Encryption & KMS Engineer

Location: Dammam, Saudi ArabiaEmployment Type: Full-Time | OnsiteProject Duration: Long-term project assignmentAbout The RoleWe are looking for an experienced Encryption & KMS Engineer to operate and support a centralized Key Management System and enterprise encryption infrastructure.The role is responsible for the secure management of cryptographic keys throughout their lifecycle and for supporting integrations with enterprise applications, databases, infrastructure, identity services, and security platforms.Key ResponsibilitiesOperate and administer the centralized Key Management System (KMS)Perform cryptographic key generation, storage, rotation, backup, recovery, revocation, archival, and secure destructionConfigure and maintain encryption policies according to approved security standardsAdminister KMS connectors, agents, and integrations across enterprise systemsSupport AD/LDAP integration and identity-based access controlsSupport KMIP integrations and enterprise key-management workflowsMonitor KMS health, system events, audit logs, and security alertsInvestigate key-management and encryption-related incidentsCoordinate with database, application, infrastructure, and security teams during system onboardingSupport encryption-at-rest and data-protection implementationsMaintain configuration records, operational documentation, procedures, and runbooksParticipate in testing, disaster recovery, maintenance, and knowledge-transfer activitiesEscalate complex technical issues to senior engineers and OEM/vendor supportRequirementsRequired Qualifications & ExperienceBachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field5+ years of relevant experience in encryption, data security, KMS, key management, or enterprise cybersecurityStrong understanding of symmetric and asymmetric cryptography, cryptographic key lifecycle, TLS/SSL, certificates, and secure key storageHands-on experience with enterprise KMS/encryption platforms is highly preferredExperience with AD/LDAP, KMIP, databases, servers, applications, or storage integrationsExperience working with enterprise security infrastructure and regulated environments is an advantageWillingness to work full-time onsite in DammamRequired CertificationCompTIA Security+ or equivalent recognized cybersecurity certificationPreferred Certifications & TrainingThales CipherTrust Manager / CipherTrust Transparent Encryption (CTE) / KMS official training or certificationPKI and cryptography trainingVendor-specific encryption/KMS certificationITIL 4 FoundationCore CompetenciesKMS | Encryption | Cryptography | Key Lifecycle Management | KMIP | AD/LDAP | Security Operations | Troubleshooting | DocumentationPlease submit the CV highlighting hands-on KMS, encryption, cryptography, and enterprise security experience.