Job Title: AWS CloudHSM SME – PKI Implementation (Contract)
📍 Location: Hybrid /Luton
📅 Contract Length: 6+months
💰 Rate: [Competitive – Inside IR35]
🔐 Sector: Secure Cloud & Infrastructure Projects
We are seeking an experienced AWS CloudHSM Subject Matter Expert (SME) to support the design, deployment, and management of a secure Microsoft Active Directory Certificate Services (ADCS) Public Key Infrastructure (PKI) environment. This role is focused on implementing a robust AWS HSM-backed cryptographic architecture aligned with strict compliance and security standards.
The successful candidate will have deep expertise in AWS CloudHSM, cryptographic key management, and PKI implementations, and will work across multiple teams to ensure successful integration and operational stability in a secure cloud environment.
Key Responsibilities:🔹 AWS HSM & PKI Implementation:
Architect, deploy, and configure AWS CloudHSM to support Microsoft ADCS PKI environments.
*
Integrate HSM with Certificate Authorities (CAs), OCSP responders, and CRL management components.
*
Design secure key lifecycle management strategies – from generation to decommissioning.
*
Enable secure certificate issuance, revocation, and validation workflows.
*
Ensure high availability and disaster recovery configurations for HSM services.
*
Provide technical direction on cryptographic algorithms, protocols, and PKI operations.
🔹 Security & Compliance:
*
Ensure alignment with standards including FIPS 140-2 Level 3, NIST 800-57, ISO 27001, SOC2, and GDPR.
*
Implement role-based access control (RBAC), auditing, and key usage logging.
*
Conduct risk assessments and participate in compliance and security reviews.
*
Collaborate with InfoSec and Governance teams to enforce IAM and cloud security best practices.
🔹 Technical Support & Optimization:
*
Troubleshoot HSM-related issues, key/certificate lifecycle problems, and performance concerns.
*
Support cross-functional teams with integration, automation, and optimization initiatives.
*
Automate PKI and key management processes wherever applicable.
*
Maintain up-to-date documentation for architecture, processes, and support operations.
Key Skills & Experience:✅ AWS & HSM Expertise:
*
8+ years' experience with AWS CloudHSM, KMS, and cryptographic infrastructure.
*
Strong hands-on experience with IAM, EC2, VPC, CloudTrail, KMS, etc.
*
Deep understanding of HSM architecture, FIPS-compliant configurations, and secure key management practices.
✅ PKI & Cryptography:
*
Advanced knowledge of Microsoft ADCS, X.509 certificates, CA hierarchy, OCSP/CRL handling.
*
Familiarity with TLS/SSL, authentication protocols, and certificate-based access control.
*
Experience implementing PKI in cloud and hybrid enterprise environments
