Conceptual Security Expert (AWS)

About the role

We are looking for a Conceptual Security Expert (AWS) to design and define security concepts, governance models, and operational processes for AWS cloud environments. In this role, you will shape access management, configuration management, and cryptographic key management frameworks, ensuring compliance, security, and operational effectiveness across cloud services.

Your responsibilities

• Define and maintain the access management concept for AWS cloud infrastructure
• Design RBAC models, entitlement structures, assignment rules, approval workflows, and segregation of duties controls
• Establish onboarding, offboarding, role change, privileged access, emergency access, and access review processes
• Produce service design documentation and operational handover materials
• Define cloud security baselines, configuration standards, and hardening requirements
• Design governance processes for configuration changes, compliance monitoring, exception management, and remediation
• Create and maintain key management concepts covering the complete key lifecycle
• Prepare and document key ceremony procedures, including dual control, witnessing, audit evidence, and operational responsibilities
• Support the planning and execution of key ceremonies
• Collaborate with architects, engineering teams, operations, and audit/compliance stakeholders

Must have

• Proven experience designing security concepts and governance processes for AWS environments
• Strong expertise in AWS IAM, AWS Organizations, AWS KMS, CloudHSM, logging, and monitoring services
• Solid background in Identity and Access Management (IAM), RBAC design, segregation of duties, and privileged access governance
• Practical experience with cryptographic key management and HSM-based key ceremonies
• Knowledge of cloud security baselines, hardening standards, and compliance monitoring processes
• Experience creating clear, audit-ready documentation and security procedures
• Good understanding of security frameworks such as ISO 27001, NIST, and CIS AWS Benchmark
• Strong stakeholder management and communication skills
• Fluent English, both spoken and written

Nice to have

• Experience in the telecommunications sector
• Knowledge of eSIM / eUICC remote provisioning environments (SM-DP+, SM-SR)
• Familiarity with GSMA SAS-SM security requirements
• Certifications such as CISSP, CCSP, or AWS Certified Security – Specialty
• Experience with policy-as-code approaches and automated compliance solutions
• Familiarity with AWS Config, Security Hub, and related compliance tooling

What we offer

• Long-term cooperation with challenging international projects
• Flexible working model and work-life balance support
• Professional development opportunities, certifications, and training programs
• Access to modern technologies and cloud-based environments
• Private medical care and additional employee benefits
• Supportive and collaborative work culture
• Opportunity to work with experienced experts and industry-leading clients