HSM & PKI Security Engineer

About the role

We are looking for an experienced HSM & PKI Security Engineer to operate, secure and support our enterprise Hardware Security Module and Public Key Infrastructure environments. The role is based onsite in Dammam and involves long‑term project work for a cloud consultancy.

Key responsibilities

• Administer and operate Thales Luna HSM infrastructure, including partitions, security domains, roles and access controls.
• Configure and maintain high‑availability setups, backup, recovery, cloning and disaster‑recovery procedures.
• Manage cryptographic keys and protect them according to security policies.
• Support Microsoft AD CS and Certificate Authority environments, handling certificate issuance, renewal, installation and revocation.
• Integrate HSM with enterprise applications, databases, servers and security platforms.
• Troubleshoot incidents related to certificates, PKI, TLS/SSL and HSM.
• Perform health checks, maintenance, testing and technical validation.
• Coordinate technical activities with OEM/vendor engineers and maintain documentation, runbooks and compliance records.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, IT or a related field.
• Minimum 5 years of hands‑on experience with HSM, PKI, cryptography or enterprise security.
• Strong knowledge of X.509 certificates, TLS/SSL, RSA, ECC, AES and key management.
• Experience with Microsoft AD CS / Certificate Services is highly desirable.
• Ability to work full‑time onsite in Dammam.
• CompTIA Security+ or equivalent security certification.

Required skills

• HSM (Thales Luna)
• PKI and certificate lifecycle management
• Key protection and cryptographic algorithms (RSA, ECC, AES)
• Backup and disaster‑recovery procedures
• High‑availability configuration
• Microsoft AD CS / Certificate Authority
• TLS/SSL troubleshooting
• Integration with enterprise applications