HSM & PKI Security Engineer

About the role

CCDS is looking for an experienced HSM and PKI Security Engineer to operate, secure and support enterprise Hardware Security Module and Public Key Infrastructure environments. This is a long-term, full-time, onsite assignment in Dammam, Saudi Arabia.

Key responsibilities

• Administer and operate Thales Luna HSM infrastructure, including partitions, security domains, roles, access controls and high-availability settings.
• Support HSM backup, recovery, cloning and disaster recovery, and protect cryptographic keys according to security policy.
• Manage PED/MFA and secure administrative access to the HSM infrastructure.
• Integrate HSM with enterprise applications, databases, servers and security platforms.
• Support Microsoft AD CS environments and public certificate lifecycle (issuance, renewal, installation, revocation), coordinating with DigiCert or other CA providers.
• Troubleshoot certificate, PKI, TLS/SSL and HSM incidents, perform health checks, maintenance and testing, and coordinate with OEM/vendor engineers.
• Maintain documentation, configuration records, procedures and recovery runbooks, and support audits and compliance checks.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering or a related field.
• 5+ years of experience in HSM, PKI, cryptography, certificate management or enterprise security.
• Hands-on experience with enterprise HSM technologies; experience in enterprise or government cybersecurity environments preferred.
• Full-time onsite availability in Dammam.
• CompTIA Security+ or equivalent recognized security certification required; Thales Luna, Microsoft PKI/AD CS or vendor-specific HSM certifications preferred.

Required skills

• PKI, X.509 certificates, TLS/SSL, RSA, ECC, AES and cryptographic key management
• HSM administration, certificate management, AD CS, high availability, backup and recovery, troubleshooting