Associate Technical Architect - Platform

About the job

While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth.

If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi! Job Location: Mumbai, Bangalore (Offshore) (Hybrid) Experience : 7+ Years

Job Role -  AWS Platform Engineer – Security Specialist Key Responsibilities

- Design, build, and secure AWS platform infrastructure using Infrastructure as Code ( Terraform and CloudFormation ).

- Design and build event-driven security architectures using AWS EventBridge, AWS Lambda (Python), and AWS Systems Manager (SSM) for automated Security Findings routing and auto-remediation of detective controls .

- Integrate AWS Security Hub and GuardDuty with ITSM tools (specifically Jira ) to build automated, environment-aware ticket creation and routing workflows based on resource tagging and severity.

- Enforce strict tagging governance across multiple layers (Authoring, Build, API via Service Control Policies/Tag Policies , and Runtime via AWS Config ) to ensure accurate resource attribution and compliance.

- Secure and govern the AWS account vending process , ensuring newly provisioned accounts automatically inherit clean security baselines, delegated administrator configurations, and automated suppression rules.

- Implement and manage centralized network security controls at scale using AWS Firewall Manager via Terraform .

- Develop secure CI/CD reference pipelines , integrating automated static analysis and security scanning gates to block non-compliant infrastructure deployments.

- Transition manual security reviews to continuous, automated assessments using AWS Security Hub (CSPM) , AWS Config , and AWS Security Agent .

- Rationalize and manage AWS Config conformance packs and Security Hub standards across multi-partition environments ( Commercial, GovCloud ) to eliminate redundant findings.

- Support incident response activities by expanding AWS Security Incident Response (SIR) adoption, configuring auto-triage for GuardDuty/Security Hub findings to reduce alert noise.

- Collaborate with platform engineering, network engineering, and security operations teams to define secure architecture patterns, exception handling, and remediation SLAs. Must Have Skills

- Experience: 7+ years of overall experience in AWS Cloud platform/infrastructure engineering , with 3-5 years specifically dedicated to cloud security and automation .

- AWS Security Services: Deep, hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS , and AWS Firewall Manager .

- AWS Governance & Organizations: Strong expertise in AWS Organizations , specifically implementing Service Control Policies (SCPs) , Tag Policies , and Delegated Administrator models across multiple accounts.

- Security Automation: Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for building event-driven security workflows and auto-remediation scripts .

- Scripting: High proficiency in Python (Boto3) and Bash for security automation and API integrations.

- Infrastructure as Code (IaC): Strong hands-on experience writing and managing infrastructure using Terraform and AWS CloudFormation .

- CI/CD & Pipeline Security: Experience building secure pipelines and integrating IaC static analysis tools such as Checkov, tfsec, cfn-lint , and Conftest .

- Multi-Partition Experience: Proven experience managing and securing AWS environments across different partitions, specifically AWS Commercial and AWS GovCloud .

- Compliance Frameworks: Strong familiarity with FedRAMP, NIST 800-53, CIS Benchmarks , and AWS Foundational Security Best Practices (FSBP) .

- ITSM Integration: Experience automating Jira workflows via API/webhooks directly from AWS services to route security findings to engineering teams.

- Core Security Concepts: Strong understanding of cloud security models, zero-trust principles, least privilege, encryption , and network security fundamentals .

- Soft Skills: Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards). Good to Have Skills

- Experience securing multi-cloud (AWS + GCP/Azure) environments.

- Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks).

- Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog.

- Experience with AWS Macie, Detective, and advanced data governance solutions.

- Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta).

- Familiarity with incident response processes and playbook automation (SOAR).

- Experience designing isolation, or exfiltration-prevention controls.

- Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty)

- Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment.

- Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews. If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us !