Skip to content

Open nowPosted 17 days ago

Associate Technical Architect - Platform

Quantiphi76 open roles

Where
IN KA Bengaluru
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAssociate Technical Architect - PlatformQuantiphi · IN KA Bengaluru
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Quantiphi's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.1% of postings close within 7 days. Measured by our own scanner across the market. Quantiphi postings stay open a median of 49 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.1%7 days
  4. 21.1%14 days
  5. 35.7%30 days
  6. 58.7%60 days
This job: posted 17 days ago

Quantiphi median: 49 days open

The posting

While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth.

If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi!

Job Location: Mumbai, Bangalore (Offshore) (Hybrid)

Experience : 7+ Years

Job Role - AWS Platform Engineer – Security Specialist

Key Responsibilities

  • Design, build, and secure AWS platform infrastructure using Infrastructure as Code (Terraform and CloudFormation).
  • Design and build event-driven security architectures using AWS EventBridge, AWS Lambda (Python), and AWS Systems Manager (SSM) for automated Security Findings routing and auto-remediation of detective controls.
  • Integrate AWS Security Hub and GuardDuty with ITSM tools (specifically Jira) to build automated, environment-aware ticket creation and routing workflows based on resource tagging and severity.
  • Enforce strict tagging governance across multiple layers (Authoring, Build, API via Service Control Policies/Tag Policies, and Runtime via AWS Config) to ensure accurate resource attribution and compliance.
  • Secure and govern the AWS account vending process, ensuring newly provisioned accounts automatically inherit clean security baselines, delegated administrator configurations, and automated suppression rules.
  • Implement and manage centralized network security controls at scale using AWS Firewall Manager via Terraform.
  • Develop secure CI/CD reference pipelines, integrating automated static analysis and security scanning gates to block non-compliant infrastructure deployments.
  • Transition manual security reviews to continuous, automated assessments using AWS Security Hub (CSPM), AWS Config, and AWS Security Agent.
  • Rationalize and manage AWS Config conformance packs and Security Hub standards across multi-partition environments (Commercial, GovCloud) to eliminate redundant findings.
  • Support incident response activities by expanding AWS Security Incident Response (SIR) adoption, configuring auto-triage for GuardDuty/Security Hub findings to reduce alert noise.
  • Collaborate with platform engineering, network engineering, and security operations teams to define secure architecture patterns, exception handling, and remediation SLAs.

Must Have Skills

  • Experience: 7+ years of overall experience in AWS Cloud platform/infrastructure engineering, with 3-5 years specifically dedicated to cloud security and automation.
  • AWS Security Services: Deep, hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS, and AWS Firewall Manager.
  • AWS Governance & Organizations: Strong expertise in AWS Organizations, specifically implementing Service Control Policies (SCPs), Tag Policies, and Delegated Administrator models across multiple accounts.
  • Security Automation: Deep hands-on experience with AWS EventBridge, AWS Lambda, and SSM documents for building event-driven security workflows and auto-remediation scripts.
  • Scripting: High proficiency in Python (Boto3) and Bash for security automation and API integrations.
  • Infrastructure as Code (IaC): Strong hands-on experience writing and managing infrastructure using Terraform and AWS CloudFormation.
  • CI/CD & Pipeline Security: Experience building secure pipelines and integrating IaC static analysis tools such as Checkov, tfsec, cfn-lint, and Conftest.
  • Multi-Partition Experience: Proven experience managing and securing AWS environments across different partitions, specifically AWS Commercial and AWS GovCloud.
  • Compliance Frameworks: Strong familiarity with FedRAMP, NIST 800-53, CIS Benchmarks, and AWS Foundational Security Best Practices (FSBP).
  • ITSM Integration: Experience automating Jira workflows via API/webhooks directly from AWS services to route security findings to engineering teams.
  • Core Security Concepts: Strong understanding of cloud security models, zero-trust principles, least privilege, encryption, and network security fundamentals.
  • Soft Skills: Excellent communication and collaboration skills to work across cross-functional engineering, finance, and security teams (e.g., participating in Tag Governance Boards).

Good to Have Skills

  • Experience securing multi-cloud (AWS + GCP/Azure) environments.
  • Experience with container security for ECS/EKS (image scanning, runtime protection, IAM roles for tasks).
  • Knowledge of SIEM platforms like Sumo Logic, Splunk, or Datadog.
  • Experience with AWS Macie, Detective, and advanced data governance solutions.
  • Exposure to zero-trust security, identity federation, and SSO (Azure AD/Okta).
  • Familiarity with incident response processes and playbook automation (SOAR).
  • Experience designing isolation, or exfiltration-prevention controls.
  • Additional security certifications (CISSP, CISM, CCSP, AWS Security Specialty)
  • Understanding of SOC processes, including Tier-1/2/3 triage, playbook execution, case management, ticketing systems, and threat intelligence enrichment.
  • Hands-on knowledge of security incident management, including detection, investigation, containment, eradication, recovery, and post-incident reviews.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Quantiphi's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Quantiphi's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Quantiphi's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.