AWS HSM SME

Job Title: AWS HSM (SME)

Pay Rate: 500-550 inside IR35

Hybrid Role: Luton

We are seeking an experienced AWS HSM SME to support the implementation and management of Public Key Infrastructure (PKI) using Microsoft Active Directory Certificate Services (ADCS). The role involves architecting, deploying, and integrating AWS CloudHSM to ensure a secure and scalable cryptographic environment.

Key Responsibilities:

• Architect and configure AWS Cloud HSM for ADCS PKI integration.
• Manage key lifecycle policies including generation, storage, rotation, and decommissioning.
• Implement secure certificate issuance, revocation, and validation processes.
• Ensure high availability and failover strategies for HSM deployments.
• Align HSM and PKI implementations with industry standards like FIPS 140-2, NIST, ISO 27001, and GDPR.
• Automate PKI workflows and certificate management.
• Provide technical guidance on encryption protocols and PKI best practices.
• Perform risk assessments and ensure compliance with security standards.
• Collaborate with security teams to enforce cloud security and IAM policies.
• Troubleshoot and optimize HSM performance, security, and scalability.

Key Skills/Experience:

• 8+ years of experience with AWS Cloud HSM, AWS KMS, and cryptographic key management.
• Expertise in HSM architecture, security policies, and key lifecycle management.
• Hands-on experience with AWS security services (IAM, EC2, VPC, KMS).
• Strong knowledge of Microsoft ADCS PKI, X.509 certificates, and certificate management.
• Experience with TLS/SSL encryption and certificate-based security models.
• Familiarity with regulatory standards (ISO 27001, NIST, GDPR) and cloud security best practices.