Job Description

Security Engineer (SKMS)

:

AWS Cloud HSM:


Setup and configure AWS Cloud HSM service for key generation and storage. Configure logging to be piped to central logging facility and SIEM (Security Information and Event Management).
SKMS-AWS


Setup and configure Fortanix DSM and HSM Gateway. Configure logging to be piped to central logging facility and SIEM. Ensure Fortanix DSM and HSM Gateway are able to integrate with AWS Cloud HSM. Design access control lists for Fortanix DSM to ensure adherence to "principle of least privilege" . Plan and Conduct Key Ceremony to ensure secure key migration to SKMS (ABT and PG via Fortanix DSM, CBT via AWS Cloud HSM). Test and validate Fortanix components and AWS Cloud HSM are functioning as intended after keys are migrated. Support integration testing with interfacing applications. Develop documentation on configurations . Develop Acceptance Testing documentation. Develop operations manual for Fortanix DSM, HSM Gateway, and AWS Cloud HSM.
SKMS-On-Premises


CAS


Develop Root CA Migration & Transition Strategy. Plan and Conduct stakeholder interviews to gather fine-grain requirements. Setup, install and configure MFA on CAS workstation. Issue MFA tokens to end-users. Setup, install, and configure Thales ProtectServer PCIe HSM on CAS Workstations. Perform Root CA tech refresh/migration to CAS workstations. Depending on Migration & Transition Strategy, Plan and Conduct Key Ceremony to ensure secure key migration CAS HSM. Test and validate that Root CA is able to sign/issue certificates with HSM keys. Execute the transition of all downstream certificates, including re-issuing and re-deploying certificates as needed. Develop documentation on configurations . Develop Acceptance Testing documentation. Develop operations manual for Root CA and HSM.
KMF


Setup, install, and configure Thales ProtectServer PCIe HSM on KMF workstations. Setup, install and configure MFA on KMF workstation. Issue MFA tokens to end-users.

Qualifications & Requirements:

Bachelor degree in related Computer Science and IT Security fields. Minimum 5 years of relevant experiences on the AWS Cloud HSM solutions. Strong analytical and problem-solving skills * Good written and verbal communication skills in English