20 of 20 AWS KMS Jobs in London

# AWS Data Solution ArchitectBirmingham, Bristol, Newcastle Bank House, Manchester, LondonApply for this job* Permanent* Experienced Professionals* Architecture* ID 466372-en\_GB## **Who You'll Be Working With**As an AWS Data Solution Architect at Capgemini, you will design and lead the delivery of modern data … trusted, auditable data products.* Own security architecture for data platforms: Design identity, access, and secrets management (e.g., AWS IAM, IAM Identity Center, KMS, Secrets Manager) and apply network and monitoring controls appropriate for sensitive public sector workloads.* Embed engineering excellence: Define CI/CD and release management ...

seeking a Senior DevOps Engineer to join our data migration project, which aims to transition data from Legacy databases to the AWS cloud. This role is specifically for candidates who have active SC clearance. The Senior DevOps Engineer will focus on building and maintaining the infrastructure and automation … such as S3, RDS (Oracle), and AWS Glue are configured securely and efficiently. Experience in implementing AWS Secrets, Parameter Stores, KMS, and client side encryption. Ensure least privilege for running a service in production without root/admin access. Collaboration and Support Collaborate with architecture ...

technology functions. Experience supporting or implementing encryption, key management, secrets management, certificate management, or cloud security solutions. Familiarity with cloud platforms such as AWS, Microsoft Azure, OCI, or Google Cloud Platform. Experience developing scripts and automation solutions using languages such as Python, PowerShell, Bash, Java, C#, or Go. … risk management principles, secure coding practices, and cybersecurity best practices. Familiarity with cloud-native key management and secrets management technologies, including AWS KMS, Azure Key Vault, Google Cloud KMS, Fortanix DSM, or similar platforms, is preferred. Industry certifications such as AWS Cloud Practitioner, AWS ...

Responsibilities: \n AWS Infrastructure Engineering: \n \n Design, build, and maintain AWS services at scale, including:EC2, EKS, ECR, S3, KMS, VPC, RDS, ElastiCache, OpenSearch, SageMaker, and CloudWatch. \n Maintain and optimise network configurations across VPCs, including transit gateways, subnets, routing, and security groups. … enforce cloud security best practices, including identity and access management, encryption, and secrets governance. \n Manage key lifecycle and cryptographic operations using AWS KMS. \n Participate in vulnerability management processes and remediation work. \n Ensure infrastructure compliance with internal and external security standards. \n \n \n Collaboration & Documentation ...

stops. Role Overview The Senior Security Engineer will play a central role in securing Docebo's cloud infrastructure, with a primary focus on AWS environments. Working closely with Cloud Infrastructure & Operations, Engineering, and other security teams, this role is responsible for designing, implementing, and continuously improving cloud security … cloud security in production AWS environments. Deep hands‐on experience with AWS security services: IAM, SCPs, CloudTrail, GuardDuty, Config, KMS, VPC security, and more. Good knowledge of Kubernetes security - including RBAC, pod security standards, network policies, admission controllers, and secrets management. Experience with cloud security ...

learning never stops.Role OverviewThe Senior Security Engineer will play a central role in securing Docebo's cloud infrastructure, with a primary focus on AWS environments. Working closely with Cloud Infrastructure & Operations, Engineering, and other security teams, this role is responsible for designing, implementing, and continuously improving cloud security … focus on cloud security in production AWS environments.Deep hands-on experience with AWS security services: IAM, SCPs, CloudTrail, GuardDuty, Config, KMS, VPC security, and more.Good knowledge of Kubernetes security — including RBAC, pod security standards, network policies, admission controllers, and secrets management.Experience with cloud security posture ...

SAST, dependency scanning, secrets detection, and PR‐blocking standards across every repository. Harden our AWS and Cloudflare estate: IAM, secrets, network segmentation, KMS, WAF, GuardDuty, and zero‐trust patterns. Run pen testing end‐to‐end: scope and coordinate engagements with both AI‐driven scanners and human researchers … security reviews, and pen test responses. What we’re looking for 3+ years in security engineering with hands‐on AWS security: IAM, KMS, networking, secrets, GuardDuty/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. ...

relationships. DevOps Mastery: Deep understanding of DevOps principles and how they transform businesses. People Leadership: Experience managing people and mentoring less experienced colleagues. AWS Expertise: Extensive hands‐on experience with AWS and ability to articulate best practices for building secure, scalable platforms. Able to articulate … implement complex cloud platforms incorporating legacy workloads, microservices and containerisation. CI/CD Pro: Proven experience with tools like GitHub, GitLab, or AWS DevOps Tooling, and expertise in deployment automation/orchestration. Networking Knowledge: Expert with networking concepts and how they translate to cloud environments: Virtual Networks, routing ...

infrastructure we built. At Checkout.com, the Cloud Platform team owns the cloud foundations that global payments depend on: a large multi-account AWS estate, a growing Azure platform, and the networking and connectivity that reaches card schemes and banks worldwide. We are genuinely multi-cloud … Advanced, hands-on experience designing and operating production infrastructure in AWS at enterprise scale: multi-account architectures (Control Tower, Organizations, SCPs), IAM, KMS, and the core compute, storage, and security services that a large regulated estate runs on. You should have a proven track record of delivering ...

