HSM & PKI Security Engineer

Location: Dammam, Saudi ArabiaEmployment Type: Full-Time | OnsiteProject Duration: Long-term project assignmentAbout The RoleWe are seeking an experienced HSM & PKI Security Engineer to operate, secure, and support enterprise Hardware Security Module and Public Key Infrastructure environments.The engineer will be responsible for HSM administration, cryptographic key protection, high availability, backup and recovery, PKI integrations, certificate lifecycle activities, and coordination with the HSM OEM.Key ResponsibilitiesAdminister and operate Thales Luna HSM infrastructureManage HSM partitions, security domains, roles, access controls, and high-availability configurationsSupport HSM backup, recovery, cloning, and disaster recovery proceduresManage PED/MFA and secure administrative access to HSM infrastructureSupport integration of HSM with enterprise applications, databases, servers, and security platformsProtect and manage cryptographic keys in accordance with security policiesSupport Microsoft Certificate Authority and AD CS environmentsSupport public certificate lifecycle management, including issuance, renewal, installation, and revocationCoordinate with DigiCert or other public Certificate Authority providersTroubleshoot certificate, PKI, TLS/SSL, and HSM-related incidentsPerform health checks, maintenance, testing, and technical validationCoordinate technical activities with OEM/vendor engineersMaintain HSM/PKI documentation, configuration records, procedures, and recovery runbooksSupport audit, compliance, and security assessment requirementsRequirementsRequired Qualifications & ExperienceBachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or related discipline5+ years of experience in HSM, PKI, cryptography, certificate management, or enterprise securityStrong knowledge of PKI, X.509 certificates, TLS/SSL, RSA, ECC, AES, and cryptographic key managementHands-on experience with enterprise HSM technologiesExperience with Microsoft AD CS / Certificate Services is highly desirableExperience supporting enterprise or government cybersecurity environments is preferredMust be available full-time onsite in DammamRequired CertificationCompTIA Security+ or equivalent recognized security certificationPreferred Certifications & TrainingThales Luna HSM official training/certificationMicrosoft PKI / AD CS certification or advanced PKI trainingVendor-specific HSM administration certificationRelevant cryptography or PKI professional certificationCore CompetenciesHSM | PKI | Cryptography | AD CS | Certificate Management | TLS/SSL | Key Protection | High Availability | Backup & Recovery | TroubleshootingCandidates should clearly indicate their HSM, PKI, certificate-management platforms, and vendor training/certifications on their CV.