24 of 24 AWS KMS Jobs in London

# AWS Data Solution ArchitectBirmingham, Bristol, Newcastle Bank House, Manchester, LondonApply for this job* Permanent* Experienced Professionals* Architecture* ID 466372-en\_GB## **Who You'll Be Working With**As an AWS Data Solution Architect at Capgemini, you will design and lead the delivery of modern data … trusted, auditable data products.* Own security architecture for data platforms: Design identity, access, and secrets management (e.g., AWS IAM, IAM Identity Center, KMS, Secrets Manager) and apply network and monitoring controls appropriate for sensitive public sector workloads.* Embed engineering excellence: Define CI/CD and release management ...

seeking a Senior DevOps Engineer to join our data migration project, which aims to transition data from Legacy databases to the AWS cloud. This role is specifically for candidates who have active SC clearance. The Senior DevOps Engineer will focus on building and maintaining the infrastructure and automation … such as S3, RDS (Oracle), and AWS Glue are configured securely and efficiently. Experience in implementing AWS Secrets, Parameter Stores, KMS, and client side encryption. Ensure least privilege for running a service in production without root/admin access. Collaboration and Support Collaborate with architecture ...

Security and Compliance Solutions Architect at AWS, you’ll build technical relationships with customers of all sizes and operate as their trusted advisor, ensuring they get the most out of the cloud at every stage of their journey.You’ll manage the overall technical security relationship between AWS … accelerate their challenging projects.Internally, you will be the voice of the customer, sharing their needs and wants to inform the roadmap of AWS security services and features.In this role, your creativity will build effective design patterns addressing customer challenges, with the opportunity to define or invent cloud-native ...

learning never stops.Role OverviewThe Senior Security Engineer will play a central role in securing Docebo's cloud infrastructure, with a primary focus on AWS environments. Working closely with Cloud Infrastructure & Operations, Engineering, and other security teams, this role is responsible for designing, implementing, and continuously improving cloud security … focus on cloud security in production AWS environments.Deep hands-on experience with AWS security services: IAM, SCPs, CloudTrail, GuardDuty, Config, KMS, VPC security, and more.Good knowledge of Kubernetes security — including RBAC, pod security standards, network policies, admission controllers, and secrets management.Experience with cloud security posture ...

Responsibilities Identity and Access Management (IAM) Design, implement, and maintain Identity and Access Management (IAM) solutions, including Microsoft Entra ID, Entra Identity Governance, AWS IAM Identity Centre, and supporting authentication and authorisation services. Manage permission settings and access controls to ensure secure and efficient user access to company … AWS environments using services such as IAM, Security Hub, GuardDuty, CloudTrail, Config, AWS Organizations, Route 53, and Key Management Service (KMS). Microsoft 365 and Azure Security: Strong experience with Microsoft security technologies including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Intune, Entra ID, Azure ...

relationships. DevOps Mastery: Deep understanding of DevOps principles and how they transform businesses. People Leadership: Experience managing people and mentoring less experienced colleagues. AWS Expertise: Extensive hands-on experience with AWS and ability to articulate best practices for building secure, scalable platforms. Able to articulate … implement complex cloud platforms incorporating legacy workloads, microservices and containerisation. CI/CD Pro: Proven experience with tools like GitHub, GitLab, or AWS DevOps Tooling, and expertise in deployment automation/orchestration. Networking Knowledge: Expert with networking concepts and how they translate to cloud environments: Virtual Networks, routing ...

relationships. DevOps Mastery: Deep understanding of DevOps principles and how they transform businesses. People Leadership: Experience managing people and mentoring less experienced colleagues. AWS Expertise: Extensive hands-on experience with AWS and ability to articulate best practices for building secure, scalable platforms. Able to articulate … implement complex cloud platforms incorporating legacy workloads, microservices and containerisation. CI/CD Pro: Proven experience with tools like GitHub, GitLab, or AWS DevOps Tooling, and expertise in deployment automation/orchestration. Networking Knowledge: Expert with networking concepts and how they translate to cloud environments: Virtual Networks, routing ...

endpoint channels (e.g., using Microsoft, Broadcom, ForcePoint)· Data classification and data discovery· Digital Rights Management (e.g., using Microsoft)· Data security across Azure, AWS, Oracle, and Google Cloud, utilising third-party DLP tools … such as Microsoft, Broadcom, ForcePoint) and/or native cloud capabilities.· Encryption technologies such as KeyFactor, HashiCorp Vault, AWS Key Management Service (KMS) and Azure Key Vault.· Data Security Posture Management and Data Governance tools such as Microsoft, Varonis and BigID for data discovery, classification, access monitoring ...

