Senior AWS Cloud Infrastructure Engineer

As an AWS Platform Engineer - AVP at State Street, you will play a crucial role in defining and evolving the multi-account AWS strategy using Organizations and Control Tower. Your responsibilities will include guiding and overseeing AFT account provisioning and customization frameworks, designing and reviewing Terraform architecture, modules, and workspace structures, and defining IAM governance models including roles, permission sets, SCPs, and permission boundaries. Additionally, you will provide architectural oversight across networking, security, and platform services, support and guide the implementation of Security Hub, CloudTrail, Config, and centralized logging, review and approve infrastructure code and design decisions, and lead troubleshooting of complex cross-account and cross-service issues.

Your role will also involve partnering with security and compliance teams to ensure audit readiness, mentoring and guiding distributed engineering teams, driving automation standards and infrastructure-as-code best practices, supporting landing zone enhancements and cloud platform modernization initiatives, participating in incident resolution and high-priority production escalations, and optimizing cloud networking for hybrid and multi-region environments.

Key Responsibilities:

• Define and evolve multi-account AWS strategy
• Guide and oversee AFT account provisioning and customization frameworks
• Design and review Terraform architecture, modules, and workspace structures
• Define IAM governance models including roles, permission sets, SCPs, and permission boundaries
• Provide architectural oversight across networking, security, and platform services
• Support and guide implementation of Security Hub, CloudTrail, Config, and centralized logging
• Lead troubleshooting of complex cross-account and cross-service issues
• Partner with security and compliance teams for audit readiness
• Mentor and guide distributed engineering teams
• Drive automation standards and infrastructure-as-code best practices
• Support landing zone enhancements and cloud platform modernization
• Participate in incident resolution and high-priority production escalations
• Optimize cloud networking for hybrid and multi-region environments
• Implement security best practices using AWS security tools
• Enforce least privilege access and automate compliance checks
• Document architecture, design decisions, and best practices

Qualifications Required:

• Bachelors degree in Computer Science, Engineering, Information Technology, or related field (preferred)
• 15+ years of infrastructure or cloud experience
• 8+ years of hands-on AWS enterprise experience
• 45+ years of advanced Terraform experience
• 23+ years working with AWS Control Tower and AFT
• AWS Certified Solutions Architect Professional (strongly preferred)
• AWS Certified Advanced Networking Specialty (preferred)
• AWS Certified Security Specialty (preferred)
• Experience in architecting and designing technical solutions based on industry standards
• Extensive experience with AWS security tools and Terraform
• Deep expertise in AWS networking

Please note that this is a fully office-based role with working hours from 3 pm to 12 am IST, and the location is either Bangalore or Hyderabad. State Street values inclusion, diversity, and social responsibility, offering a collaborative environment where technology skills and innovation are highly regarded. If you are looking to grow your technical skills, solve real problems, and contribute to the digital transformation of a global financial services company, this role is important to us.

State Street is an equal opportunity and affirmative action employer, committed to creating an inclusive environment where every employee can thrive and reach their full potential. Discover more about State Street and explore career opportunities at StateStreet.com/careers. As an AWS Platform Engineer - AVP at State Street, you will play a crucial role in defining and evolving the multi-account AWS strategy using Organizations and Control Tower. Your responsibilities will include guiding and overseeing AFT account provisioning and customization frameworks, designing and reviewing Terraform architecture, modules, and workspace structures, and defining IAM governance models including roles, permission sets, SCPs, and permission boundaries. Additionally, you will provide architectural oversight across networking, security, and platform services, support and guide the implementation of Security Hub, CloudTrail, Config, and centralized logging, review and approve infrastructure code and design decisions, and lead troubleshooting of complex cross-account and cross-service issues.

Your role will also involve partnering with security and compliance teams to ensure audit readiness, mentoring and guiding distributed engineering teams, driving automation standards and infrastructure-as-code best practices, supporting landing zone enhancements and clou