Sr Subject Matter Expert (Support&Ops)

HCL Technologies Limited; Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

HCL Technologies Limited is seeking an AWS Architecture & Key Management expert to design, validate, and deliver the next generation encryption solution on AWS. You will lead deployment, automation, and production readiness while upskilling the team and ensuring alignment with internal cloud and security standards.

The role spans Paris, Bangalore, and Bucharest with emphasis on scalable, compliant cloud architectures.

Qualifications

• Proven experience designing secure AWS cryptography architectures (KMS, XKS, CloudHSM).
• Experience integrating Thales HSMs with cloud and enterprise security ecosystems.
• Knowledge of IAM, VPC security, encryption in transit/at rest, and compliance frameworks.
• Hands-on with IaC and CI/CD pipelines (Terraform, CloudFormation, GitHub Actions).
• Strong cross-team collaboration and experience leading POCs and service transitions.
• Experience defining operating models, governance, risk assessments.

Responsibilities

• Design end-to-end encryption solution for sensitive workloads on AWS.
• Integrate AWS KMS, XKS, CloudHSM with Thales HSMs and security ecosystem.
• Ensure alignment with cloud security and compliance standards.
• Define dependency mapping, lifecycle management, and DR/BCP for key management services.
• Lead design reviews, architecture boards, risk assessments, and crypto compliance checks.
• Deploy and configure AWS KMS, XKS, CloudHSM and Thales integrations.
• Automate deployment pipelines and infrastructure as code.
• Produce comprehensive documentation (HLD/LLD/runbooks/security controls).
• Build dashboards for service health, key usage, and compliance.

Skills

AWS KMS

XKS

CloudHSM

Thales HSMs

Cloud security

IAM

VPC security

Encryption

DevOps automation

POCs & migrations

Tools

Terraform

CloudFormation

GitHub Actions

Job description

Key Responsibilities

• Solution Architecture & Design - Design the end to end encryption solution for sensitive workloads on AWS (technical architecture, operating model, governance framework).
• Integrate AWS KMS, XKS, CloudHSM with Thales HSMs and SG’s security ecosystem.
• Ensure solution alignment with SG’s cloud, cybersecurity, and compliance standards.
• Define dependency mapping, lifecycle management, and disaster recovery/BCP for key management services.
• Validation & Cross Team Alignment - Present and validate the solution with Architecture teams, Security teams, and Cloud Governance.
• Facilitate design reviews, architecture boards, risk assessments, and cryptographic compliance checks.
• Ensure full traceability of decisions, risks, and technical controls.
• Deployment, Automation & Documentation - Deploy and configure AWS KMS, XKS, CloudHSM environments and Thales integrations.
• Automate deployment pipelines using CI/CD, infrastructure-as-code, and DevOps tooling.
• Produce complete documentation (HLD, LLD, runbooks, standard operating procedures, security controls).
• Build dashboards and monitoring for service health, key usage, and compliance adherence.
• Proof of Concept (POC) & Scalability Validation - Execute a POC using a real-use case.
• Evaluate performance, scalability, operational flows, and integration reliability.
• Provide recommendations for optimization, security hardening, and operational efficiency.
• Production Rollout & Service Enablement - Lead the service transition from POC to production-ready state.
• Ensure the solution meets internal cloud platform criteria:- operational readiness - monitoring/alerting - secure CI/CD pipelines - service governance requirements.
• Build operational workflows with OSM, Operations, Cloud, and Security teams.
• Drive incident response readiness, DR testing, and change control processes.
• Knowledge Transfer & Team Upskilling - Educate and mentor team members on AWS HSM, KMS, XKS, encryption models, and cloud security.
• Conduct training workshops, technical deep-dives, and documentation walkthroughs.
• Help establish an internal competency framework for AWS-based key management systems.

Profile We are seeking an AWS Architecture & Key Management expert to design, validate, and deliver the next generation C3 encryption solution on AWS, equivalent to SG’s existing Azure based service. This role is critical to enabling regulated workloads for platforms in public cloud. The specialist will be the subject-matter expert (SME) for AWS Key Management Services, XKS (External Key Store), HSM (CloudHSM/Thales), and cloud encryption architectures. They will lead solution design, deployment, automation, validation, and production readiness—while also upskilling team members and ensuring alignment with SG’s internal cloud and security standards. You will work closely with Cloud, OSM, Architecture, and Security Governance teams across Paris, Bangalore, and Bucharest. Specific Context Required Skills & Technical Expertise Core AWS Cryptography Expertise - AWS KMS, External Key Store (XKS), CloudHSM, key lifecycle management. - Integration with Thales HSMs and enterprise-grade encryption architectures. Cloud Architecture & Security - Strong cloud architecture knowledge (AWS, Azure concepts an advantage). - Experience designing secure cloud services for regulated workloads. - Strong understanding of IAM, VPC security, encryption-in-transit/at-rest, and compliance frameworks. DevOps & Automation - Experience with IaC and CI/CD pipelines (Terraform, CloudFormation, GitHub Actions, or Azure DevOps). - Background in automation for deployment, monitoring, and configuration at scale. Cross-Team Collaboration - Ability to work with Architecture, Cloud, OSM, Governance, and Security Compliance teams. - Strong experience leading POCs, pilots, and service transition activities. Governance & Operating Model - Experience defining operational models, service governance, risk assessmen

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026totaled $14.8billion.