Associate Technical Architect - Platform

Quantiphi; Bengaluru; Ibrido; INR 350.000 - 750.000; Tempo pieno

Descrizione del lavoro

Quantiphi in Mumbai/Bangalore (Hybrid) seeks an experienced AWS Platform Engineer – Security Specialist to design, secure, and govern cloud infrastructure. You will implement event-driven security, automate remediation, and integrate Security Hub with Jira for incident workflow automation.

The role emphasizes SCPs, tagging governance, multi-partition security, and scalable security patterns across teams, with strong collaboration across engineering and security functions.

Competenze

• 7+ years of overall experience in AWS Cloud platform/infrastructure engineering.
• 3–5 years specifically dedicated to cloud security and automation.
• Deep, hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS, and AWS Firewall Manager.
• IaC with Terraform and AWS CloudFormation.
• Proficient in Python (Boto3) and Bash for security automation.

Mansioni

• Design, build, and secure AWS platform infrastructure using IaC (Terraform and CloudFormation).
• Create event-driven security architectures with EventBridge, Lambda (Python), and SSM for auto-remediation.
• Integrate AWS Security Hub and GuardDuty with Jira-based ITSM workflows.
• Enforce tagging governance and secure account vending baselines.
• Implement centralized network security controls via AWS Firewall Manager.
• Develop secure CI/CD pipelines with IaC static analysis (Checkov, tfsec, etc.).
• Collaborate with platform, network, and security teams on secure patterns and SLAs.
• Support incident response with SIR adoption and auto-triage for findings.

Conoscenze

AWS Security Hub

GuardDuty

AWS Config

Terraform

CloudFormation

EventBridge

Python (Boto3)

Bash scripting

Jira

Checkov

tfsec

cfn-lint

Conftest

Strumenti

Jira

Checkov

tfsec

cfn-lint

Conftest

Descrizione del lavoro

While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth.If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi!Job Location: Mumbai, Bangalore (Offshore) (Hybrid)Experience : 7+ YearsJob Role - AWS Platform Engineer – Security SpecialistKey ResponsibilitiesDesign, build, and secure AWS platform infrastructure using Infrastructure as Code (Terraform and CloudFormation).Design and build event-driven security architectures using AWS EventBridge, AWS Lambda (Python), and AWS Systems Manager (SSM) for automated Security Findings routing and auto-remediation of detective controls.Integrate AWS Security Hub and GuardDuty with ITSM tools (specifically Jira) to build automated, environment-aware ticket creation and routing workflows based on resource tagging and severity.Enforce strict tagging governance across multiple layers (Authoring, Build, API via Service Control Policies/Tag Policies, and Runtime via AWS Config) to ensure accurate resource attribution and compliance.Secure and govern the AWS account vending process, ensuring newly provisioned accounts automatically inherit clean security baselines, delegated administrator configurations, and automated suppression rules.Implement and manage centralized network security controls at scale using AWS Firewall Manager via Terraform.Develop secure CI/CD reference pipelines, integrating automated static analysis and security scanning gates to block non-compliant infrastructure deployments.Transition manual security reviews to continuous, automated assessments using AWS Security Hub (CSPM), AWS Config, and AWS Security Agent.Rationalize and manage AWS Config conformance packs and Security Hub standards across multi-partition environments (Commercial, GovCloud) to eliminate redundant findings.Support incident response activities by expanding AWS Security Incident Response (SIR) adoption, configuring auto-triage for GuardDuty/Security Hub findings to reduce alert noise.Collaborate with platform engineering, network engineering, and security operations teams to define secure architecture patterns, exception handling, and remediation SLAs.Must Have SkillsExperience: 7+ years of overall experience in AWS Cloud platform/infrastructure engineering, with 3-5 years specifically dedicated to cloud security and automation.AWS Security Services: Deep, hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS, and AWS Firewall Manager.AWS Governance & Organizations: Strong expertise in AWS Organizations, specifically implementing Service Control Policies (SCPs), Tag Policies, and Delegated Administrator models across multiple accounts.Security Automation: Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for building event-driven security workflows and auto-remediation scripts.Scripting: High proficiency in Python (Boto3) and Bash for security automation and API integrations.Infrastructure as Code (IaC): Strong hands-on experience writing and managing infrastructure using Terraform and AWS CloudFormation.CI/CD & Pipeline Security: Experience building secure pipelines and integrating IaC static analysis tools such as Checkov, tfsec, cfn-lint, and Conftest.Multi-Partition Experience: Proven experience managing and securing AWS environments across different partitions, specifically AWS Commercial and AWS GovCloud.Compliance Frameworks: Strong familiarity with FedRAMP, NIST 800-53, CIS Benchmarks, and AWS Foundational Security Best Practices (FSBP).ITSM Integration: Experience automating Jira workflows via API/webhooks directly from AWS services to route security findings to engineering teams.Core Security Concepts: Strong understanding of cloud security models, zero-trust principles, least privilege, encryption, and network security fundamentals.Soft Skills: Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards).Good to Have SkillsExperience securing multi-cloud (AWS + GCP/Azure) environments.Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks).Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog.Experience with AWS Macie, Detective, and advanced data governance solutions.Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta).Familiarity with incident response processes and playbook automation (SOAR).Experience designing isolation, or exfiltration-prevention controls.Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty)Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment.Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews.If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!