Encryption & KMS Engineer

About the Encryption & KMS Engineer Role

Cloud Consultancy - CCDS is seeking an experienced Encryption & KMS Engineer to join our team in Dammam, Eastern, Saudi Arabia. This full-time role focuses on operating and supporting a centralized Key Management System (KMS) and enterprise encryption infrastructure. The successful candidate will be responsible for the secure management of cryptographic keys throughout their lifecycle and for supporting integrations with various enterprise systems, including applications, databases, infrastructure, identity services, and security platforms.

Key Responsibilities

• Operate and administer the centralized Key Management System (KMS).
• Perform cryptographic key generation, storage, rotation, backup, recovery, revocation, archival, and secure destruction.
• Configure and maintain encryption policies according to approved security standards.
• Administer KMS connectors, agents, and integrations across enterprise systems.
• Support AD/LDAP integration and identity-based access controls.
• Support KMIP integrations and enterprise key-management workflows.
• Monitor KMS health, system events, audit logs, and security alerts.
• Investigate key-management and encryption-related incidents.
• Coordinate with database, application, infrastructure, and security teams during system onboarding.
• Support encryption-at-rest and data-protection implementations.
• Maintain configuration records, operational documentation, procedures, and runbooks.
• Participate in testing, disaster recovery, maintenance, and knowledge-transfer activities.
• Escalate complex technical issues to senior engineers and OEM/vendor support.

Essential Qualifications and Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
• Minimum of 5 years of relevant experience in encryption, data security, KMS, key management, or enterprise cybersecurity.
• Strong understanding of symmetric and asymmetric cryptography, cryptographic key lifecycle, TLS/SSL, certificates, and secure key storage.
• Experience with AD/LDAP, KMIP, databases, servers, applications, or storage integrations.

Required Certifications

• CompTIA Security+ or an equivalent recognized cybersecurity certification.

Preferred Skills and Certifications

• Hands-on experience with enterprise KMS/encryption platforms.
• Experience working with enterprise security infrastructure and regulated environments.
• Thales CipherTrust Manager / CipherTrust Transparent Encryption (CTE) / KMS official training or certification.
• PKI and cryptography training.
• Vendor-specific encryption/KMS certification.
• ITIL 4 Foundation.

Work Arrangement

This is a full-time, onsite position based in Dammam, Saudi Arabia. Candidates must be willing to work from the Dammam office.