21 of 21 Remote/Hybrid AWS KMS Jobs in England

# AWS Data Solution ArchitectBirmingham, Bristol, Newcastle Bank House, Manchester, LondonApply for this job* Permanent* Experienced Professionals* Architecture* ID 466372-en\_GB## **Who You'll Be Working With**As an AWS Data Solution Architect at Capgemini, you will design and lead the delivery of modern data … trusted, auditable data products.* Own security architecture for data platforms: Design identity, access, and secrets management (e.g., AWS IAM, IAM Identity Center, KMS, Secrets Manager) and apply network and monitoring controls appropriate for sensitive public sector workloads.* Embed engineering excellence: Define CI/CD and release management ...

Cloud Data Engineer About the Job you are considering: We are seeking an experienced Cloud Data Engineer with expertise in AWS, Snowflake, dbt, PySpark, and SQL to design, build, and maintain scalable cloud-based data platforms and analytics solutions. The ideal candidate should have strong experience in cloud … AWS Lambda AWS Step Functions Amazon Redshift Amazon Athena Amazon RDS/Aurora AWS IAM AWS KMS Amazon CloudWatch AWS Secrets Manager Data Modelling Skills Star Schema Snowflake Schema Dimensional Modeling Data Vault Data Warehouse Design Data Lake Architecture ...

NACLs). Implement IAM least-privilege models, identity federation, and secrets management for migrated workloads. Define encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. … drift detection, custom/conformance rules AWS IAM/IAM Identity Center – least-privilege roles, policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/ ...

NACLs). Implement IAM least-privilege models, identity federation, and secrets management for migrated workloads. Define encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. … drift detection, custom/conformance rules AWS IAM/IAM Identity Center – least-privilege roles, policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/ ...

NACLs). Implement IAM least-privilege models, identity federation, and secrets management for migrated workloads. Define encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. … drift detection, custom/conformance rules AWS IAM/IAM Identity Center – least-privilege roles, policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/ ...

NACLs). Implement IAM least-privilege models, identity federation, and secrets management for migrated workloads. Define encryption standards (at rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. … drift detection, custom/conformance rules AWS IAM/IAM Identity Center – least-privilege roles, policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/ ...

seeking a Senior DevOps Engineer to join our data migration project, which aims to transition data from Legacy databases to the AWS cloud. This role is specifically for candidates who have active SC clearance. The Senior DevOps Engineer will focus on building and maintaining the infrastructure and automation … such as S3, RDS (Oracle), and AWS Glue are configured securely and efficiently. Experience in implementing AWS Secrets, Parameter Stores, KMS, and client side encryption. Ensure least privilege for running a service in production without root/admin access. Collaboration and Support: Collaborate with architecture ...

find innovative solutions to complex challenges as part of a team who help keep the UK safe? Join BAE Systems as an experienced AWS Developer. As a key member of a Software Engineering team, you’ll be working with our National Security Customers to build systems that support … Regarded as an AWS subject matter expert Demonstrable expertise with AWS services such as EC2, ECS, EKS, S3, Lambda, RDS, KMS, ELB, SNS, SQS, IAM Scripting abilities with languages such as Shell, Bash, or Python Good coding experience of at least 1 Lambda compatible language ...

/Certification DigiCert PKI Certifications Venafi Professional Certification Microsoft Security Certifications Preferred Technical Tools & Platforms HSM Platforms Thales Luna HSM Entrust nShield HSM AWS CloudHSM Azure Dedicated … Certificate Management Microsoft Active Directory Certificate Services (ADCS) DigiCert Entrust PKI Venafi Keyfactor AppViewX Key Management Technologies HashiCorp Vault AWS KMS Azure Key Vault Google Cloud KMS Thales CipherTrust Manager Operating Systems Linux (RHEL, CentOS, Ubuntu) Windows Server Security & Monitoring Splunk Microsoft Sentinel QRadar Dynatrace Datadog ...

Security Cloud Engineer, you will help shape the future of our cloud security capability by developing and enhancing secure cloud platforms across AWS, Microsoft Azure, and Google Cloud Platform (GCP). Working closely with engineering, security, DevOps, and operational teams, you will contribute to cloud architecture designs, automate … CloudFormation templates for infrastructure deployment. Strong understanding of AWS Identity and Access Management (IAM), security policies, security groups, and Key Management Service (KMS). Hands-on experience with AWS networking technologies including VPCs, subnets, routing, and load balancing. Experience securing and supporting ...

Responsibilities: Identity and Access Management (IAM) Design, implement, and maintain Identity and Access Management (IAM) solutions, including Microsoft Entra ID, Entra Identity Governance, AWS IAM Identity Centre, and supporting authentication and authorisation services. Manage permission settings and access controls to ensure secure and efficient user access to company … AWS environments using services such as IAM, Security Hub, GuardDuty, CloudTrail, Config, AWS Organizations, Route 53, and Key Management Service (KMS). Microsoft 365 and Azure Security: Strong experience with Microsoft security technologies including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Intune, Entra ID, Azure ...

