Senior AWS Security Consultant

Quantiphi; United States; Remote; USD 150,000 - 220,000; Full time

Job summary

Quantiphi is seeking a Senior AWS Security & Platform consultant to design, deploy, and enforce the Cedar policy engine across the AI OU (15+ AWS accounts).

You will implement non-human identity (NHI) models with Saviynt governance, OAuth 2.0/Entra ID agent authentication, and pen test governance controls during hardening.

Strong experience with IAM, SCPs, GuardDuty, Config, and Terraform is required, with an emphasis on zero-trust, least privilege, and cross-account security.

Qualifications

• 7+ years of overall experience in AWS Cloud platform/infrastructure engineering, with 3-5 years specifically in cloud security and automation.

Responsibilities

• Design Cedar policy engine across the AI OU (15+ AWS accounts).
• Non-human identity (NHI) model for agents, with Saviynt governance integration.
• OAuth 2.0 / Entra ID agent authentication; just-in-timeCredentials; agent-to-agent trust framework.
• Pen testing of governance controls during hardening.

Skills

AWS Security Hub

GuardDuty

AWS Config

IAM

KMS

Service Control Policies

EventBridge

Lambda

SSM

Terraform

CloudFormation

Checkov

tfsec

cfn-lint

Conftest

AWS GovCloud

FedRAMP

NIST 800-53

CIS Benchmarks

Jira API

Zero-trust

Job description

Quantiphi is an award-winning, AI-First digital engineering and consulting company focused on delivering high-impact Services and Solutions that help organizations solve what truly matters. We partner with enterprises to reimagine their businesses through intelligent, scalable, and transformative AI driving measurable outcomes at the very core of their operations.

Since our founding in 2013, Quantiphi has tackled some of the world’s most complex business challenges by combining deep industry expertise, disciplined cloud and data engineering practices, and cutting-edge applied AI research. Our work is rooted in delivering accelerated, quantifiable business value, not just technology for technology’s sake.

Headquartered in Boston, Quantiphi is a global organization with 4,000+ professionals serving clients across key industry verticals, including BFSI, Healthcare & Life Sciences, CPG, MFG, TME etc. As an Elite and Premier partner to leading cloud and AI platforms such as NVIDIA, Google Cloud, AWS, and Snowflake, we build and deliver enterprise-grade AI services and solutions that create real-world impact.

We’ve been recognized with:

• 21x Google Cloud Partner of the Year awards in the last 8 years.
• 3x AWS AI/ML award wins.
• 3x NVIDIA Partner of the Year titles.
• 2x Snowflake Partner of the Year awards.
• We have also garnered top analyst recognitions from Gartner, ISG, and Everest Group.
• We offer first-in-class industry solutions across Healthcare, Financial Services, Consumer Goods, Manufacturing, and more, powered by cutting-edge Generative AI and Agentic AI accelerators.
• We have been certified as a Great Place to Work for the third year in a row- 2021, 2022, 2023.

Be part of a trailblazing team that’s shaping the future of AI, ML, and cloud innovation.

Your next big opportunity starts here!

Role: Senior AWS Security & Platform consultant

Experience Level: 8+ years

Employment type: Full Time

Location: Remote (USA)

Description

Designing, deploying and enforcing the Cedar policy engine across the AI OU (15+ AWS accounts)Non-human identity (NHI) model for agents, with Saviynt governance integrationOAuth 2.0 / Entra ID agent authentication, just-in-time credentials, agent-to-agent trust frameworkPen testing of the new governance controls during hardening. Skills: Cedar, SCPs/permission boundaries, IAM, Saviynt, Entra ID, identity architecture

Basic Qualifications

• Experience: 7+ years of overall experience in AWS Cloud platform/infrastructure engineering, with 3-5 years specifically dedicated to cloud security and automation.
• AWS Security Services: Deep, hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS, and AWS Firewall Manager.
• AWS Governance & Organizations: Strong expertise in AWS Organizations, specifically implementing Service Control Policies (SCPs), Tag Policies, and Delegated Administrator models across multiple accounts.
• Security Automation: Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for building event-driven security workflows and auto-remediation scripts.
• Scripting: High proficiency in Python (Boto3) and Bash for security automation and API integrations.
• Infrastructure as Code (IaC): Strong hands-on experience writing and managing infrastructure using Terraform and AWS CloudFormation.
• CI/CD & Pipeline Security: Experience building secure pipelines and integrating IaC static analysis tools such as Checkov, tfsec, cfn-lint, and Conftest.
• Multi-Partition Experience: Proven experience managing and securing AWS environments across different partitions, specifically AWS Commercial and AWS GovCloud.
• Compliance Frameworks: Strong familiarity with FedRAMP, NIST 800-53, CIS Benchmarks, and AWS Foundational Security Best Practices (FSBP).
• ITSM Integration: Experience automating Jira workflows via API/webhooks directly from AWS services to route security findings to engineering teams.
• Core Security Concepts: Strong understanding of cloud security models, zero-trust principles, least privilege, encryption, and network security fundamentals.

Soft Skills

• Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards).

Preferred Qualifications

• Experience securing multi-cloud (AWS + GCP/Azure) environments.
• Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks).
• Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog.
• Experience with AWS Macie, Detective, and advanced data governance solutions.
• Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta).
• Familiarity with incident response processes and playbook automation (SOAR).
• Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment.
• Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews.

Certifications - Good to have

• Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty)
• AWS Certified Security – Specialty

What is in it for you

• Be part of the fastest-growing AI-first digital transformation and engineering company in the world.
• Be a leader of an energetic team of highly dynamic and talented individuals.
• Exposure to working with fortune 500 companies and innovative market disruptors.
• Exposure to the latest technologies related to artificial intelligence and machine learning, data and cloud.