Explore and implement AI-driven automation for infrastructure efficiency and team productivity. Требования 5+ Years of experience in cloud engineering roles with significant AWS expertise; Advanced hands … experience designing and operating enterprise‐scale AWS production infrastructure; Experience with multi‐account AWS architectures, Control Tower, Organizations, SCPs, IAM, KMS, compute, storage, and security services; Proven experience delivering resilient multi‐region architectures; Production experience with Azure, including landing zones, VNet architectures, Entra ID, resource ...

work directly with Product and Engineering teams to translate HIPAA and SOC 2 requirements into technical security controls across Flo's AWS multi-account environment - including EKS, Lambda, RDS, S3, VPC networking, IAM, and KMS.You'll own the roadmap for HIPAA compliance and SOC 2 Type II certification … leadership capacity), with a Bachelor's degree in a related field or equivalent experience.Deep expertise in SOC 2 and HIPAA frameworks within the AWS environment.Familiarity with PHI handling, GRC and compliance automation platforms, and exposure to enterprise architecture frameworks such as TOGAF.Strong ability to manage multiple concurrent audit ...

Quantum & Cryptography Principal Sales Specialist, UK Public Sector Job ID: 10463868 | AWS EMEA SARL (UK Branch) AWS is looking for a Principal Quantum & Cryptography Sales Specialist to lead the adoption of quantum computing, cryptography, and cybersecurity services across the full breadth of UK Public Sector — spanning … strategy for AWS quantum, cryptography, and cybersecurity services including Amazon Braket, post-quantum TLS, AWS Security Hub, GuardDuty, KMS, and CloudHSM Work with senior public sector leaders to position AWS as the platform of choice for cybersecurity resilience and quantum-safe transformation Operate ...

infrastructure we built. At Checkout.com, the Cloud Platform team owns the cloud foundations that global payments depend on: a large multi-account AWS estate, a growing Azure platform, and the networking and connectivity that reaches card schemes and banks worldwide. We are genuinely multi-cloud … Advanced, hands-on experience designing and operating production infrastructure in AWS at enterprise scale: multi-account architectures (Control Tower, Organizations, SCPs), IAM, KMS, and the core compute, storage, and security services that a large regulated estate runs on. You should have a proven track record of delivering ...

infrastructure we built. At Checkout.com, the Cloud Platform team owns the cloud foundations that global payments depend on: a large multi-account AWS estate, a growing Azure platform, and the networking and connectivity that reaches card schemes and banks worldwide. We are genuinely multi-cloud … Advanced, hands-on experience designing and operating production infrastructure in AWS at enterprise scale: multi-account architectures (Control Tower, Organizations, SCPs), IAM, KMS, and the core compute, storage, and security services that a large regulated estate runs on. You should have a proven track record of delivering ...

requirements Demonstrable and considerable experience in cloud security architecture (AWS essential and Azure), including IAM design, network segmentation, and secrets/KMS management. Hands-on DevSecOps experience: CI/CD pipeline security, Infrastructure-as-Code scanning, and policy-as-code. Strong hands-on software development and scripting … engineering-led model. Own architecture review and sign-off for all new AWS production changes, including network segmentation, IAM design, and KMS/secrets management etc. Threat-model new cloud services and workloads before go-live, rather than reviewing them after deployment. Own remediation design, not just ...

designed to fully support high-performing teams.Requires participation in an on-call rotation to support business needs.What you’ll doBuild and run the AWS infrastructure behind custody, key management, and blockchain node operations.Automate infrastructure and configuration management (Ansible, Terraform, or similar) so the team spends less time … call support, responding to and resolving production issues to keep custody systems reliable and available.What you bringSenior-level experience running cloud infrastructure (AWS) in production.Experience managing blockchain nodes in production.Hands-on experience with Ansible, Terraform, or similar configuration management and Infrastructure as Code tooling.Experience running containerized workloads ...

