Senior Platform Engineer - AWS

Who are we?

Smarsh empowers its customers to manage risk and unleash intelligence in their digital communications. Our growing community of over 6500 organizations in regulated industries counts on Smarsh every day to help them spot compliance, legal or reputational risks in 80+ communication channels before those risks become regulatory fines or headlines.  Relentless innovation has fueled our journey to consistent leadership recognition from analysts like Gartner and Forrester, and our sustained, aggressive growth has landed Smarsh in the annual Inc. 5000 list of fastest-growing American companies since 2008.

About the Role: 

We're seeking an experienced Platform Engineer to design, build, and operate secure, scalable hybrid cloud network infrastructure on AWS. You'll work across platform, security, and infrastructure teams to deliver highly available cloud connectivity solutions, focusing on automation, reliability, and operational excellence.

Required Qualifications Bachelor's in Computer Science/Engineering or equivalent professional experience

6-8 years in platform engineering, SRE, or cloud engineering with strong AWS networking focus

AWS Advanced Networking – Specialty Certification or equivalent hands-on expertise with VPCs, subnets, Transit Gateways, Route 53, Direct Connect, and VPNs

Strong system design and troubleshooting skills

Hands-on experience architecting hybrid on-premises ↔ AWS connectivity

Hands-on firewall operations experience (AWS Network Firewall, NACLs, Security Groups, WAF in production environments)

Core Responsibilities Platform Architecture (40%)

Design and implement secure, scalable AWS network architectures (VPCs, subnets, routing, multi-tenant isolation)

Architect hybrid connectivity solutions using Direct Connect, VPNs, Transit Gateways

Design and implement firewall strategies: Network ACLs, Security Groups, AWS Network Firewall, and WAF rules aligned with security best practices

Advanced understanding of NACLs, Security Groups, WAF, and AWS Network Firewall

Implement Route 53, DHCP, AWS PrivateLink , and DNS/IPAM solutions

Design high-availability and disaster recovery network architectures

Create and maintain network architecture diagrams and SOPs

Collaborate with Infosec team to design network architectures that align with threat models and security controls

Participate in security incident response involving network systems

Infrastructure Automation (40%)

Develop and maintain Terraform modules for AWS infrastructure with security guardrails embedded (e.g., encryption at rest/transit, least-privilege IAM policies, NACLs, Security Groups)

Partner with Infosec to establish and enforce Terraform coding standards and security controls

Build environment aware Terraform modules for reusability

Implement GitOps workflows and promote infrastructure changes across dev/staging/prod

Automate firewall rule provisioning and updates; implement drift detection for security controls

Automate operational tasks using Python and shell scripting

Manage backup and recovery procedures

Implement CI/CD integration for infrastructure deployments

Operations & Observability (20%)

Audit, maintain, and troubleshoot firewall rules and security controls (NACLs, Security Groups, Network Firewall, WAF) including rule optimization, change management, incident response, and compliance reviews

Design and implement monitoring/alerting using DataDog , Prometheus and AWS CloudWatch

Analyze VPC Flow Logs and AWS networking metrics for performance optimization

Lead troubleshooting of complex network and platform issues

Participate in on-call rotation

Maintain runbooks and operational documentation

Mandatory Skills AWS Networking & Firewall Operations : VPC, peering, subnets, Transit Gateways, Route 53, Direct Connect, VPNs, NACLs, Security Groups, AWS Network Firewall, WAF , AWS PrivateLink, IPAM

Firewall Rule Management : Writing, debugging, and maintaining network ACLs and Security Groups at scale; understanding of stateful vs. stateless filtering AWS Services: EC2, RDS, ECS/EKS, Lambda, IAM, CloudFormation, S3

Infrastructure as Code: Terraform (primary); CloudFormation exposure

Programming: Python + Bash/Shell scripting

Linux fundamentals and networking (TCP/IP, routing, DNS)

On-call operational support

Preferred Qualifications AWS Advanced Networking – Specialty Certification

Kubernetes / service mesh networking experience (Istio, Envoy)

Multi-account AWS organization management

CI/CD platform experience (GitLab CI, GitHub Actions, Jenkins)

Monitoring/observability tools: Prometheus, ELK stack

Compliance frameworks: SOC 2, ISO 2700

About our culture

Smarsh hires lifelong learners with a passion for innovating with purpose, humility and humor. Collaboration is at the heart of everything we do. We work closely with the most popular communications platforms and the world’s leading cloud infrastructure platforms. We use the latest in AI/ML technology to help our customers break new ground at scale. We are a global organization that values diversity, and we believe that providing opportunities for everyone to be their authentic self is key to our success. Smarsh leadership, culture, and commitment to developing our people have all garnered Comparably.com Best Places to Work Awards. Come join us and find out what the best work of your career looks like.