AWS WAF Governance DevOps Engineer at VARITE India Private Limited

Location: Karnataka
Level: senior
Posted: Sep 8, 2026

Description

VARITE India Private Limited is seeking an AWS Platform Engineer to implement centralized AWS governance for web application protection, workload isolation, and controlled egress. The role focuses on reusable Terraform modules, CI/CD pipelines, policy enforcement, logging, monitoring, and operational guardrails across AWS WAF, CloudFront, Application Load Balancer, Firewall Manager, Network Firewall, and related multi-account services. The engineer will support application onboarding, rule tuning, troubleshooting, documentation, and operational handover, with strong collaboration across cloud, security, network, operations, and application teams.

Required Skills

Terraform
IaC
CI/CD
AWS WAF
AWS Network Firewall
AWS Organizations
AWS Config

Additional Information

Required Previous Experiences: Hands-on experience with reusable, parameterized, versioned, and documented Terraform modules for AWS resources
Experience with Terraform state management, provider configuration, multi-account and multi-region patterns, module testing, and release versioning
CI/CD experience with GitHub Actions, GitLab CI, AWS CodePipeline, Azure DevOps, or comparable tooling
Hands-on implementation experience with AWS WAF web ACLs for CloudFront, Application Load Balancers, and API-facing workloads
Experience with VPCs, subnets, route tables, security groups, NACLs, VPC endpoints, PrivateLink, DNS, and Transit Gateway
Experience with centralized egress filtering using AWS Network Firewall, firewall policies, rule groups, NAT Gateway patterns, and forced egress routing
AWS Firewall Manager policy implementation for AWS WAF, security groups, Network Firewall, and organization-wide protection rollout
AWS Config rules, conformance packs, remediation workflows, delegated administration, and policy-as-code patterns
Preferred Qualifications: Experience with AWS Organizations, Firewall Manager delegated administration, and PrivateLink
Experience with Config as Code, GuardDuty, Security Hub, or comparable security and compliance tooling
Knowledge of OWASP Top 10, API protection, bot protection, Microsoft Sentinel, and security monitoring use cases
Experience with large-scale onboarding programs, reusable platform services, governance implementations, ITIL practices, and operational handovers
Translation Company Name: VARITE India Private Limited