Associate Technical Architect - Platform

While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth.

If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi!

Job Location: Mumbai, Bangalore (Offshore) (Hybrid)

Experience : 7+ Years

Job Role -AWS Platform Engineer - Security Specialist

Key Responsibilities

• Design, build, and secure AWS platform infrastructure using Infrastructure as Code (Terraform and CloudFormation).
• Design and build event-driven security architectures using AWS EventBridge, AWS Lambda (Python), and AWS Systems Manager (SSM) for automated Security Findings routing and auto-remediation of detective controls.
• Integrate AWS Security Hub and GuardDuty with ITSM tools (specifically Jira) to build automated, environment-aware ticket creation and routing workflows based on resource tagging and severity.
• Enforce strict tagging governance across multiple layers (Authoring, Build, API via Service Control Policies/Tag Policies, and Runtime via AWS Config) to ensure accurate resource attribution and compliance.
• Secure and govern the AWS account vending process, ensuring newly provisioned accounts automatically inherit clean security baselines, delegated administrator configurations, and automated suppression rules.
• Implement and manage centralized network security controls at scale using AWS Firewall Manager via Terraform.
• Develop secure CI/CD reference pipelines, integrating automated static analysis and security scanning gates to block non-compliant infrastructure deployments.
• Transition manual security reviews to continuous, automated assessments using AWS Security Hub (CSPM), AWS Config, and AWS Security Agent.
• Rationalize and manage AWS Config conformance packs and Security Hub standards across multi-partition environments (Commercial, GovCloud) to eliminate redundant findings.
• Support incident response activities by expanding AWS Security Incident Response (SIR) adoption, configuring auto-triage for GuardDuty/Security Hub findings to reduce alert noise.
• Collaborate with platform engineering, network engineering, and security operations teams to define secure architecture patterns, exception handling, and remediation SLAs.

Must Have Skills

• Experience: 7+ years of overall experience in AWS Cloud platform/infrastructure engineering, with 3-5 years specifically dedicated to cloud security and automation.
• AWS Security Services: Deep, hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS, and AWS Firewall Manager.
• AWS Governance & Organizations: Strong expertise in AWS Organizations, specifically implementing Service Control Policies (SCPs), Tag Policies, and Delegated Administrator models across multiple accounts.
• Security Automation: Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for building event-driven security workflows and auto-remediation scripts.
• Scripting: High proficiency in Python (Boto3) and Bash for security automation and API integrations.
• Infrastructure as Code (IaC): Strong hands-on experience writing and managing infrastructure using Terraform and AWS CloudFormation.
• CI/CD & Pipeline Security: Experience building secure pipelines and integrating IaC static analysis tools such as Checkov, tfsec, cfn-lint, and Conftest.
• Multi-Partition Experience: Proven experience managing and securing AWS environments across different partitions, specifically AWS Commercial and AWS GovCloud.
• Compliance Frameworks: Strong familiarity with FedRAMP, NIST 800-53, CIS Benchmarks, and AWS Foundational Security Best Practices (FSBP).
• ITSM Integration: Experience automating Jira workflows via API/webhooks directly from AWS services to route security findings to engineering teams.
• Core Security Concepts: Strong understanding of cloud security models, zero-trust principles, least privilege, encryption, and network security fundamentals.
• Soft Skills: Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards).

Good to Have Skills

• Experience securing multi-cloud (AWS + GCP/Azure) environments.
• Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks).
• Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog.
• Experience with AWS Macie, Detective, and advanced data governance solutions.
• Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta).
• Familiarity with incident response processes and playbook automation (SOAR).
• Experience designing isolation, or exfiltration-prevention controls.
• Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty)
• Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment.
• Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!