AWS Cloud Developer (Terraform / Networking / Security) - Manager

State Street; Hyderabad; On-site; INR 350,000 - 580,000; Full time

Job summary

State Street is seeking a hands-on Senior AWS Cloud Developer to design, build, and manage cloud infrastructure in a highly governed enterprise environment. You will focus on Terraform-based provisioning, AWS networking, and security best practices with an emphasis on automation and scalable architecture.

The role requires 8+ years of AWS experience, 2–4+ years of Terraform work, and a strong ability to implement multi-account architectures in enterprise settings.

Qualifications

• 8+ years of overall experience in AWS cloud development and architecture.
• 2–4+ years hands-on AWS experience with Terraform, IaC, and multi-account deployments.
• Experience designing secure, governed infrastructure and automation-first pipelines.

Responsibilities

• Design and implement AWS infrastructure using Terraform (IaC).
• Provision and manage core AWS services (S3, CloudTrail, IAM) and networking components (VPCs, transit, endpoints).
• Implement security and governance controls (Config, Security Hub, Control Tower integrations) and maintain Terraform modules.

Skills

Terraform

AWS

Networking

Security

IAM

SCPs

Multi-account

Automation

CI/CD

VPC

Tools

RAM

CloudTrail

CloudMap

VPC Endpoints

Transit Gateway

Job description

Job Description

Senior AWS Cloud Developer (Terraform / Networking / Security)

Role Summary

We are seeking a hands-on AWS Cloud Developer with strong experience in Terraform (IaC) to design, build, and manage cloud infrastructure in a highly governed enterprise environment. This role focuses on infrastructure provisioning, AWS networking, and security best practices, with an emphasis on automation and scalable architecture. The ideal candidate should have 8+ years of real-world experience building and managing AWS environments using Terraform, not just theoretical knowledge.

Key Responsibilities

• Design and implement AWS infrastructure using Terraform (Infrastructure as Code)
• Provision and manage core AWS services, including:
  • S3 (buckets, policies, lifecycle, security)
  • CloudTrail (logging, auditing, multi-account setup)
  • IAM (roles, policies, permission boundaries, trust relationships)
• Build and manage AWS networking components:
  • VPCs, subnets, routing, NAT/IGW
  • VPC Endpoints (Gateway & Interface) + endpoint policies
  • Transit Gateway / CloudWAN
  • VPC Peering and RAM (Resource Access Manager) sharing
• Configure and manage:
  • Route 53 (hosted zones, resolvers)
  • AWS Cloud Map (service discovery)
  • IPAM (IP Address Manager) pools and allocations
• Implement security and compliance controls:
  • AWS Config
  • Security Hub
  • Control Tower integrations
  • Develop reusable Terraform modules and maintain state management best practices
  • Troubleshoot infrastructure and connectivity issues across multi-account environments
  • Ensure alignment with security, governance, and least-privilege principles

Required Qualifications

• Total experience required is 8+ years
• 2–4+ years of hands-on AWS experience
• Strong experience with Terraform (required):
  • Writing reusable modules
  • Managing state (remote backends, locking)
  • Multi-account deployments
• Deep understanding of AWS Networking:
  • VPC design, routing, segmentation
  • Transit Gateway / CloudWAN
  • VPC endpoints and private connectivity
• Strong knowledge of AWS Security:
  • IAM roles, policies, permission boundaries
  • SCPs (Service Control Policies)
  • Logging and auditing (CloudTrail)
  • Experience with multi-account AWS environments (Control Tower preferred)
• Hands-on experience with:
  • AWS Config
  • Security Hub
  • VPC sharing (RAM)

Preferred Qualifications

Experience in regulated environments (banking, enterprise, compliance-heavy)

Familiarity With

• AWS Control Tower governance models
• CloudWAN architecture
• Centralized logging / audit accounts
• Experience integrating with CI/CD pipelines (e.g., Terraform in pipelines)
• Knowledge of OIDC / identity federation patterns

Certifications (Required / Preferred)

• AWS Certified Solutions Architect - Associate (minimum)
• AWS Certified Solutions Architect - Professional (strongly preferred)
• AWS Certified Advanced Networking - Specialty (preferred)
• AWS Certified Security Specialty - (Good to Have)
• HashiCorp Terraform Associate Certification (preferred)

What We’re Looking For (Key Signals)

• Proven ability to build AWS infrastructure from scratch using Terraform
• Strong understanding of network flows, security boundaries, and governance
• Experience working in multi-account, enterprise-scale AWS environments
• Ability to troubleshoot complex networking and IAM issues
• Not reliant on console (minimal "click-ops") - automation-first mindset

Working Hours : 2 PM to 11 PM IST

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Discover more information on jobs at StateStreet.com/careers Read our CEO Statement Job ID: R-789517