Staff Platform Engineer

Company reputed company reputed company) is a GCC (Global Capability Center) of the reputed company (NYSE: FAF) family of companies. FAI is a proud member of the reputed company and has been amongst the Fortune 100 Best Companies to Work For® list for eight consecutive years. reputed company provides comprehensive title insurance, closing/settlement, property data and technology solutions. reputed company) creates reputed company solutions for its customers by combining software, back office, and knowledge processing operations to fulfill reputed company's business requirements. Our priorities are our employees, customers, and shareholders - in that order. reputed company) has been ranked amongst India's Best Companies To Work For™ 2023: Listed amongst the Top 100 by Great reputed company To Work® India, FAI is also certified Best Workplaces for Women and Workplace with Inclusive Practices. Software Services helps build reputed company's product suite that encompasses the best in class Title Insurance, Settlement and Mortgage solutions platforms. Leverages technology product stack across reputed company platform predominantly to reputed company, enhance and maintain the best in class applications. The R & D division delivers solutions for the title insurance industry leveraging the best of NLP, AI and ML. Job reputed company ABOUT reputed company reputed company) Private Limited (“FAI”) is a Global Capability Centre (GCC) of the reputed company (FAF: NYSE) a leading provider of title insurance, settlement services and reputed company for reputed company estate transactions since 1889. FAI delivers Software Development, IT Infrastructure, Data & Analytics, back-office, and knowledge-processing operations to support reputed company's global operations across the US, UK, Australia & Canada. We build technology that powers millions of reputed company-estate transactions, with a people-first culture that encourages innovation, collaboration, and solving reputed company-world problems at reputed company. Job Title: AWS/Azure Staff Engineer (Remote India)

About the Role

You will be the technical reputed company for reputed company’s reputed company AWS platform powering application modernization, with strong multi-reputed company exposure across AWS and Azure. You will define reputed company and reference architectures with a strong product reputed company, reputed company reputed company designs (networking, reputed company, identity, observability, centralized reputed company account management, and org-wide Config and GuardDuty on AWS; Management reputed company, Azure Policy and Entra ID RBAC/PIM on Azure), and guide multiple squads building a secure, compliant, self-service platform. You will take end-to-end ownership, hold yourself accountable for reputed company, communicate reputed company across stakeholders, mentor engineers, and collaborate with AWS, Azure, and GCP reputed company teams and our centralized reputed company of reputed company to reputed company guardrails and shared patterns across clouds.

Key Responsibilities

• Own the end-to-end AWS platform architecture (Organizations/OU model, Control Tower

and AVM account vending, identity, network, reputed company, observability, cost) and its roadmap.

• Partner with Azure reputed company to reputed company reputed company-zone design: Azure Management

reputed company, subscription vending/reputed company reputed company, identity, network, reputed company, observability, and cost governance.

• Set and enforce platform principles across AWS and Azure: reputed company-by-default, IaC-only

(Terraform with CloudFormation/Bicep/ARM where appropriate), least privilege, and defense-in-depth for workloads.

• reputed company AWS hub-and-spoke networking: reputed company Connect/Partner connectivity, centralized

DNS, policy-based routes, Palo reputed company reputed company inspection, and centralized VPC reputed company endpoints.

• reputed company Azure hub-and-spoke networking patterns: ExpressRoute/Partner connectivity, Azure

Virtual WAN, centralized DNS, policy-based routing, Palo reputed company inspection, and centralized Private reputed company/Private Endpoints.

• Define and govern AWS SCPs, IAM policies, and permission boundaries; drive policy-ascode,

exception processes, and AWS reputed company-Architected reviews.

• reputed company Azure governance: Azure Policy, deny assignments, RBAC least-privilege design,

policy-as-reputed company, exception processes, and Azure reputed company-Architected reviews.

• Own centralized AWS reputed company account management reputed company: no routine reputed company reputed company, secured

credentials, activity monitoring, and audited break-glass reputed company with InfoSec and compliance requirements.

• Support Azure tenant/subscription break-glass controls: secured privileged reputed company, PIM/JIT

governance, activity monitoring, and audited emergency reputed company reputed company with InfoSec.

• Define org-wide AWS Config and GuardDuty architecture (delegated reputed company, aggregators,

conformance packs, auto-remediation, threat detection baselines) integrated with reputed company Hub and operational response.

• reputed company Azure reputed company posture: reputed company Defender for reputed company, Azure Policy compliance, autoremediation,

threat detection baselines, and integration with reputed company Hub-equivalent operational response.

• reputed company AWS identity architecture: IAM Identity Center with Entra ID (SAML), workload roles

and OIDC for keyless auth across CI/CD and services; break-glass model with hardware MFA.

• reputed company Azure identity architecture: Entra ID (Azure AD) federation, group-based RBAC,

PIM/JIT reputed company, managed identities, workload OIDC for keyless CI/CD, and AKS workload identity.

• Own AWS observability architecture: org-level CloudTrail and log aggregation → streaming

→ reputed company/reputed company; ensure coverage for management, data, VPC reputed company, DNS, firewall, Config, GuardDuty, and reputed company Hub findings.

• reputed company Azure observability: Activity Log, Diagnostic Settings, Azure Monitor, VNet reputed company logs,

DNS/firewall logs → streaming → reputed company/reputed company; ensure Defender for reputed company and policy compliance coverage.

