Staff Platform Engineer
First American Financial Corporation2 months ago
Remote, India or Bengaluru, IndiaStaff+
Responsibilities
- Own the AWS platform architecture, multi-account strategy, landing zones, roadmap, and account vending model.
- Align AWS and Azure landing-zone, networking, identity, security, observability, cost, and governance patterns.
- Define and enforce secure-by-default, least-privilege, infrastructure-as-code, policy-as-code, and defense-in-depth platform principles.
- Lead hub-and-spoke networking, centralized connectivity, DNS, routing, private endpoints, and Palo Alto inspection across AWS and Azure.
- Govern AWS and Azure identity, access controls, break-glass procedures, policy enforcement, compliance, threat detection, and remediation.
- Design organization-wide observability and log aggregation using cloud-native monitoring, streaming pipelines, and Splunk or Elastic.
- Drive Terraform migration, module standards, CI/CD pipeline governance, and shared multi-cloud blueprint standards.
- Define modernization paths for AWS and Azure container, database, and data services.
- Lead platform roadmaps, architecture reviews, stakeholder communication, executive updates, and cross-business-unit initiatives.
- Mentor and develop engineers through design reviews, pairing, and career guidance.
- Champion AI-assisted engineering and agentic automation for platform delivery and operations.
Requirements
- 12+ years of platform or cloud engineering experience, including 6+ years with AWS at enterprise scale.
- Hands-on Azure platform engineering experience in regulated environments and proven multi-cloud exposure.
- Expertise in Terraform modules and workspaces, infrastructure-as-code governance, policy-as-code or OPA, and CI/CD across AWS and Azure.
- Deep AWS networking experience with VPCs, Transit Gateway, centralized endpoints, routing, load balancing, and centralized inspection.
- Strong Azure networking experience with VNets, Azure Virtual WAN, Private Link or Private Endpoints, routing, load balancing, and centralized inspection.
- Strong AWS security engineering experience with SCPs, IAM, AWS Config, GuardDuty, Security Hub, KMS or CMEK, Secrets Manager, and root-account management.
- Strong Azure security engineering experience with Azure Policy, deny assignments, RBAC, Defender for Cloud, Key Vault or CMEK, and enterprise secrets integrations.
- Experience with AWS and Azure identity federation, RBAC, PIM or JIT access, managed identities, OIDC, IRSA, and AKS workload identity.
- Experience designing AWS and Azure observability and log-streaming solutions using CloudTrail, CloudWatch, Activity Log, Diagnostic Settings, Azure Monitor, Splunk, or Elastic.
- Hands-on experience with AWS Control Tower, AVM, AWS Organizations, AWS Well-Architected Framework, Azure Management Groups, subscription vending or Enterprise Scale landing zones, and Azure Well-Architected Framework.
- Strong product mindset and experience shaping platform roadmaps around application-team needs, adoption, and measurable outcomes.
- Excellent communication, accountability, ownership, leadership, vendor-management, risk-tradeoff, executive-communication, collaboration, and mentoring skills.
- Preferred experience with Spacelift, Cloudflare Zero Trust or Tunnels, WAF or DDoS protection, Palo Alto VM-Series, CloudFormation, Bicep or ARM, GitHub Actions federation, and GCP platform architecture.
Benefits
- Remote position based in India.
- Inclusive equal-opportunity workplace with support for diversity and belonging.
Tech Stack
Categories
About First American Financial Corporation
First American Financial Corporation provides title insurance, closing/settlement services, and real-estate risk and property data products to lenders, agents, homebuyers/sellers, and commercial property firms. It also offers valuation services, mortgage subservicing, and home warranties, monetizing through insurance premiums and fee-based transactions and data licensing. Founded in 1889 and headquartered in Santa Ana, California, First American is a Fortune 500 public company trading on the NYSE under the ticker FAF.