HSM & PKI Security Engineer

About the Role

Cloud Consultancy - CCDS is seeking an experienced HSM & PKI Security Engineer to join our team in Dammam, Eastern, Saudi Arabia. This full-time role focuses on the operation, security, and support of enterprise Hardware Security Module (HSM) and Public Key Infrastructure (PKI) environments. The engineer will be responsible for HSM administration, cryptographic key protection, and managing certificate lifecycle activities, coordinating with relevant OEMs and Certificate Authority providers.

Key Responsibilities

• Administer and operate Thales Luna HSM infrastructure.
• Manage HSM partitions, security domains, roles, access controls, and high-availability configurations.
• Support HSM backup, recovery, cloning, and disaster recovery procedures.
• Manage PED/MFA and secure administrative access to HSM infrastructure.
• Support integration of HSM with enterprise applications, databases, servers, and security platforms.
• Protect and manage cryptographic keys in accordance with security policies.
• Support Microsoft Certificate Authority and AD CS environments.
• Support public certificate lifecycle management, including issuance, renewal, installation, and revocation.
• Coordinate with DigiCert or other public Certificate Authority providers.
• Troubleshoot certificate, PKI, TLS/SSL, and HSM-related incidents.
• Perform health checks, maintenance, testing, and technical validation.
• Coordinate technical activities with OEM/vendor engineers.
• Maintain HSM/PKI documentation, configuration records, procedures, and recovery runbooks.
• Support audit, compliance, and security assessment requirements.

Qualifications and Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related discipline.
• 5+ years of experience in HSM, PKI, cryptography, certificate management, or enterprise security.
• Strong knowledge of PKI, certificates, TLS/SSL, RSA, ECC, AES, and cryptographic key management.
• Hands-on experience with enterprise HSM technologies.
• Experience with Microsoft AD CS / Certificate Services is highly desirable.
• Experience supporting enterprise or government cybersecurity environments is preferred.

Required Certifications

• CompTIA Security+ or an equivalent recognized security certification.

Preferred Certifications and Training

• Thales Luna HSM official training/certification.
• Microsoft PKI / AD CS certification or advanced PKI training.
• Vendor-specific HSM administration certification.
• Relevant cryptography or PKI professional certification.

Work Environment

This is a full-time, onsite position based in Dammam, Saudi Arabia. Candidates must be available to work from the office in Dammam.