Cybersecurity Consultant- AWS Cryptography

Societe Generale Global Solution Centre; Bengaluru; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

Société Générale Global Solution Centre in Bengaluru is seeking an AWS Architecture & Key Management expert to design, validate, and deliver a scalable encryption solution for sensitive workloads on AWS. You will lead integration with KMS, XKS, CloudHSM and Thales, aligning with SG security standards.

You will guide governance, risk assessments, and automation, while ensuring production readiness and knowledge transfer across OSM, Governance, Cloud, and Security teams.

Qualifications

• Expert in AWS KMS, XKS and CloudHSM for regulated workloads.
• Strong security governance, risk assessment, and audit documentation.
• Experience with IaC and CI/CD pipelines.
• Cross-team collaboration across Architecture, Cloud, OSM and Security.

Responsibilities

• Design end-to-end encryption solution on AWS.
• Integrate KMS, XKS, CloudHSM with Thales HSMs and SG security.
• Define operating model, governance, DR/BCP for key management.
• Lead POC, validation, and production rollout.
• Produce documentation and dashboards for monitoring and compliance.

Skills

AWS KMS

XKS

CloudHSM

Security governance

DevOps IaC

CI/CD

Tools

Terraform

CloudFormation

GitHub Actions

Job description

• Design the end‑to‑end encryption solution for sensitive workloads on AWS (technical architecture, operating model, governance framework).
• Integrate AWS KMS, XKS, CloudHSM with Thales HSMs and SG’s security ecosystem.
• Ensure solution alignment with SG’s cloud, cybersecurity, and compliance standards.
• Define dependency mapping, lifecycle management, and disaster recovery/BCP for key‑management services.
• Present and validate the solution with Architecture teams, Security teams, and Cloud Governance.
• Facilitate design reviews, architecture boards, risk assessments, and cryptographic compliance checks.
• Ensure full traceability of decisions, risks, and technical controls.
• Deployment, Automation & Documentation
• Deploy and configure AWS KMS, XKS, CloudHSM environments and Thales integrations.
• Automate deployment pipelines using CI/CD, infrastructure-as-code, and DevOps tooling.
• Produce complete documentation (HLD, LLD, runbooks, standard operating procedures, security controls).
• Build dashboards and monitoring for service health, key usage, and compliance adherence.
• Proof of Concept (POC) & Scalability Validation
• Execute a POC using a real‑use case.
• Evaluate performance, scalability, operational flows, and integration reliability.
• Provide recommendations for optimization, security hardening, and operational efficiency.
• Production Rollout & Service Enablement
• Lead the service transition from POC to production‑ready state.
• Ensure the solution meets internal cloud platform criteria:
  • operational readiness
  • monitoring/alerting
  • service governance requirements
• Build operational workflows with OSM, Operations, Cloud, and Security teams.
• Drive incident response readiness, DR testing, and change control processes.
• Knowledge Transfer & Team Upskilling
• Educate and mentor team members on AWS HSM, KMS, XKS, encryption models, and cloud security.
• Conduct training workshops, technical deep-dives, and documentation walkthroughs.
• Help establish an internal competency framework for AWS-based key management systems.

Reference 26000BQY

Responsibilities

Key Responsibilities

• Solution Architecture & Design
• Design the end‑to‑end encryption solution for sensitive workloads on AWS (technical architecture, operating model, governance framework).
• Integrate AWS KMS, XKS, CloudHSM with Thales HSMs and SG’s security ecosystem.
• Ensure solution alignment with SG’s cloud, cybersecurity, and compliance standards.
• Define dependency mapping, lifecycle management, and disaster recovery/BCP for key‑management services.
• Validation & Cross‑Team Alignment
• Present and validate the solution with Architecture teams, Security teams, and Cloud Governance.
• Facilitate design reviews, architecture boards, risk assessments, and cryptographic compliance checks.
• Ensure full traceability of decisions, risks, and technical controls.
• Deployment, Automation & Documentation
• Deploy and configure AWS KMS, XKS, CloudHSM environments and Thales integrations.
• Automate deployment pipelines using CI/CD, infrastructure-as-code, and DevOps tooling.
• Produce complete documentation (HLD, LLD, runbooks, standard operating procedures, security controls).
• Build dashboards and monitoring for service health, key usage, and compliance adherence.
• Proof of Concept (POC) & Scalability Validation
• Execute a POC using a real‑use case.
• Evaluate performance, scalability, operational flows, and integration reliability.
• Provide recommendations for optimization, security hardening, and operational efficiency.
• Production Rollout & Service Enablement
• Lead the service transition from POC to production‑ready state.
• Ensure the solution meets internal cloud platform criteria:
• Set operational readiness
• Set monitoring/alerting
• Secure CI/CD pipelines
• Set service governance requirements
• Build operational workflows with OSM, Operations, Cloud, and Security teams.
• Drive incident response readiness, DR testing, and change control processes.
• Knowledge Transfer & Team Upskilling
• Educate and mentor team members on AWS HSM, KMS, XKS, encryption models, and cloud security.
• Conduct training workshops, technical deep-dives, and documentation walkthroughs.
• Help establish an internal competency framework for AWS-based key management systems.

Required

Profile required

We are seeking an AWS Architecture & Key Management expert to design, validate, and deliver the next‑generation C3 encryption solution on AWS, equivalent to SG’s existing Azure‑based service. This role is critical to enabling regulated workloads for platforms in public cloud.

The specialist will be the subject‑matter expert (SME) for AWS Key Management Services, XKS (External Key Store), HSM (CloudHSM/Thales), and cloud encryption architectures. They will lead solution design, deployment, automation, validation, and production readiness—while also upskilling team members and ensuring alignment with SG’s internal cloud and security standards. You will work closely with Cloud, OSM, Architecture, and Security Governance teams across Paris, Bangalore, and Bucharest.

Required Skills & Technical Expertise

Core AWS Cryptography Expertise

• AWS KMS, External Key Store (XKS), CloudHSM, key lifecycle management.
• Integration with Thales HSMs and enterprise‑grade encryption architectures.

Cloud Architecture & Security

• Strong cloud architecture knowledge (AWS, Azure concepts an advantage).
• Experience designing secure cloud services for regulated workloads.
• Strong understanding of IAM, VPC security, encryption‑in‑transit/at‑rest, and compliance frameworks.

DevOps & Automation

• Experience with IaC and CI/CD pipelines (Terraform, CloudFormation, GitHub Actions, or Azure DevOps).
• Background in automation for deployment, monitoring, and configuration at scale.

Cross-Team Collaboration

• Ability to work with Architecture, Cloud, OSM, Governance, and Security Compliance teams.
• Strong experience leading POCs, pilots, and service transition activities.

Governance & Operating Model

• Experience defining operational models, service governance, risk assessments, and audit documentation.

Preferred Qualifications

• Experience with enterprise HSM solutions (Thales, Luna, or equivalent).
• AWS Solutions Architect – Professional

Why join us

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status”.

Business insight

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow

will be shaped by all their initiatives, from the smallest to the most ambitious.

Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.

If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices and sharing their skills with charities. There are many ways to get involved.