Sr. Platform Engineer II

About the role

Smarsh empowers its customers to manage risk and unleash intelligence in their digital communications. This role focuses on designing, automating, and operating secure, scalable network infrastructure across multiple AWS environments while supporting FedRAMP compliance requirements.

Responsibilities

• Help build and secure cloud infrastructure in highly regulated environments, working on mission-critical platforms with a strong focus on automation, reliability, and security.
• Design and implement secure, scalable AWS network architectures.
• Architect hybrid cloud connectivity solutions between on-premises and AWS.
• Create and maintain network and architecture diagrams.
• Develop and maintain Terraform-based infrastructure for AWS networking resources.
• Orchestrate and automate end-to-end infrastructure provisioning across multiple environments.
• Design and maintain reusable, environment-aware Terraform modules.
• Implement promotion workflows for infrastructure changes across environments.
• Ensure consistency, traceability, and auditability of infrastructure changes.
• Identify and remediate configuration drift across environments.
• Support network designs aligned with FedRAMP and NIST 800-53 requirements.
• Implement and review network security controls including NACLs and Security Groups.
• Partner with Security and GRC teams to support audits and compliance activities.
• Investigate and resolve security incidents involving network systems.
• Maintain documentation required for regulated environments.
• Optimize AWS network performance, resiliency, and availability.
• Design and implement network monitoring and alerting using DataDog, Prometheus, and AWS-native tools.
• Participate in troubleshooting and root cause analysis of complex network issues.
• Participate in on-call rotation and operational support.
• Act as a networking subject matter expert across Platform and Infrastructure teams.
• Contribute to architecture reviews, standards, and best practices.
• Mentor junior engineers and provide technical guidance.
• Maintain runbooks, SOPs, and operational documentation.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Engineering, or related field (or equivalent experience).
• 8+ years of experience in cloud or platform engineering, with a strong focus on AWS networking.
• Advanced understanding of AWS networking services (VPCs, subnets, routing, Transit Gateway, Route 53, Direct Connect, VPNs).
• Extensive experience with Terraform and Infrastructure as Code.
• Proven experience orchestrating and automating infrastructure provisioning across multiple environments (dev, staging, production).
• Experience integrating infrastructure provisioning into CI/CD pipelines.
• Proficiency in Python, Go, or Java.
• Strong Linux and networking fundamentals.
• Excellent system design, troubleshooting, and problem-solving skills.

Preferred Qualifications

• Hands-on experience operating or delivering FedRAMP Moderate or High environments.
• AWS Advanced Networking – Specialty certification.
• Experience with Kubernetes and service mesh networking (Istio, Envoy).
• Familiarity with zero-trust networking models.
• Experience supporting multi-account AWS organizations or hybrid-cloud environments.