Senior Platform Engineer - AWS

Who are we?

Smarsh empowers its customers to manage risk and unleash intelligence in their digital communications. Our growing community of over 6500 organizations in regulated industries counts on Smarsh every day to help them spot compliance, legal or reputational risks in 80+ communication channels before those risks become regulatory fines or headlines. Relentless innovation has fueled our journey to consistent leadership recognition from analysts like Gartner and Forrester, and our sustained, aggressive growth has landed Smarsh in the annual Inc. 5000 list of fastest-growing American companies since 2008.

About the Role:

We're seeking an experienced Platform Engineer to design, build, and operate secure, scalable hybrid cloud network infrastructure on AWS. You'll work across platform, security, and infrastructure teams to deliver highly available cloud connectivity solutions, focusing on automation, reliability, and operational excellence.

Required Qualifications

• Bachelor's in Computer Science/Engineeringor equivalent professional experience

• 6-8 yearsin platform engineering, SRE, or cloud engineering with strong AWS networking focus

• AWS Advanced Networking - Specialty Certification orequivalent hands-on expertise with VPCs, subnets, Transit Gateways, Route 53, Direct Connect, and VPNs

• Strong system design and troubleshooting skills

• Hands-on experience architecting hybrid on-premises↔ AWS connectivity

• Hands-on firewall operations experience(AWS Network Firewall, NACLs, Security Groups, WAF in production environments)

Core Responsibilities

Platform Architecture (40%)

• Design and implement secure, scalable AWS network architectures (VPCs, subnets, routing, multi-tenant isolation)

• Architect hybrid connectivity solutions using Direct Connect, VPNs, Transit Gateways

• Design and implement firewall strategies: Network ACLs, Security Groups, AWS Network Firewall, and WAF rules aligned with security best practices

• Advanced understanding of NACLs, Security Groups, WAF, and AWS Network Firewall

• Implement Route 53, DHCP, AWS PrivateLink, and DNS/IPAM solutions

• Design high-availability and disaster recovery network architectures

• Create and maintain network architecture diagrams and SOPs

• Collaborate with Infosec team to design network architectures that align with threat models and security controls

• Participate in security incident response involving network systems

Infrastructure Automation (40%)

• Develop and maintain Terraform modules for AWS infrastructure with security guardrails embedded (e.g., encryption at rest/transit, least-privilege IAM policies, NACLs, Security Groups)

• Partner with Infosec to establish and enforce Terraform coding standards and security controls

• Build environment aware Terraform modules for reusability

• Implement GitOpsworkflows and promote infrastructure changes across dev/staging/prod

• Automate firewall rule provisioning and updates; implement drift detection for security controls

• Automate operational tasks using Python and shell scripting

• Manage backup and recovery procedures

• Implement CI/CD integration for infrastructure deployments

Operations & Observability (20%)

• Audit, maintain, and troubleshoot firewall rules and security controls (NACLs, Security Groups, Network Firewall, WAF) including rule optimization, change management, incident response, and compliance reviews

• Design and implement monitoring/alerting using DataDog, Prometheus and AWS CloudWatch

• Analyze VPC Flow Logs and AWS networking metrics for performance optimization

• Lead troubleshooting of complex network and platform issues

• Participate in on-call rotation

• Maintain runbooks and operational documentation

Mandatory Skills

• AWS Networking & Firewall Operations: VPC, peering, subnets, Transit Gateways, Route 53, Direct Connect, VPNs, NACLs, Security Groups, AWS Network Firewall, WAF, AWS PrivateLink, IPAM

• Firewall Rule Management: Writing, debugging, and maintaining network ACLs and Security Groups at scale; understanding of stateful vs. stateless filtering AWS Services: EC2, RDS, ECS/EKS, Lambda, IAM, CloudFormation, S3

• Infrastructure as Code: Terraform(primary); CloudFormation exposure

• Programming: Python + Bash/Shell scripting

• Linux fundamentals and networking (TCP/IP, routing, DNS)

• On-call operational support

Preferred Qualifications

• AWS Advanced Networking - Specialty Certification

• Kubernetes / service mesh networking experience (Istio, Envoy)

• Multi-account AWS organization management

• CI/CD platform experience (GitLab CI, GitHub Actions, Jenkins)

• Monitoring/observability tools: Prometheus, ELK stack

• Compliance frameworks: SOC 2, ISO 2700

About our culture

Smarsh hires lifelong learners with a passion for innovating with purpose, humility and humor. Collaboration is at the heart of everything we do. We work closely with the most popular communications platforms and the world's leading cloud infrastructure platforms. We use the latest in AI/ML technology to help our customers break new ground at scale. We are a global organization that values diversity, and we believe that providing opportunities for everyone to be their authentic self is key to our success. Smarsh leadership, culture, and commitment to developing our people have all garnered Comparably.com Best Places to Work Awards. Come join us and find out what the best work of your career looks like.