Did you solve this?
We are working with a partner organization that use AWS SES. Their emails to us get rejected by our server with that exact message.
The server hosting our email definitely supports STARTTLS; I confirmed this by forcing my Outlook client to specify STARTTLS when sending.
All the reading I've done thus far suggests the sender is the one that needs to change something.