Head of Security Engineering - AWS/KMS(m/w/x)

Description

In this hands-on leadership role, you will shape the security architecture by building robust AWS foundations and cryptographic controls to protect a high-availability trading environment.

Requirements

• •Deep knowledge of AWS and KMS
• •8+ years in security engineering
• •3+ years leading teams or programs
• •Expert AWS security experience
• •Deep AWS KMS expertise
• •Knowledge of IAM and identity design
• •Ability to build security automation
• •Clear communication and influence skills
• •Experience in fintech or crypto environments
• •Experience building paved-road platforms
• •Familiarity with cloud security tooling

Tasks

• •Lead and grow the security engineering team
• •Set the security roadmap and measurable outcomes
• •Establish secure engineering patterns and automation-first guardrails
• •Own the AWS cloud security architecture and landing zones
• •Design multi-account strategies and network segmentation
• •Manage identity, access design, and infrastructure hardening
• •Build preventative controls using infrastructure-as-code
• •Govern the enterprise encryption program and KMS policies
• •Define safe grant usage and operational best practices
• •Manage the full key lifecycle and rotation strategy
• •Design cross-account access patterns and controls
• •Embed security checks into the SDLC and CI/CD
• •Harden runtime environments and secrets management
• •Partner with Security Operations on high-signal detections
• •Configure secure environments to reduce blast radius

Tools & Technologies