Remote AWS Security & Platform Architect

Quantiphi; United States; Remote; USD 150,000 - 220,000; Full time

Job summary

Quantiphi is seeking a Senior AWS Security & Platform consultant to design, deploy, and enforce the Cedar policy engine across the AI OU (15+ AWS accounts).

You will implement non-human identity (NHI) models with Saviynt governance, OAuth 2.0/Entra ID agent authentication, and pen test governance controls during hardening.

Strong experience with IAM, SCPs, GuardDuty, Config, and Terraform is required, with an emphasis on zero-trust, least privilege, and cross-account security.

Qualifications

• 7+ years of overall experience in AWS Cloud platform/infrastructure engineering, with 3-5 years specifically in cloud security and automation.

Responsibilities

• Design Cedar policy engine across the AI OU (15+ AWS accounts).
• Non-human identity (NHI) model for agents, with Saviynt governance integration.
• OAuth 2.0 / Entra ID agent authentication; just-in-timeCredentials; agent-to-agent trust framework.
• Pen testing of governance controls during hardening.

Skills

AWS Security Hub

GuardDuty

AWS Config

IAM

KMS

Service Control Policies

EventBridge

Lambda

SSM

Terraform

CloudFormation

Checkov

tfsec

cfn-lint

Conftest

AWS GovCloud

FedRAMP

NIST 800-53

CIS Benchmarks

Jira API

Zero-trust

Job description

Quantiphi is seeking a Senior AWS Security & Platform consultant to design, deploy, and enforce the Cedar policy engine across the AI OU (15+ AWS accounts).

You will implement non-human identity (NHI) models with Saviynt governance, OAuth 2.0/Entra ID agent authentication, and pen test governance controls during hardening.

Strong experience with IAM, SCPs, GuardDuty, Config, and Terraform is required, with an emphasis on zero-trust, least privilege, and cross-account security.