Associate Technical Architect - Platform

While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth.

If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi!

Job Location: Mumbai, Bangalore (Offshore) (Hybrid)

Experience : 7+ Years

Job Role -  AWS Platform Engineer – Security Specialist

Key Responsibilities

- Design, build, and secure AWS platform infrastructure using Infrastructure as Code ( Terraform and CloudFormation ).
- Design and build event-driven security architectures using AWS EventBridge, AWS Lambda (Python), and AWS Systems Manager (SSM) for automated Security Findings routing and auto-remediation of detective controls .
- Integrate AWS Security Hub and GuardDuty with ITSM tools (specifically Jira ) to build automated, environment-aware ticket creation and routing workflows based on resource tagging and severity.
- Enforce strict tagging governance across multiple layers (Authoring, Build, API via Service Control Policies/Tag Policies , and Runtime via AWS Config ) to ensure accurate resource attribution and compliance.
- Secure and govern the AWS account vending process , ensuring newly provisioned accounts automatically inherit clean security baselines, delegated administrator configurations, and automated suppression rules.
- Implement and manage centralized network security controls at scale using AWS Firewall Manager via Terraform .
- Develop secure CI/CD reference pipelines , integrating automated static analysis and security scanning gates to block non-compliant infrastructure deployments.
- Transition manual security reviews to continuous, automated assessments using AWS Security Hub (CSPM) , AWS Config , and AWS Security Agent .
- Rationalize and manage AWS Config conformance packs and Security Hub standards across multi-partition environments ( Commercial, GovCloud ) to eliminate redundant findings.
- Support incident response activities by expanding AWS Security Incident Response (SIR) adoption, configuring auto-triage for GuardDuty/Security Hub findings to reduce alert noise.
- Collaborate with platform engineering, network engineering, and security operations teams to define secure architecture patterns, exception handling, and remediation SLAs.

Must Have Skills

- Experience: 7+ years of overall experience in AWS Cloud platform/infrastructure engineering , with 3-5 years specifically dedicated to cloud security and automation .
- AWS Security Services: Deep, hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS , and AWS Firewall Manager .
- AWS Governance & Organizations: Strong expertise in AWS Organizations , specifically implementing Service Control Policies (SCPs) , Tag Policies , and Delegated Administrator models across multiple accounts.
- Security Automation: Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for building event-driven security workflows and auto-remediation scripts .
- Scripting: High proficiency in Python (Boto3) and Bash for security automation and API integrations.
- Infrastructure as Code (IaC): Strong hands-on experience writing and managing infrastructure using Terraform and AWS CloudFormation .
- CI/CD & Pipeline Security: Experience building secure pipelines and integrating IaC static analysis tools such as Checkov, tfsec, cfn-lint , and Conftest .
- Multi-Partition Experience: Proven experience managing and securing AWS environments across different partitions, specifically AWS Commercial and AWS GovCloud .
- Compliance Frameworks: Strong familiarity with FedRAMP, NIST 800-53, CIS Benchmarks , and AWS Foundational Security Best Practices (FSBP) .
- ITSM Integration: Experience automating Jira workflows via API/webhooks directly from AWS services to route security findings to engineering teams.
- Core Security Concepts: Strong understanding of cloud security models, zero-trust principles, least privilege, encryption , and network security fundamentals .
- Soft Skills: Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards).

Good to Have Skills

- Experience securing multi-cloud (AWS + GCP/Azure) environments.
- Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks).
- Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog.
- Experience with AWS Macie, Detective, and advanced data governance solutions.
- Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta).
- Familiarity with incident response processes and playbook automation (SOAR).
- Experience designing isolation, or exfiltration-prevention controls.
- Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty)
- Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment.
- Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us !