We are seeking an AWS Architecture & Key Management expert to design, validate, and deliver the next‑generation C3 encryption solution on AWS, equivalent to SG’s existing Azure‑based service. This role is critical to enabling regulated workloads for platforms in public cloud.
The specialist will be the subject-matter expert (SME) for AWS Key Management Services, XKS (External Key Store), HSM (CloudHSM/Thales), and cloud encryption architectures. They will lead solution design, deployment, automation, validation, and production readiness—while also upskilling team members and ensuring alignment with SG’s internal cloud and security standards. You will work closely with Cloud, OSM, Architecture, and Security Governance teams across Paris, Bangalore, and Bucharest.
Required Skills & Technical Expertise
Core AWS Cryptography Expertise
- AWS KMS , External Key Store (XKS) , CloudHSM , key lifecycle management.
- Integration with Thales HSMs and enterprise-grade encryption architectures.
Cloud Architecture & Security
- Strong cloud architecture knowledge (AWS, Azure concepts an advantage).
- Experience designing secure cloud services for regulated workloads.
- Strong understanding of IAM, VPC security, encryption-in-transit/at-rest, and compliance frameworks.
DevOps & Automation
- Experience with IaC and CI/CD pipelines (Terraform, CloudFormation, GitHub Actions, or Azure DevOps).
- Background in automation for deployment, monitoring, and configuration at scale.
Cross-Team Collaboration
- Ability to work with Architecture, Cloud, OSM, Governance, and Security Compliance teams.
- Strong experience leading POCs, pilots, and service transition activities.
Governance & Operating Model
- Experience defining operational models, service governance, risk assessments, and audit documentation.
Preferred Qualifications
- Experience with enterprise HSM solutions (Thales, Luna, or equivalent).
- AWS Solutions Architect – Professional
