Associate Technical Architect - Platform

While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth. If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi! Job Location: Mumbai, Bangalore (Offshore) (Hybrid) Experience : 7+ Years Job Role - AWS Platform Engineer – Security Specialist Key Responsibilities • Design, build, and secure AWS platform infrastructure using Infrastructure as Code (Terraform and CloudFormation). • Design and build event-driven security architectures using AWS EventBridge, AWS Lambda (Python), and AWS Systems Manager (SSM) for automated Security Findings routing and auto-remediation of detective controls. • Integrate AWS Security Hub and GuardDuty with ITSM tools (specifically Jira) to build automated, environment-aware ticket creation and routing workflows based on resource tagging and severity. • Enforce strict tagging governance across multiple layers (Authoring, Build, API via Service Control Policies/Tag Policies, and Runtime via AWS Config) to ensure accurate resource attribution and compliance. • Secure and govern the AWS account vending process, ensuring newly provisioned accounts automatically inherit clean security baselines, delegated administrator configurations, and automated suppression rules. • Implement and manage centralized network security controls at scale using AWS Firewall Manager via Terraform. • Develop secure CI/CD reference pipelines, integrating automated static analysis and security scanning gates to block non-compliant infrastructure deployments. • Transition manual security reviews to continuous, automated assessments using AWS Security Hub (CSPM), AWS Config, and AWS Security Agent. • Rationalize and manage AWS Config conformance packs and Security Hub standards across multi-partition environments (Commercial, GovCloud) to eliminate redundant findings. • Support incident response activities by expanding AWS Security Incident Response (SIR) adoption, configuring auto-triage for GuardDuty/Security Hub findings to reduce alert noise. • Collaborate with platform engineering, network engineering, and security operations teams to define secure architecture patterns, exception handling, and remediation SLAs. Must Have Skills • Experience: 7+ years of overall experience in AWS Cloud platform/infrastructure engineering, with 3-5 years specifically dedicated to cloud security and automation. • AWS Security Services: Deep, hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS, and AWS Firewall Manager. • AWS Governance & Organizations: Strong expertise in AWS Organizations, specifically implementing Service Control Policies (SCPs), Tag Policies, and Delegated Administrator models across multiple accounts. • Security Automation: Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for building event-driven security workflows and auto-remediation scripts. • Scripting: High proficiency in Python (Boto3) and Bash for security automation and API integrations. • Infrastructure as Code (IaC): Strong hands-on experience writing and managing infrastructure using Terraform and AWS CloudFormation. • CI/CD & Pipeline Security: Experience building secure pipelines and integrating IaC static analysis tools such as Checkov, tfsec, cfn-lint, and Conftest. • Multi-Partition Experience: Proven experience managing and securing AWS environments across different partitions, specifically AWS Commercial and AWS GovCloud. • Compliance Frameworks: Strong familiarity with FedRAMP, NIST 800-53, CIS Benchmarks, and AWS Foundational Security Best Practices (FSBP). • ITSM Integration: Experience automating Jira workflows via API/webhooks directly from AWS services to route security findings to engineering teams. • Core Security Concepts: Strong understanding of cloud security models, zero-trust principles, least privilege, encryption, and network security fundamentals. • Soft Skills: Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards). Good to Have Skills • Experience securing multi-cloud (AWS + GCP/Azure) environments. • Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks). • Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog. • Experience with AWS Macie, Detective, and advanced data governance solutions. • Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta). • Familiarity with incident response processes and playbook automation (SOAR). • Experience designing isolation, or exfiltration-prevention controls. • Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty) • Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment. • Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews. If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!