Associate Technical Architect - Platform

Quantiphi Limited; Bengaluru; Ibrido; INR 4.500.000 - 7.500.000; Tempo pieno

Descrizione del lavoro

Quantiphi Limited in Mumbai/Bangalore (Hybrid) seeks an AWS Platform Engineer – Security Specialist with 7+ years of experience to design and secure cloud infrastructure. You will implement IaC using Terraform and CloudFormation, build automated security workflows with Lambda, EventBridge, and SSM, and integrate Security Hub with Jira for efficient ticketing.

The role spans Commercial and GovCloud, emphasizing automation and strong governance.

Competenze

• 7+ years in AWS Cloud platform/infrastructure engineering with 3-5 years in cloud security and automation
• Hands-on with AWS Security Hub, GuardDuty, Config, IAM, KMS, Firewall Manager
• Expertise in AWS Organizations, SCPs, Tag Policies across many accounts
• Experience with event-driven security workflows using EventBridge, Lambda, SSM
• Proficient in Python (Boto3) and Bash for automation
• IaC using Terraform and CloudFormation
• CI/CD pipelines security and IaC static analysis tools (Checkov, tfsec, cfn-lint, Conftest)
• Experience across AWS Commercial and GovCloud partitions
• Familiarity with FedRAMP, NIST 800-53, CIS Benchmarks, FSBBP
• ITSM integration (Jira) through API/webhooks to route findings
• Strong cloud security concepts, zero-trust, least privilege, encryption, network security
• Strong communication and cross-functional collaboration skills

Mansioni

• Design, build, and secure AWS platform infrastructure using IaC (Terraform and CloudFormation)
• Develop event-driven security architectures with EventBridge, Lambda (Python), and SSM for automated findings routing and auto-remediation
• Integrate Security Hub and GuardDuty with Jira for automated, environment-aware ticketing
• Enforce tagging governance across layers for accurate attribution and compliance
• Secure account vending processes with clean baselines and automated rules
• Manage centralized network security controls with AWS Firewall Manager via Terraform
• Build secure CI/CD pipelines with automated security gates and static analysis
• Shift manual reviews to automated assessments using Security Hub, Config, and SSM
• Rationalize conformance packs across Commercial and GovCloud to reduce duplicates
• Support incident response with auto-triage for GuardDuty/Security Hub findings

Conoscenze

AWS Security Hub & GuardDuty

Terraform & CloudFormation

Jira integration

Python (Boto3)

Terraform & CloudFormation

EventBridge & Lambda

AWS Config & SCPs

Security Automation

CI/CD security

Multi-Partition (Commercial & GovCloud

Strumenti

Terraform

CloudFormation

Jira

tfsec

Checkov

cfn-lint

Conftest

Descrizione del lavoro

While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth.

If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi!

Job Location: Mumbai, Bangalore (Offshore) (Hybrid)

Experience : 7+ Years

Job Role - AWS Platform Engineer – Security Specialist

Key Responsibilities

• Design, build, and secure AWS platform infrastructure using Infrastructure as Code ( Terraform and CloudFormation ).
• Design and build event-driven security architectures using AWS EventBridge, AWS Lambda (Python), and AWS Systems Manager (SSM) for automated Security Findings routing and auto-remediation of detective controls .
• Integrate AWS Security Hub and GuardDuty with ITSM tools (specifically Jira ) to build automated, environment-aware ticket creation and routing workflows based on resource tagging and severity.
• Enforce strict tagging governance across multiple layers (Authoring, Build, API via Service Control Policies/Tag Policies , and Runtime via AWS Config ) to ensure accurate resource attribution and compliance.
• Secure and govern the AWS account vending process , ensuring newly provisioned accounts automatically inherit clean security baselines, delegated administrator configurations, and automated suppression rules.
• Implement and manage centralized network security controls at scale using AWS Firewall Manager via Terraform .
• Develop secure CI/CD reference pipelines , integrating automated static analysis and security scanning gates to block non-compliant infrastructure deployments.
• Transition manual security reviews to continuous, automated assessments using AWS Security Hub (CSPM) , AWS Config , and AWS Security Agent .
• Rationalize and manage AWS Config conformance packs and Security Hub standards across multi-partition environments ( Commercial, GovCloud ) to eliminate redundant findings.
• Support incident response activities by expanding AWS Security Incident Response (SIR) adoption, configuring auto-triage for GuardDuty/Security Hub findings to reduce alert noise.
• Collaborate with platform engineering, network engineering, and security operations teams to define secure architecture patterns, exception handling, and remediation SLAs.

Must Have Skills

• Experience: 7+ years of overall experience in AWS Cloud platform/infrastructure engineering , with 3-5 years specifically dedicated to cloud security and automation .
• AWS Security Services: Deep, hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS , and AWS Firewall Manager .
• AWS Governance & Organizations: Strong expertise in AWS Organizations , specifically implementing Service Control Policies (SCPs) , Tag Policies , and Delegated Administrator models across multiple accounts.
• Security Automation: Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for building event-driven security workflows and auto-remediation scripts .
• Scripting: High proficiency in Python (Boto3) and Bash for security automation and API integrations.
• Infrastructure as Code (IaC): Strong hands-on experience writing and managing infrastructure using Terraform and AWS CloudFormation .
• CI/CD & Pipeline Security: Experience building secure pipelines and integrating IaC static analysis tools such as Checkov, tfsec, cfn-lint , and Conftest .
• Multi-Partition Experience: Proven experience managing and securing AWS environments across different partitions, specifically AWS Commercial and AWS GovCloud .
• Compliance Frameworks: Strong familiarity with FedRAMP, NIST 800-53, CIS Benchmarks , and AWS Foundational Security Best Practices (FSBP) .
• ITSM Integration: Experience automating Jira workflows via API/webhooks directly from AWS services to route security findings to engineering teams.
• Core Security Concepts: Strong understanding of cloud security models, zero-trust principles, least privilege, encryption , and network security fundamentals .
• Soft Skills: Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards).

Good to Have Skills

• Experience securing multi-cloud (AWS + GCP/Azure) environments.
• Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks).
• Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog.
• Experience with AWS Macie, Detective, and advanced data governance solutions.
• Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta).
• Familiarity with incident response processes and playbook automation (SOAR).
• Experience designing isolation, or exfiltration-prevention controls.
• Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty)
• Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment.
• Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us !