Senior Azure KMS Engineer
New
B
Be in IT.Key management
Locations: Warszawa, Śródmieście, Warszawa, Country code: PL; Współpraca w pełni zdalna.ContractSenior
Salary180 - 220 PLN per hour
Apply NowOpens the employer's application page
Job Details
- Languages
- Znajomość języka angielskiego na poziomie B2 lub C1
- Required Skills
- TerraformGitLab
Requirements
- Experience with at least two KMS/HSM system implementations.
- Practical knowledge of HSM solutions, including Entrust nShield and Thales Luna.
- Practical knowledge of AWS KMS, Azure Key Vault, and Google Cloud KMS.
- Knowledge of KMIP and integrations with databases, storage, virtual machines, and Kubernetes.
- Experience with automation and CI/CD tools, including Terraform and GitLab, and integrations through APIs.
- Knowledge of RBAC, MFA, PGP/GPG, BYOK/HYOK, symmetric and asymmetric key management, and system auditability.
- Experience designing distributed, highly available hybrid architectures, including Disaster Recovery and cross-region replication.
- Experience preparing technical and business documentation, including HLD, SLA, and cost and licensing models, and conducting PoC deployments.
- English proficiency at B2 or C1 level for communication in an international environment.
Responsibilities
- Design and implement a complete KMS solution for universal secrets infrastructure.
- Design and deliver a highly available hybrid architecture with no single point of failure, cross-region replication, and Disaster Recovery procedures.
- Integrate the solution with Azure Key Vault, AWS KMS, Google Cloud KMS, and HSMs including Entrust nShield and Thales Luna.
- Integrate KMS with IAM, SIEM, APIs, KMIP, databases, storage, virtual machines, Kubernetes, Terraform, and GitLab.
- Configure key lifecycle, backups, synchronization, BYOK/HYOK, symmetric and asymmetric key management, and PGP/GPG.
- Implement RBAC, MFA, and full auditing of operations.
- Prepare project and implementation documentation, including HLD, target architecture, licensing and cost models, SLA, and maintenance plans.
- Conduct Proof of Concept deployments.
- Provide support and maintenance for the deployed solution for 36 months.
View Full Description & ApplyYou'll be redirected to the employer's site
