Cloud KMS/HSM Engineer

At Cyclad, we work with top international IT companies, supporting them in delivering cutting-edge technologies that shape the world of the future.

For our client, we are looking for an experienced Cloud KMS/HSM Engineer to join a project focused on designing and implementing a secure, highly available Key Management System for a complex hybrid and multi-cloud environment.

You will work with enterprise-grade KMS/HSM solutions, cloud security and cryptography, integrating key management services across Azure, AWS and GCP.

Project information

• Industry: IT Services
• Location: Kraków
• Contract: B2B
• Rate: up to 210 PLN net + VAT/h
• Project: Cloud Key Management System (KMS)

Your responsibilities

• Designing and implementing an enterprise Key Management System (KMS).
• Building a highly available hybrid architecture with HA, cross-region replication and Disaster Recovery.
• Integrating Azure Key Vault, AWS KMS and Google Cloud KMS with enterprise infrastructure.
• Working with HSM solutions, including Entrust nShield and Thales Luna.
• Implementing key lifecycle management, backup, synchronization and BYOK/HYOK mechanisms.
• Integrating KMS with IAM, SIEM, Kubernetes, databases, storage and APIs/KMIP.
• Supporting infrastructure automation using Terraform and GitLab.
• Preparing HLD, target architecture and technical documentation.
• Supporting Proof of Concept and knowledge transfer activities.

What we’re looking for

• Strong hands-on experience with KMS and/or HSM solutions.
• Experience with at least one major cloud key management service: Azure Key Vault, AWS KMS or Google Cloud KMS.
• Good understanding of cryptography and key lifecycle management.
• Knowledge of BYOK/HYOK, RBAC, MFA and security best practices.
• Experience with high availability and Disaster Recovery solutions.
• Familiarity with Terraform, Kubernetes and GitLab.
• Experience in designing or implementing enterprise security/cloud infrastructure solutions.