption • Mentor senior and mid-level engineers through design reviews, pairing, and career guidance • Collaborate across AWS, Azure, GCP, Blueprint and Modules, and DNA Enablement teams • Communicate with engineering, InfoSec, operations, and leadership; represent the platform in architecture councils, CAB, and executive updates

🎯 Requirements

• 12+ years in platform/cloud engineering, including 6+ years on AWS at enterprise scale • Proven multicloud exposure with hands-on Azure platform engineering in regulated environments • Expert Terraform knowledge, including modules and workspaces • IaC governance, policy-as-code/OPA, and CI/CD experience with GitHub; Spacelift OIDC federation, policies, and stacks preferred • Deep AWS networking experience: VPC design, Transit Gateway, centralized VPC endpoints, routing, load balancing, and centralized inspection • Solid Azure networking experience: VNet design, Azure Virtual WAN, Private Link/Private Endpoints, routing, load balancing, and centralized inspection • Strong AWS security engineering: SCPs, IAM least-privilege/deny patterns, centralized root account management, AWS Config, GuardDuty, Security Hub, KMS/CMEK, Secrets Manager, and enterprise secrets integrations • Strong Azure security engineering: Azure Policy, deny assignments, RBAC least-privilege, Defender for Cloud, Key Vault/CMEK, and enterprise secrets integrations • AWS identity experience with Entra ID federation via IAM Identity Center, group-based RBAC, JIT/PIM concepts, and OIDC for CI/CD and Kubernetes (IRSA) • Azure identity experience with Entra ID federation, group-based RBAC, PIM/JIT access, managed identities, OIDC for CI/CD, and AKS workload identity • AWS observability experience with CloudTrail, CloudWatch, log streaming pipelines, Splunk/Elastic design, and cost optimization • Azure observability experience with Activity Log, Diagnostic Settings, Azure Monitor, log streaming pipelines, Splunk/Elastic design, and cost optimization • Hands-on experience with AWS Control Tower, AVM, Organizations, and AWS Well-Architected Framework • Hands-on experience with Azure Management Groups, subscription vending/Enterprise Scale landing zones, and Azure Well-Architected Framework • Track record of shaping platform roadmaps around application-team needs, adoption, and measurable outcomes • Excellent communication, accountability, and ownership of complex initiatives end to end • Ability to mentor and grow engineers and collaborate across Platform Engineering and partner teams • Leadership experience in roadmaps, cross-BU influence, vendor management, risk trade-offs, and executive communication • Spacelift knowledge or hands-on experience preferred • Cloudflare Zero Trust/Tunnels, WAF/DDoS, and Palo Alto VM-Series design experience advantageous • CloudFormation, Bicep/ARM, GitHub Actions federation, or GCP platform familiarity advantageous

🏖️ Benefits

• Remote work arrangement • Equal Opportunity Employer commitment • Inclusive, diverse, and supportive workplace culture