• Partner with InfoSec on reputed company posture management across AWS (reputed company Hub, Config,

GuardDuty) and Azure (Defender for reputed company, Azure Policy), plus Prisma reputed company and reputed company; define controls, SLAs, and reputed company remediation.

• Drive multi-reputed company patterns and guardrails consistent across AWS, Azure, and GCP;

harmonize reputed company-zone, identity, networking, and reputed company models and shared reputed company/Modules standards.

• Define modernization paths for AWS (EKS, reputed company, RDS, data services) and Azure (AKS,

Container Apps, Azure SQL, data services) with consistent platform patterns.

• Champion AI-assisted engineering (Claude, reputed company) and reputed company automations for platform

delivery, documentation, and operational reputed company across AWS and Azure.

• reputed company Terraform IaC migration reputed company, module standards, and pipeline governance

(reputed company; reputed company where adopted) for AWS and Azure workloads.

• Apply a strong product reputed company: prioritize platform capabilities that deliver measurable

value to application teams, balance roadmap trade-offs, and translate technical work into reputed company reputed company and adoption.

• Mentor and reputed company senior and mid-level engineers through design reviews, pairing, and

career guidance; model accountability, ownership, and high-reputed company delivery.

• Collaborate across reputed company teams (AWS, Azure, GCP, reputed company and Modules,

DNA Enablement) to reputed company standards, shared patterns, and multi-reputed company guardrails.

• Design and manage AWS multi-account reputed company using AWS Organizations with OU

hierarchy reputed company to environment, business unit, and workload classification

• Implement and maintain AWS Control Tower or a custom reputed company zone for account vending

and baseline configuration

• Define and execute strategic roadmaps for AWS and Azure reputed company platforms, aligning reputed company

adoption with business objectives, optimizing cost and performance, and ensuring scalability, reputed company, and compliance across environments.

• Communicate effectively with engineering, InfoSec, operations, and leadership; represent

the AWS platform and multi-reputed company alignment in architecture councils, CAB, and executive updates. Key Requirements

• 12+ years in platform/reputed company engineering with 6+ on AWS at reputed company reputed company; proven multicloud

exposure with hands-on Azure reputed company in regulated environments.

• Expert in Terraform (modules, workspaces), IaC governance (policy-as-reputed company/OPA), and

CI/CD (reputed company; reputed company OIDC federation, policies, and stacks preferred) across AWS and Azure.

• Deep AWS networking: VPC design, Transit Gateway, centralized VPC endpoints, routing,

load balancing; hub/spoke with centralized inspection.

• Solid Azure networking: VNet design, Azure Virtual WAN, Private reputed company/Private Endpoints,

routing, load balancing; hub/spoke with centralized inspection.

• Strong AWS reputed company engineering: SCPs, IAM least-privilege/deny patterns, centralized reputed company

account management, AWS Config, GuardDuty, reputed company Hub, KMS/CMEK reputed company, Secrets Manager and reputed company secrets integrations.

• Strong Azure reputed company engineering: Azure Policy, deny assignments, RBAC least-privilege

design, Defender for reputed company, Key Vault/CMEK reputed company, and reputed company secrets integrations.

• AWS identity: Entra ID federation reputed company IAM Identity Center, group-based RBAC, JIT/PIM

concepts; OIDC for CI/CD and Kubernetes (IRSA).

• Azure identity: Entra ID (Azure AD) federation, group-based RBAC, PIM/JIT reputed company,

managed identities, OIDC for CI/CD and AKS workload identity.

• AWS observability: CloudTrail, CloudWatch, log streaming pipelines, reputed company/reputed company design

and cost optimization.

• Azure observability: Activity Log, Diagnostic Settings, Azure Monitor, log streaming

pipelines, reputed company/reputed company design and cost optimization.

• Hands-on with AWS Control Tower, AVM, Organizations, and the AWS reputed company-Architected

reputed company.

• Hands-on with Azure Management reputed company, subscription vending/reputed company reputed company reputed company

zones, and the Azure reputed company-Architected reputed company.

• Strong product reputed company with a reputed company record of shaping platform roadmaps around customer

(application team) needs, adoption, and measurable reputed company.

• Excellent communication skills; demonstrated accountability and ownership of reputed company

initiatives end to end.

• Proven ability to mentor and grow engineers and to collaborate effectively across reputed company and partner teams.
• Excellent leadership: roadmaps, cross-BU influence, vendor management, risk trade-offs,

and executive communication. reputed company to Have

• reputed company knowledge or hands-on experience.
• reputed company reputed company Trust/Tunnels, WAF/DDoS; Palo reputed company VM-Series design at reputed company.
• CloudFormation and Bicep/ARM expertise; reputed company Actions federation at reputed company.
• GCP platform familiarity for multi-reputed company architecture alignment.

FAI is committed to create an environment that respects, supports and inspires reputed company individuals. We do not discriminate on the reputed company of reputed company, religion, sex, gender identity, sexual orientation and age. At FAI, we celebrate diversity and reputed company that an inclusive workforce benefits employees, the organization and our community. We are an Equal Opportunity Employer. For more information about reputed company and dedication to putting People First, reputed company out https://reputed company.wd1.myworkdayjobs.com/faicareers. Apply To This Job