support high-performing teams. Requires participation in an on-call rotation to support business needs. What you'll do Build and run the AWS infrastructure behind custody, key management, and blockchain node operations. Automate infrastructure and configuration management (Ansible, Terraform, or similar) so the team spends less time … support, responding to and resolving production issues to keep custody systems reliable and available. What you bring Senior-level experience running cloud infrastructure (AWS) in production. Experience managing blockchain nodes in production. Hands-on experience with Ansible, Terraform, or similar configuration management and Infrastructure as Code tooling. Experience ...

more time on high-impact customer engagements.Qualifications4–10 years of experience in information security, with depth in application security architecture, cloud security (AWS), or security pre-sales/solutioning.Strong understanding of web application frameworks, cloud-native architectures, and SaaS security models.Proven ability to communicate complex security topics clearly … maintenance, and energised by fast-paced, high-growth environmentsTechnical SkillsCloud security architecture and operations, with hands-on depth in AWS (IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub).Web application security fundamentals: OWASP Top 10, secure SDLC, API security, and encryption standards (TLS, AES-256, key management).Working ...

time on high-impact customer engagements. Qualifications 4–10 years of experience in information security, with depth in application security architecture, cloud security (AWS), or security pre-sales/solutioning. Strong understanding of web application frameworks, cloud-native architectures, and SaaS security models. Proven ability to communicate complex … energised by fast-paced, high-growth environments Technical Skills Cloud security architecture and operations, with hands-on depth in AWS (IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub). Web application security fundamentals: OWASP Top 10, secure SDLC, API security, and encryption standards (TLS, AES-256, key management ...

design methodologies. Compliance Knowledge: Familiarity with PCI DSS, NIST, and ISO 27001 frameworks. Desirable Skills: Awareness of AWS security fundamentals (Guard Duty, KMS, IAM Identity Center).Experience with Infrastructure as Code (IaC) security (Terraform, Bicep) and DevSecOps practices. Scripting for automation using PowerShell or Python. Qualifications & Soft ...

secure-by-design methodologies.Compliance Knowledge: Familiarity with PCI DSS, NIST, and ISO 27001 frameworks.Desirable Skills:Awareness of AWS security fundamentals (Guard Duty, KMS, IAM Identity Center).Experience with Infrastructure as Code (IaC) security (Terraform, Bicep) and DevSecOps practices.Scripting for automation using PowerShell or Python.Qualifications & Soft SkillsEducation: Bachelor ...

endpoint channels (e.g., using Microsoft, Broadcom, ForcePoint[AJ1] )Data classification and data discoveryDigital Rights Management (e.g., using Microsoft)Data security across Azure, AWS, Oracle, and Google Cloud, utilising third-party … tools (such as Microsoft, Broadcom, ForcePoint) and/or native cloud capabilities.Encryption technologies such as KeyFactor, HashiCorp Vault, AWS Key Management Service (KMS) and Azure Key Vault.Data Security Posture Management and Data Governance tools such as Microsoft, Varonis and BigID for data discovery, classification, access monitoring ...

SOC2, HITRUST, ISO 27001/2, or similar.Strong understanding of AWS security services and controls (IAM, VPC, KMS, GuardDuty, CloudTrail) and experience securing cloud-native environments and workloads, with the ability to deploy security tools within them.Takes ownership of projects, works independently with minimal oversight, and delivers ...

SOC2, HITRUST, ISO 27001/2, or similar. Strong understanding of AWS security services and controls (IAM, VPC, KMS, GuardDuty, CloudTrail) and experience securing cloud-native environments and workloads, with the ability to deploy security tools within them. Takes ownership of projects, works independently with minimal oversight ...

into our SIEM/SOAR for real-time response.Support secrets and key-management hygiene. You will ensure app/service keys are stored in KMS/Vault, scoped to least privilege and rotated automatically to prevent credential leakage.Assist product security in triage of SAST/SCA findings for FinOps … complex data flows and operational processes.Experience with observability and detection tooling (SIEM, logs, metrics) and ability to write basic detection rules.Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/GCP KMS), IAM patterns and least-privilege.Exceptional ability to translate "Technical Debt" into ...