Cloud KMS/HSM Engineer

Cyclad is an IT services company working with top international IT companies, supporting them in delivering cutting-edge technologies. The project involves designing and implementing a secure, highly available Key Management System (KMS) for a complex hybrid and multi-cloud environment.

• Strong hands-on experience with KMS and/or HSM solutions.
• Experience with at least one major cloud key management service: Azure Key Vault, AWS KMS, or Google Cloud KMS.
• Good understanding of cryptography and key lifecycle management.
• Knowledge of BYOK/HYOK, RBAC, MFA, and security best practices.
• Experience with high availability and Disaster Recovery solutions.
• Familiarity with Terraform, Kubernetes, and GitLab.
• Experience in designing or implementing enterprise security/cloud infrastructure solutions.

• Designing and implementing an enterprise Key Management System (KMS).
• Building a highly available hybrid architecture with HA, cross-region replication, and Disaster Recovery.
• Integrating Azure Key Vault, AWS KMS, and Google Cloud KMS with enterprise infrastructure.
• Working with HSM solutions such as Entrust nShield and Thales Luna.
• Implementing key lifecycle management, backup, synchronization, and BYOK/HYOK mechanisms.
• Integrating KMS with IAM, SIEM, Kubernetes, databases, storage, and APIs/KMIP.
• Supporting infrastructure automation using Terraform and GitLab.
• Preparing HLD, target architecture, and technical documentation.
• Supporting Proof of Concept and knowledge transfer activities.