Cyber Security Architect📣 إعلان

منذ يومان

	نوع العقد	دوام كامل
	طبيعة الوظيفة	بالموقع
	الموقع	الرياض

وصف الوظيفة

About the Role

Acuative Middle East is seeking an experienced PKI & Digital Signing Engineer to join our team in Riyadh, Saudi Arabia. This full-time role involves designing, implementing, administering, and supporting the organization's Public Key Infrastructure (PKI) and digital signing platforms. The successful candidate will manage enterprise certificate services, digital signature solutions, and cryptographic infrastructure, ensuring security, compliance, and high availability across both Windows and Linux environments. This position requires 5-10 years of relevant experience.

Key Responsibilities

Design, implement, and maintain enterprise Public Key Infrastructure (PKI) solutions.
Administer Certificate Authority (CA) infrastructure and certificate lifecycle processes, including issuance, renewal, revocation, and auditing.
Configure, maintain, and troubleshoot PKI services across Windows Server and Linux platforms, ensuring high availability and disaster recovery.
Deploy, configure, administer, and maintain SigningHub and implement ADSS Server for digital signatures, timestamping, and validation.
Administer and support Entrust Certificate Authority infrastructure and related PKI services.
Integrate digital signing platforms with enterprise applications, identity management systems, and document management workflows.
Monitor, secure, and harden PKI and digital signing infrastructure against vulnerabilities and cyber threats.
Conduct security assessments, audits, and compliance reviews of certificate services, maintaining documentation for PKI architecture and security controls.
Install, configure, patch, and maintain Windows Server and Linux systems supporting PKI and digital signing services.
Automate operational and administrative tasks using PowerShell, Bash, or other scripting languages.
Provide technical expertise and troubleshoot complex certificate, authentication, encryption, and digital signing issues.

Required Qualifications

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
Proven experience (5-10 years) designing, implementing, and administering enterprise PKI environments.
Strong administration experience with Windows Server and Linux.
Hands-on experience with SigningHub, ADSS Server, and Entrust Certificate Authority.
Strong knowledge of Public Key Infrastructure (PKI), digital certificates, Certificate Authorities, TLS/SSL, OCSP, CRLs, Hardware Security Modules (HSMs), and cryptographic concepts.
Experience integrating PKI and digital signing solutions with enterprise applications and identity platforms.
Experience with automation using PowerShell, Bash, or Python.

Preferred Skills and Certifications

Experience with Microsoft Active Directory Certificate Services (AD CS).
Knowledge of Microsoft Entra ID (Azure AD), Active Directory, LDAP, and SSO technologies.
Experience with cloud-based PKI services (Azure, AWS, or OCI).
Familiarity with REST APIs and enterprise application integration.
Experience working in regulated industries such as finance, healthcare, or government.
Relevant certifications such as Entrust PKI Certifications, Microsoft Certified: Windows Server, CompTIA Security+, CISSP, or CISM.
Knowledge of digital signature standards including PAdES, XAdES, CAdES, and eIDAS.