infrastructure we built. At Checkout.com, the Cloud Platform team owns the cloud foundations that global payments depend on: a large multi-account AWS estate, a growing Azure platform, and the networking and connectivity that reaches card schemes and banks worldwide. We are genuinely multi-cloud … Advanced, hands-on experience designing and operating production infrastructure in AWS at enterprise scale: multi-account architectures (Control Tower, Organizations, SCPs), IAM, KMS, and the core compute, storage, and security services that a large regulated estate runs on. You should have a proven track record of delivering ...

requirements Demonstrable and considerable experience in cloud security architecture (AWS essential and Azure), including IAM design, network segmentation, and secrets/KMS management. Hands-on DevSecOps experience: CI/CD pipeline security, Infrastructure-as-Code scanning, and policy-as-code. Strong hands-on software development and scripting … engineering-led model. Own architecture review and sign-off for all new AWS production changes, including network segmentation, IAM design, and KMS/secrets management etc. Threat-model new cloud services and workloads before go-live, rather than reviewing them after deployment. Own remediation design, not just ...

more time on high-impact customer engagements. Qualifications4–10 years of experience in information security, with depth in application security architecture, cloud security (AWS), or security pre-sales/solutioning. Strong understanding of web application frameworks, cloud-native architectures, and SaaS security models. Proven ability to communicate complex … maintenance, and energised by fast-paced, high-growth environmentsTechnical SkillsCloud security architecture and operations, with hands-on depth in AWS (IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub).Web application security fundamentals: OWASP Top 10, secure SDLC, API security, and encryption standards (TLS, AES-256, key management).Working ...

support high-performing teams. Requires participation in an on-call rotation to support business needs. What you'll do Build and run the AWS infrastructure behind custody, key management, and blockchain node operations. Automate infrastructure and configuration management (Ansible, Terraform, or similar) so the team spends less time … support, responding to and resolving production issues to keep custody systems reliable and available. What you bring Senior-level experience running cloud infrastructure (AWS) in production. Experience managing blockchain nodes in production. Hands-on experience with Ansible, Terraform, or similar configuration management and Infrastructure as Code tooling. Experience ...

fully support high-performing teams. Requires participation in an on-call rotation to support business needs. What you'll doBuild and run the AWS infrastructure behind custody, key management, and blockchain node operations. Automate infrastructure and configuration management (Ansible, Terraform, or similar) so the team spends less time … call support, responding to and resolving production issues to keep custody systems reliable and available. What you bringSenior-level experience running cloud infrastructure (AWS) in production. Experience managing blockchain nodes in production. Hands-on experience with Ansible, Terraform, or similar configuration management and Infrastructure as Code tooling. Experience ...

SOC2, HITRUST, ISO 27001/2, or similar.Strong understanding of AWS security services and controls (IAM, VPC, KMS, GuardDuty, CloudTrail) and experience securing cloud-native environments and workloads, with the ability to deploy security tools within them.Takes ownership of projects, works independently with minimal oversight, and delivers ...

SOC2, HITRUST, ISO 27001/2, or similar. Strong understanding of AWS security services and controls (IAM, VPC, KMS, GuardDuty, CloudTrail) and experience securing cloud-native environments and workloads, with the ability to deploy security tools within them. Takes ownership of projects, works independently with minimal oversight ...

SIEM/SOAR for real‐time response. Support secrets and key‐management hygiene. You will ensure app/service keys are stored in KMS/Vault, scoped to least privilege and rotated automatically to prevent credential leakage. Assist product security in triage of SAST/SCA findings for FinOps … data flows and operational processes. Experience with observability and detection tooling (SIEM, logs, metrics) and ability to write basic detection rules. Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/GCP KMS), IAM patterns and least‐privilege. Exceptional ability to translate “Technical ...

SIEM/SOAR for real-time response. Support secrets and key-management hygiene. You will ensure app/service keys are stored in KMS/Vault, scoped to least privilege and rotated automatically to prevent credential leakage. Assist product security in triage of SAST/SCA findings for FinOps … data flows and operational processes. Experience with observability and detection tooling (SIEM, logs, metrics) and ability to write basic detection rules. Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/GCP KMS), IAM patterns and least-privilege. Exceptional ability to translate "Technical ...

Languages: Rust, Go, TypeScript/Node, Python Messaging: Kafka/Redpanda, NATS API/IPC: gRPC/REST Infra: AWS (EKS, RDS, KMS), Terraform Requirements You are a backend and onramp specialist with a passion for high‐throughput, low‐latency distributed systems and financial technology. Essential Qualifications … systems with queues, outbox/inbox patterns, Sagas, and ensuring exactly‐once‐effective behavior. Security Mindset: Practical experience with key management basics, HSM/KMS usage, secrets hygiene, least privilege, data minimization, and auditability. Ownership & Ambiguity: Ownership‐driven and comfortable operating in high‐ambiguity environments—you move quickly, measure ...

compliance checklist or an isolated engineering task - it has to be built into the core financial architecture. Its attack surface spans multi‐region AWS infrastructure, payment pipelines and payment pages, wallets holding members' money, the cardholder and personal data behind them, and a regulatory perimeter - PCI DSS, DORA … minute), deep knowledge of observability tooling (Kibana, Grafana, Prometheus), and a passion for introducing new practices. Advantage: AWS security depth (IAM, KMS, multi‐account and multi‐region architecture), or hands‐on CSPM (e.g. Wiz) and SIEM engineering. Advantage: privacy engineering experience, or offensive security background or certifications ...