SAST, dependency scanning, secrets detection, and PR‐blocking standards across every repository. Harden our AWS and Cloudflare estate: IAM, secrets, network segmentation, KMS, WAF, GuardDuty, and zero‐trust patterns. Run pen testing end‐to‐end: scope and coordinate engagements with both AI‐driven scanners and human researchers … security reviews, and pen test responses. What we’re looking for 3+ years in security engineering with hands‐on AWS security: IAM, KMS, networking, secrets, GuardDuty/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. ...

relationships. DevOps Mastery: Deep understanding of DevOps principles and how they transform businesses. People Leadership: Experience managing people and mentoring less experienced colleagues. AWS Expertise: Extensive hands‐on experience with AWS and ability to articulate best practices for building secure, scalable platforms. Able to articulate … implement complex cloud platforms incorporating legacy workloads, microservices and containerisation. CI/CD Pro: Proven experience with tools like GitHub, GitLab, or AWS DevOps Tooling, and expertise in deployment automation/orchestration. Networking Knowledge: Expert with networking concepts and how they translate to cloud environments: Virtual Networks, routing ...

Explore and implement AI-driven automation for infrastructure efficiency and team productivity. Требования 5+ Years of experience in cloud engineering roles with significant AWS expertise; Advanced hands … experience designing and operating enterprise‐scale AWS production infrastructure; Experience with multi‐account AWS architectures, Control Tower, Organizations, SCPs, IAM, KMS, compute, storage, and security services; Proven experience delivering resilient multi‐region architectures; Production experience with Azure, including landing zones, VNet architectures, Entra ID, resource ...

endpoint channels (e.g., using Microsoft, Broadcom, ForcePoint)· Data classification and data discovery· Digital Rights Management (e.g., using Microsoft)· Data security across Azure, AWS, Oracle, and Google Cloud, utilising third-party DLP tools … such as Microsoft, Broadcom, ForcePoint) and/or native cloud capabilities.· Encryption technologies such as KeyFactor, HashiCorp Vault, AWS Key Management Service (KMS) and Azure Key Vault.· Data Security Posture Management and Data Governance tools such as Microsoft, Varonis and BigID for data discovery, classification, access monitoring ...

infrastructure we built. At Checkout.com, the Cloud Platform team owns the cloud foundations that global payments depend on: a large multi-account AWS estate, a growing Azure platform, and the networking and connectivity that reaches card schemes and banks worldwide. We are genuinely multi-cloud … Advanced, hands-on experience designing and operating production infrastructure in AWS at enterprise scale: multi-account architectures (Control Tower, Organizations, SCPs), IAM, KMS, and the core compute, storage, and security services that a large regulated estate runs on. You should have a proven track record of delivering ...

infrastructure we built. At Checkout.com, the Cloud Platform team owns the cloud foundations that global payments depend on: a large multi-account AWS estate, a growing Azure platform, and the networking and connectivity that reaches card schemes and banks worldwide. We are genuinely multi-cloud … Advanced, hands-on experience designing and operating production infrastructure in AWS at enterprise scale: multi-account architectures (Control Tower, Organizations, SCPs), IAM, KMS, and the core compute, storage, and security services that a large regulated estate runs on. You should have a proven track record of delivering ...

Security programmes across the UK. This is an exciting opportunity for an experienced Cloud Security Specialist to help shape and secure large-scale AWS cloud environments, supporting both complex cloud migrations and innovative cloud-native solutions. You'll work alongside architects, engineers and cyber specialists, ensuring security … Strong knowledge of Cyber Security principles, including network security, encryption and application security Experience with AWS security services such as IAM, GuardDuty, KMS, Macie and WAF Knowledge of security frameworks including NIST, ISO 27001 and CIS Benchmarks Experience with Infrastructure as Code tools including Terraform or CloudFormation ...

Responsibilities: Identity and Access Management (IAM)Design, implement, and maintain Identity and Access Management (IAM) solutions, including Microsoft Entra ID, Entra Identity Governance, AWS IAM Identity Centre, and supporting authentication and authorisation services.Manage permission settings and access controls to ensure secure and efficient user access to company resources.Security … AWS environments using services such as IAM, Security Hub, GuardDuty, CloudTrail, Config, AWS Organizations, Route 53, and Key Management Service (KMS).Microsoft 365 and Azure Security: Strong experience with Microsoft security technologies including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Intune, Entra ID, Azure Security ...

endpoint channels (e.g., using Microsoft, Broadcom, ForcePoint[AJ1] )Data classification and data discoveryDigital Rights Management (e.g., using Microsoft)Data security across Azure, AWS, Oracle, and Google Cloud, utilising third-party … tools (such as Microsoft, Broadcom, ForcePoint) and/or native cloud capabilities.Encryption technologies such as KeyFactor, HashiCorp Vault, AWS Key Management Service (KMS) and Azure Key Vault.Data Security Posture Management and Data Governance tools such as Microsoft, Varonis and BigID for data discovery, classification, access monitoring ...

into our SIEM/SOAR for real-time response.Support secrets and key-management hygiene. You will ensure app/service keys are stored in KMS/Vault, scoped to least privilege and rotated automatically to prevent credential leakage.Assist product security in triage of SAST/SCA findings for FinOps … complex data flows and operational processes.Experience with observability and detection tooling (SIEM, logs, metrics) and ability to write basic detection rules.Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/GCP KMS), IAM patterns and least-privilege.Exceptional ability to translate "Technical Debt" into ...