Associate Technical Architect - AWS Cloud Security Platform

Quantiphi Analytics Solution Pvt Ltd; Bengaluru; Hybrid; INR 3,500,000 - 6,000,000; Full time

Job summary

Quantiphi Analytics Solution Pvt Ltd seeks an Associate Technical Architect - Platform to design and secure scalable AWS platform infrastructure. The role focuses on automating security controls, governance, and secure CI/CD pipelines within hybrid environments across Mumbai and Bengaluru.

You will implement event-driven security architectures, enforce tagging governance, and collaborate with cross-functional teams to ensure compliant, scalable cloud operations.

Qualifications

• 7+ years in AWS cloud platform/infrastructure with security focus.
• Hands-on AWS Security Hub, GuardDuty, Config, IAM, KMS, and Firewall Manager.
• Experience with SCPs, Tag Policies, and Delegated Administrator across multiple accounts.

Responsibilities

• Design and secure AWS platform infrastructure using Terraform and AWS CloudFormation.
• Automate security findings routing and auto-remediation with Lambda, EventBridge, and SSM.
• Integrate security tooling with Jira for automated ticketing and policy governance.

Job description

Associate Technical Architect - Platform

While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth. If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi!

Job Location

Mumbai, Bangalore (Offshore) (Hybrid)

Experience

7+ Years

Job Role - AWS Platform Engineer - Security Specialist

Key Responsibilities

Design, build, and secure AWS platform infrastructure using Infrastructure as Code (Terraform and CloudFormation). Design and build event-driven security architectures using AWS EventBridge, AWS Lambda (Python), and AWS Systems Manager (SSM) for automated Security Findings routing and auto-remediation of detective controls. Integrate AWS Security Hub and GuardDuty with ITSM tools (specifically Jira) to build automated, environment-aware ticket creation and routing workflows based on resource tagging and severity. Enforce strict tagging governance across multiple layers (Authoring, Build, API via Service Control Policies/Tag Policies, and Runtime via AWS Config) to ensure accurate resource attribution and compliance. Secure and govern the AWS account vending process, ensuring newly provisioned accounts automatically inherit clean security baselines, delegated administrator configurations, and automated suppression rules. Implement and manage centralized network security controls at scale using AWS Firewall Manager via Terraform. Develop secure CI/CD reference pipelines, integrating automated static analysis and security scanning gates to block non-compliant infrastructure deployments. Transition manual security reviews to continuous, automated assessments using AWS Security Hub (CSPM), AWS Config, and AWS Security Agent. Rationalize and manage AWS Config conformance packs and Security Hub standards across multi-partition environments (Commercial, GovCloud) to eliminate redundant findings. Support incident response activities by expanding AWS Security Incident Response (SIR) adoption, configuring auto-triage for GuardDuty/Security Hub findings to reduce alert noise. Collaborate with platform engineering, network engineering, and security operations teams to define secure architecture patterns, exception handling, and remediation SLAs.

Must Have Skills

Experience: 7+ years of overall experience in AWS Cloud platform/infrastructure engineering, with 3-5 years specifically dedicated to cloud security and automation. AWS Security Services: Deep, hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS, and AWS Firewall Manager. AWS Governance & Organizations: Strong expertise in AWS Organizations, specifically implementing Service Control Policies (SCPs), Tag Policies, and Delegated Administrator models across multiple accounts. Security Automation: Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for building event-driven security workflows and auto-remediation scripts. Scripting: High proficiency in Python (Boto3) and Bash for security automation and API integrations. Infrastructure as Code (IaC): Strong hands-on experience writing and managing infrastructure using Terraform and AWS CloudFormation. CI/CD & Pipeline Security: Experience building secure pipelines and integrating IaC static analysis tools such as Checkov, tfsec, cfn-lint, and Conftest. Multi-Partition Experience: Proven experience managing and securing AWS environments across different partitions, specifically AWS Commercial and AWS GovCloud. Compliance Frameworks: Strong familiarity with FedRAMP, NIST 800-53, CIS Benchmarks, and AWS Foundational Security Best Practices (FSBP). ITSM Integration: Experience automating Jira workflows via API/webhooks directly from AWS services to route security findings to engineering teams. Core Security Concepts: Strong understanding of cloud security models, zero-trust principles, least privilege, encryption, and network security fundamentals. Soft Skills: Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards).

Good to Have Skills

Experience securing multi-cloud (AWS + GCP/Azure) environments. Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks). Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog. Experience with AWS Macie, Detective, and advanced data governance solutions. Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta). Familiarity with incident response processes and playbook automation (SOAR). Experience designing isolation, or exfiltration-prevention controls. Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty). Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment. Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews.

Experience Level

Mid Level