Associate Technical Architect - Platform
Read straight from Quantiphi's careers page, verified 3d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationIN KA Bengaluru; IN MH Mumbai Eureka
Work modehybrid
SenioritySenior
Experience7+ yrs
Company size1,001–5,000 people
PostedOct 15, 2026 · 3w ago
Verified live3d ago
At a glanceSummarised by Seekless from the posting.
7+ years of overall experience in AWS Cloud platform/infrastructure engineering
3-5 years specifically dedicated to cloud security and automation
Deep hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS, and AWS Firewall Manager
Strong expertise in AWS Organizations, specifically implementing Service Control Policies, Tag Policies, and Delegated Administrator models
Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM for event-driven security workflows and auto-remediation
High proficiency in Python (Boto3) and Bash for security automation and API integrations
Strong hands-on experience writing and managing infrastructure using Terraform and AWS CloudFormation
Experience building secure pipelines and integrating IaC static analysis tools such as Checkov, tfsec, cfn-lint, and Conftest
Proven experience managing and securing AWS environments across AWS Commercial and AWS GovCloud
Strong familiarity with FedRAMP, NIST 800-53, CIS Benchmarks, and AWS Foundational Security Best Practices
Experience automating Jira workflows via API/webhooks from AWS services
Strong understanding of cloud security models, zero-trust principles, least privilege, encryption, and network security fundamentals
Excellent communication and collaboration skills
Experience securing multi-cloud (AWS + GCP/Azure) environments
Experience with container security for ECS/EKS
Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog
Experience with AWS Macie, Detective, and advanced data governance solutions
Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta)
Familiarity with incident response processes and playbook automation (SOAR)
Experience designing isolation or exfiltration-prevention controls
Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty)
Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment
Hands-on knowledge of security incident management
Skills
AWS
Terraform
CloudFormation
AWS EventBridge
AWS Lambda
Python
AWS Systems Manager
AWS Security Hub
GuardDuty
Jira
Service Control Policies
Tag Policies
AWS Config
AWS Firewall Manager
CI/CD
Checkov
tfsec
cfn-lint
Conftest
AWS Organizations
IAM
KMS
Boto3
Bash
FedRAMP
NIST 800-53
CIS Benchmarks
AWS Foundational Security Best Practices
AWS Security Agent
AWS Macie
Sumo Logic
Splunk
Datadog
Azure AD
Okta
SOAR
GCP
Azure
ECS
EKS
About the company
While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth.
If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi!
Job Location: Mumbai, Bangalore (Offshore) (Hybrid)
Experience : 7+ Years
Job Role - AWS Platform Engineer – Security Specialist
Key Responsibilities
•
Design, build, and secure AWS platform infrastructure using Infrastructure as Code (Terraform and CloudFormation).
•
Design and build event-driven security architectures using AWS EventBridge, AWS Lambda (Python), and AWS Systems Manager (SSM) for automated Security Findings routing and auto-remediation of detective controls.
•
Integrate AWS Security Hub and GuardDuty with ITSM tools (specifically Jira) to build automated, environment-aware ticket creation and routing workflows based on resource tagging and severity.
•
Enforce strict tagging governance across multiple layers (Authoring, Build, API via Service Control Policies/Tag Policies, and Runtime via AWS Config) to ensure accurate resource attribution and compliance.
•
Secure and govern the AWS account vending process, ensuring newly provisioned accounts automatically inherit clean security baselines, delegated administrator configurations, and automated suppression rules.
•
Implement and manage centralized network security controls at scale using AWS Firewall Manager via Terraform.
•
Develop secure CI/CD reference pipelines, integrating automated static analysis and security scanning gates to block non-compliant infrastructure deployments.
•
Transition manual security reviews to continuous, automated assessments using AWS Security Hub (CSPM), AWS Config, and AWS Security Agent.
•
Rationalize and manage AWS Config conformance packs and Security Hub standards across multi-partition environments (Commercial, GovCloud) to eliminate redundant findings.
•
Support incident response activities by expanding AWS Security Incident Response (SIR) adoption, configuring auto-triage for GuardDuty/Security Hub findings to reduce alert noise.
•
Collaborate with platform engineering, network engineering, and security operations teams to define secure architecture patterns, exception handling, and remediation SLAs.
Must Have Skills
•
Experience: 7+ years of overall experience in AWS Cloud platform/infrastructure engineering, with 3-5 years specifically dedicated to cloud security and automation.
•
AWS Security Services: Deep, hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS, and AWS Firewall Manager.
•
AWS Governance & Organizations: Strong expertise in AWS Organizations, specifically implementing Service Control Policies (SCPs), Tag Policies, and Delegated Administrator models across multiple accounts.
•
Security Automation: Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for building event-driven security workflows and auto-remediation scripts.
•
Scripting: High proficiency in Python (Boto3) and Bash for security automation and API integrations.
•
Infrastructure as Code (IaC): Strong hands-on experience writing and managing infrastructure using Terraform and AWS CloudFormation.
•
CI/CD & Pipeline Security: Experience building secure pipelines and integrating IaC static analysis tools such as Checkov, tfsec, cfn-lint, and Conftest.
•
Multi-Partition Experience: Proven experience managing and securing AWS environments across different partitions, specifically AWS Commercial and AWS GovCloud.
•
Compliance Frameworks: Strong familiarity with FedRAMP, NIST 800-53, CIS Benchmarks, and AWS Foundational Security Best Practices (FSBP).
•
ITSM Integration: Experience automating Jira workflows via API/webhooks directly from AWS services to route security findings to engineering teams.
•
Core Security Concepts: Strong understanding of cloud security models, zero-trust principles, least privilege, encryption, and network security fundamentals.
•
Soft Skills: Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards).
Good to Have Skills
•
Experience securing multi-cloud (AWS + GCP/Azure) environments.
•
Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks).
•
Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog.
•
Experience with AWS Macie, Detective, and advanced data governance solutions.
•
Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta).
•
Familiarity with incident response processes and playbook automation (SOAR).
•
Experience designing isolation, or exfiltration-prevention controls.
•
Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty)
•
Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment.
•
Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews.
If you like wild growth and working with happy, enthusiastic over-achievers, you’ll enjoy your career with us*!*