Associate Technical Architect - Platform

While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth.


If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi!

Job Location: Mumbai, Bangalore (Offshore) (Hybrid)

Experience : 7+ Years

Job Role - AWS Platform Engineer – Security Specialist

Key Responsibilities

• Design, build, and secureAWS platform infrastructure usingInfrastructure as Code (Terraform andCloudFormation).
• Design and buildevent-driven security architectures using AWS EventBridge, AWS Lambda (Python), and AWS Systems Manager (SSM) forautomated Security Findings routing and auto-remediation of detective controls.
• IntegrateAWS Security Hub andGuardDuty with ITSM tools (specificallyJira) to build automated, environment-aware ticket creation and routing workflows based on resource tagging and severity.
• Enforce stricttagging governance across multiple layers (Authoring, Build, API viaService Control Policies/Tag Policies, and Runtime viaAWS Config) to ensure accurate resource attribution and compliance.
• Secure and govern theAWS account vending process, ensuring newly provisioned accounts automatically inherit clean security baselines, delegated administrator configurations, and automated suppression rules.
• Implement and manage centralized network security controls at scale usingAWS Firewall Manager viaTerraform.
• Develop secureCI/CD reference pipelines, integratingautomated static analysis and security scanning gates to block non-compliant infrastructure deployments.
• Transition manual security reviews to continuous, automated assessments usingAWS Security Hub (CSPM),AWS Config, andAWS Security Agent.
• Rationalize and manageAWS Config conformance packs and Security Hub standards across multi-partition environments (Commercial, GovCloud) to eliminate redundant findings.
• Support incident response activities by expandingAWS Security Incident Response (SIR) adoption, configuring auto-triage for GuardDuty/Security Hub findings to reduce alert noise.
• Collaborate with platform engineering, network engineering, and security operations teams to define secure architecture patterns, exception handling, and remediation SLAs.

Must Have Skills

• Experience: 7+ years of overall experience inAWS Cloud platform/infrastructure engineering, with3-5 years specifically dedicated tocloud security and automation.
• AWS Security Services: Deep, hands-on knowledge ofAWS Security Hub, GuardDuty, AWS Config, IAM, KMS, andAWS Firewall Manager.
• AWS Governance & Organizations: Strong expertise inAWS Organizations, specifically implementingService Control Policies (SCPs),Tag Policies, andDelegated Administrator models across multiple accounts.
• Security Automation: Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for buildingevent-driven security workflows and auto-remediation scripts.
• Scripting: High proficiency inPython (Boto3) andBash for security automation and API integrations.
• Infrastructure as Code (IaC): Strong hands-on experience writing and managing infrastructure usingTerraform andAWS CloudFormation.
• CI/CD & Pipeline Security: Experience building secure pipelines and integrating IaC static analysis tools such asCheckov, tfsec, cfn-lint, andConftest.
• Multi-Partition Experience: Proven experience managing and securing AWS environments across different partitions, specificallyAWS Commercial andAWS GovCloud.
• Compliance Frameworks: Strong familiarity withFedRAMP, NIST 800-53, CIS Benchmarks, andAWS Foundational Security Best Practices (FSBP).
• ITSM Integration: Experience automatingJira workflows via API/webhooks directly from AWS services to route security findings to engineering teams.
• Core Security Concepts: Strong understanding ofcloud security models, zero-trust principles, least privilege, encryption, andnetwork security fundamentals.
• Soft Skills: Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards).

Good to Have Skills

• Experience securing multi-cloud (AWS + GCP/Azure) environments.
• Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks).
• Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog.
• Experience with AWS Macie, Detective, and advanced data governance solutions.
• Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta).
• Familiarity with incident response processes and playbook automation (SOAR).
• Experience designing isolation, or exfiltration-prevention controls.
• Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty)
• Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment.
• Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!