Associate Technical Architect - Platform
Quantiphi
IN KA Bengaluru; IN MH Mumbai EurekaPosted 3 days agoDiscoveredMatch locked
Full time3+ years exp
About the role
While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth.
If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi!
Key Responsibilities
- Design, build, and secure
AWS platform infrastructure
using
Infrastructure as Code
(
Terraform
and
CloudFormation
).
- Design and build
event-driven security architectures
using AWS EventBridge, AWS Lambda (Python), and AWS Systems Manager (SSM) for
automated Security Findings routing and auto-remediation of detective controls
.
- Integrate
AWS Security Hub
and
GuardDuty
with ITSM tools (specifically
Jira
) to build automated, environment-aware ticket creation and routing workflows based on resource tagging and severity.
- Enforce strict
tagging governance
across multiple layers (Authoring, Build, API via
Service Control Policies/Tag Policies
, and Runtime via
AWS Config
) to ensure accurate resource attribution and compliance.
- Secure and govern the
AWS account vending process
, ensuring newly provisioned accounts automatically inherit clean security baselines, delegated administrator configurations, and automated suppression rules.
- Implement and manage centralized network security controls at scale using
AWS Firewall Manager
via
Terraform
.
- Develop secure
CI/CD reference pipelines
, integrating
automated static analysis
and security scanning gates to block non-compliant infrastructure deployments.
- Transition manual security reviews to continuous, automated assessments using
AWS Security Hub (CSPM)
,
AWS Config
, and
AWS Security Agent
.
- Rationalize and manage
AWS Config conformance packs
and Security Hub standards across multi-partition environments (
Commercial, GovCloud
) to eliminate redundant findings.
- Support incident response activities by expanding
AWS Security Incident Response (SIR)
adoption, configuring auto-triage for GuardDuty/Security Hub findings to reduce alert noise.
- Collaborate with platform engineering, network engineering, and security operations teams to define secure architecture patterns, exception handling, and remediation SLAs.
Must Have Skills
•
Experience: 7+ years
of overall experience in
AWS Cloud platform/infrastructure engineering
, with
3-5 years
specifically dedicated to
cloud security and automation
.
•
AWS Security Services
Deep, hands-on knowledge of
AWS Security Hub, GuardDuty, AWS Config, IAM, KMS
, and
AWS Firewall Manager
.
•
AWS Governance & Organizations
Strong expertise in
AWS Organizations
, specifically implementing
Service Control Policies (SCPs)
,
Tag Policies
, and
Delegated Administrator models
across multiple accounts.
•
Security Automation
Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for building
event-driven security workflows and auto-remediation scripts
.
•
Scripting
High proficiency in
Python (Boto3)
and
Bash
for security automation and API integrations.
•
Infrastructure as Code (IaC)
Strong hands-on experience writing and managing infrastructure using
Terraform
and
AWS CloudFormation
.
•
CI/CD & Pipeline Security
Experience building secure pipelines and integrating IaC static analysis tools such as
Checkov, tfsec, cfn-lint
, and
Conftest
.
•
Multi-Partition Experience
Proven experience managing and securing AWS environments across different partitions, specifically
AWS Commercial
and
AWS GovCloud
.
•
Compliance Frameworks
Strong familiarity with
FedRAMP, NIST 800-53, CIS Benchmarks
, and
AWS Foundational Security Best Practices (FSBP)
.
•
ITSM Integration
Experience automating
Jira workflows
via API/webhooks directly from AWS services to route security findings to engineering teams.
•
Core Security Concepts
Strong understanding of
cloud security models, zero-trust principles, least privilege, encryption
, and
network security fundamentals
.
•
Soft Skills
Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards).
Good to Have Skills
- Experience securing multi-cloud (AWS + GCP/Azure) environments.
- Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks).
- Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog.
- Experience with AWS Macie, Detective, and advanced data governance solutions.
- Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta).
- Familiarity with incident response processes and playbook automation (SOAR).
- Experience designing isolation, or exfiltration-prevention controls.
- Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty)
- Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment.
- Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews.
If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us !
Not included in the source posting: about the role, benefits.
Skills
awsazureiamterraformci-cdjirapythonbashcisspgcpoktasiem
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.