Smarsh→
Senior Platform Engineer - AWS at Smarsh in Bengaluru, Karnataka, IN
Skills
Job Description
Who are we?
Smarsh empowers its customers to manage risk and unleash intelligence in their digital communications. Our growing community of over 6500 organizations in regulated industries counts on Smarsh every day to help them spot compliance, legal or reputational risks in 80+ communication channels before those risks become regulatory fines or headlines. Relentless innovation has fueled our journey to consistent leadership recognition from analysts like Gartner and Forrester, and our sustained, aggressive growth has landed Smarsh in the annual Inc. 5000 list of fastest-growing American companies since 2008.
About the Role:
We're seeking an experienced Platform Engineer to design, build, and operate secure, scalable hybrid cloud network infrastructure on AWS. You'll work across platform, security, and infrastructure teams to deliver highly available cloud connectivity solutions, focusing on automation, reliability, and operational excellence.
Required Qualifications
Bachelor's in Computer Science/Engineering or equivalent professional experience
6-8 years in platform engineering, SRE, or cloud engineering with strong AWS networking focus
AWS Advanced Networking – Specialty Certification or equivalent hands-on expertise with VPCs, subnets, Transit Gateways, Route 53, Direct Connect, and VPNs
Strong system design and troubleshooting skills
Hands-on experience architecting hybrid on-premises ↔ AWS connectivity
Hands-on firewall operations experience (AWS Network Firewall, NACLs, Security Groups, WAF in production environments)
Core Responsibilities
Platform Architecture (40%)
Design and implement secure, scalable AWS network architectures (VPCs, subnets, routing, multi-tenant isolation)
Architect hybrid connectivity solutions using Direct Connect, VPNs, Transit Gateways
Design and implement firewall strategies: Network ACLs, Security Groups, AWS Network Firewall, and WAF rules aligned with security best practices
Advanced understanding of NACLs, Security Groups, WAF, and AWS Network Firewall
Implement Route 53, DHCP, AWS PrivateLink, and DNS/IPAM solutions
Design high-availability and disaster recovery network architectures
Create and maintain network architecture diagrams and SOPs
Collaborate with Infosec team to design network architectures that align with threat models and security controls
Participate in security incident response involving network systems
Infrastructure Automation (40%)
Develop and maintain Terraform modules for AWS infrastructure with security guardrails embedded (e.g., encryption at rest/transit, least-privilege IAM policies, NACLs, Security Groups)
Partner with Infosec to establish and enforce Terraform coding standards and security controls
Build environment aware Terraform modules for reusability
Implement GitOps workflows and promote infrastructure changes across dev/staging/prod
Automate firewall rule provisioning and updates; implement drift detection for security controls
Automate operational tasks using Python and shell scripting
Manage backup and recovery procedures
Implement CI/CD integration for infrastructure deployments
Operations & Observability (20%)
Audit, maintain, and troubleshoot firewall rules and security controls (NACLs, Security Groups, Network Firewall, WAF) including rule optimization, change management, incident response, and compliance reviews
Design and implement monitoring/alerting using DataDog, Prometheus and AWS CloudWatch
Analyze VPC Flow Logs and AWS networking metrics for performance optimization
Lead troubleshooting of complex network and platform issues
Participate in on-call rotation
Maintain runbooks and operational documentation
Mandatory Skills
AWS Networking & Firewall Operations: VPC, peering, subnets, Transit Gateways, Route 53, Direct Connect, VPNs, NACLs, Security Groups, AWS Network Firewall, WAF, AWS PrivateLink, IPAM
Firewall Rule Management: Writing, debugging, and maintaining network ACLs and Security Groups at scale; understanding of stateful vs. stateless filtering AWS Services: EC2, RDS, ECS/EKS, Lambda, IAM, CloudFormation, S3
Infrastructure as Code: Terraform (primary); CloudFormation exposure
Programming: Python + Bash/Shell scripting
Linux fundamentals and networking (TCP/IP, routing, DNS)
On-call operational support
Preferred Qualifications
AWS Advanced Networking – Specialty Certification
Kubernetes / service mesh networking experience (Istio, Envoy)
Multi-account AWS organization management
CI/CD platform experience (GitLab CI, GitHub Actions, Jenkins)
Monitoring/observability tools: Prometheus, ELK stack
Compliance frameworks: SOC 2, ISO 2700
About our culture
Smarsh hires lifelong learners with a passion for innovating with purpose, humility and humor. Collaboration is at the heart of everything we do. We work closely with the most popular communications platforms and the world’s leading cloud infrastructure platforms. We use the latest in AI/ML technology to help our customers break new ground at scale. We are a global organization that values diversity, and we believe that providing opportunities for everyone to be their authentic self is key to our success. Smarsh leadership, culture, and commitment to developing our people have all garnered Comparably.com Best Places to Work Awards. Come join us and find out what the best work of your career looks like.