Security SRE - Bucharest Sovereign Cloud Hub

Thales
Bucharest
Workplace: HybridFull timeFunction: DevOps, Cloud & InfrastructureExperience: 3+ yearsSkills: ["Incident response","Post-mortems","Continuous improvement","Cross-team collaboration","Security-by-design"]

Build and operate the security foundations of a sovereign cloud region by standing up security-by-design practices from scratch. Run HashiCorp Vault at scale, design and operate Cloud KMS strategies, own platform PKI and mTLS patterns, and maintain Keycloak/IDP federation. Implement ELK-based SIEM detection, contribute to TPM/HSM trust roots, and lead incident response with follow-the-sun on-call coverage alongside Google Cloud SRE teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Thales
Thales
2 months ago

Security SRE - Bucharest Sovereign Cloud Hub

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 19 hours agoStatus: Live

Job Summary

Build and operate the security foundations of a sovereign cloud region by standing up security-by-design practices from scratch. Run HashiCorp Vault at scale, design and operate Cloud KMS strategies, own platform PKI and mTLS patterns, and maintain Keycloak/IDP federation. Implement ELK-based SIEM detection, contribute to TPM/HSM trust roots, and lead incident response with follow-the-sun on-call coverage alongside Google Cloud SRE teams.
Location: Bucharest
Workplace: Hybrid
Employment Type: Full time
Job Function: DevOps, Cloud & Infrastructure

Key Responsibilities

  • •Operate HashiCorp Vault at platform scale, including topology, policies, secret engines, and PKI backends.
  • •Design and run Cloud KMS strategies such as rotation, BYOK/HYOK, and HSM integration.
  • •Own the platform PKI (root and intermediate CAs), certificate lifecycle, and mTLS patterns.
  • •Configure and maintain Keycloak/IDP federation for human and machine identities.
  • •Implement ELK-based security monitoring, drive incident response and post-mortems, and support continuous improvement with follow-the-sun on-call.

Pay and Benefits

Perks:Health InsuranceMeal Allowance

Key Requirements

  • •Minimum 3 years in Site Reliability Engineering or Security Platform Engineering.
  • •Deep hands-on experience with HashiCorp Vault (or equivalent enterprise secrets management).
  • •Solid IAM and identity provider experience (Keycloak, Workspace, Okta or similar).
  • •Hands-on KMS/encryption key management design and operations.
  • •Strong Linux fundamentals and cloud security best practices, plus excellent English.
Experience:3+ years
Skills:Incident responsePost-mortemsContinuous improvementCross-team collaborationSecurity-by-design
Languages:English
Tech Stack:HashiCorp VaultPKICloud KMSBYOKHYOKHSMTPMKeycloakIDP federationELKSIEMMTLSLinuxGKEVertex AI

Company Brief

Thales
Designs and delivers advanced systems and services for aerospace, defence, security, and digital identity and cybersecurity markets, serving government and commercial customers worldwide.
Industry: Defense Technology
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Paris, France
Founded: 2000
WebsiteLinkedIn