Cloud & Platform Engineer

About the role

Req ID: 396459. NTT DATA's client is seeking a Senior Platform Security Engineer for an AI-Powered Penetration Testing Platform in Irving, Texas. This role leads the end-to-end engineering, build, configuration, integration, certification, deployment, and operationalization of a third-party AI-powered penetration testing platform within the enterprise environment.

Responsibilities

• Lead the end-to-end engineering, build, configuration, integration, certification, deployment, and operationalization of a third-party AI-powered penetration testing platform within the enterprise environment.
• Provision and configure required infrastructure, platform components, security controls, connectivity, and supporting services across cloud and on-premises environments.
• Own the technical certification process for the platform, including security assessments, architecture reviews, vendor validation, compliance reviews, and internal technology-risk approvals.
• Develop and maintain platform architecture diagrams, build documentation, configuration standards, operational runbooks, and certification evidence.
• Serve as the primary technical and engineering interface with third-party vendors throughout platform implementation, certification, upgrades, and ongoing operations.
• Design and implement integrations between the penetration testing platform and enterprise security technologies, including SIEM, SOAR, vulnerability-management, ticketing, and reporting platforms.
• Develop REST APIs, webhooks, event-driven connectors, and data integrations to automate findings ingestion, alert routing, remediation workflows, and downstream security processes.
• Ensure platform integrations comply with enterprise security, networking, architecture, and data-governance standards.
• Provision and manage cloud-native infrastructure across AWS and/or GCP, including compute, networking, storage, containers, IAM, and related services.
• Develop and maintain Infrastructure-as-Code using Terraform, CloudFormation, or equivalent technologies to enable repeatable, controlled, and auditable infrastructure deployment.
• Design and maintain CI/CD pipelines for platform deployment, component updates, configuration management, and drift detection.
• Deploy and manage containerized platform components using Docker and Kubernetes environments such as Amazon EKS and Google Kubernetes Engine (GKE).
• Design and enforce network segmentation, private connectivity, firewall controls, and least-privilege IAM across platform components.
• Manage hybrid platform architecture spanning cloud-hosted and on-premises or co-location environments.
• Provide ongoing operational management of the platform, including health monitoring, patching, capacity management, incident response, upgrades, and configuration changes.
• Develop and maintain operational runbooks, alerting frameworks, Service Level Agreements (SLAs), and Service Level Objectives (SLOs).
• Coordinate platform upgrades, vendor releases, patches, and configuration changes through established change-management processes.
• Implement and maintain backup, recovery, resiliency, and business-continuity capabilities for platform components.
• Collaborate with Red Team, Offensive Security, Vulnerability Management, and other security stakeholders to configure and optimize AI-powered penetration testing capabilities.
• Manage platform scope configuration, target onboarding, testing policies, and governance to support safe and compliant penetration testing activities.
• Support findings triage, deduplication, prioritization, and integration into vulnerability-management and remediation workflows.
• Ensure platform components meet enterprise security standards for encryption, secrets management, audit logging, authentication, authorization, and access control.
• Support technology-risk assessments, security reviews, compliance reviews, and internal or external audits related to the platform.
• Maintain platform security and operational risk registers and coordinate remediation and escalation of identified risks.
• Monitor platform health and performance using observability technologies such as Datadog, Amazon CloudWatch, Google Cloud Monitoring, or equivalent tools.

Requirements

• Minimum 7+ years of overall experience in Platform Engineering, Cloud Infrastructure Engineering, Security Engineering, or a related technical discipline.
• Minimum 7+ years of experience delivering, integrating, and operating complex third-party, vendor-hosted, or hybrid enterprise platforms.
• Minimum 7+ years of deep hands-on cloud engineering experience with AWS and/or Google Cloud Platform.
• Minimum 7+ years of experience with cloud infrastructure technologies including compute services such as EC2 or GCE, networking, storage, IAM, and containerized workloads.
• Minimum 7+ years of experience with cloud networking technologies and patterns including VPCs, PrivateLink or equivalent private connectivity, VPNs, routing, and firewalls.
• Minimum 7+ years of strong experience with Infrastructure-as-Code technologies such as Terraform, CloudFormation, or equivalent enterprise provisioning tools.
• Minimum 7+ years of experience designing and implementing CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, or equivalent technologies.
• Minimum 7+ years of strong experience with Docker and Kubernetes, including cloud-managed Kubernetes platforms such as EKS and/or GKE.
• Minimum 7+ years of experience managing the complete lifecycle of third-party technology platforms, including build, certification, integration, deployment, upgrades, and ongoing operations.
• Minimum 7+ years of experience working with enterprise technology-risk, platform-certification, security-review, and vendor-management processes.
• Minimum 7+ years of strong understanding of hybrid architectures combining cloud