HSM & PKI Security Engineer

Role Overview

We are seeking a highly skilled and experienced HSM & PKI Security Engineer to join our team in Dammam. In this critical role, you will be responsible for designing, implementing, and maintaining robust Hardware Security Module (HSM) and Public Key Infrastructure (PKI) solutions to safeguard our organization’s cryptographic assets and digital identities. Your expertise will be instrumental in ensuring the integrity, confidentiality, and availability of our systems while adhering to industry best practices and compliance standards.

Key Responsibilities

• HSM Management: Deploy, configure, and manage HSM solutions to provide secure key storage, encryption, and digital signature capabilities. Ensure high availability and performance of HSM infrastructure.
• PKI Architecture: Design, implement, and maintain PKI infrastructure, including Certificate Authorities (CAs), Registration Authorities (RAs), and certificate lifecycle management processes. Develop policies and procedures to govern PKI operations.
• Cryptographic Security: Evaluate, recommend, and implement cryptographic algorithms, protocols, and key management strategies to mitigate risks and enhance security posture. Stay abreast of emerging threats and advancements in cryptographic technologies.
• Compliance & Auditing: Ensure all HSM and PKI implementations comply with relevant industry standards (e.g., FIPS 140-2/3, PCI DSS, ISO 27001) and regulatory requirements. Conduct regular audits, risk assessments, and penetration testing to identify vulnerabilities and implement corrective measures.
• Incident Response: Lead or support investigations into security incidents related to HSM or PKI breaches, including forensic analysis and remediation efforts. Develop and maintain incident response plans and playbooks.
• Collaboration & Training: Work closely with cross-functional teams, including IT, security, and compliance, to integrate HSM and PKI solutions seamlessly. Provide guidance and training to staff on cryptographic best practices and security protocols.
• Vendor & Technology Evaluation: Assess and recommend HSM and PKI solutions from leading vendors, ensuring alignment with organizational needs and budget constraints. Evaluate new technologies and tools to enhance security capabilities.

Qualifications & Skills

• Education: Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field. Advanced degrees or relevant certifications (e.g., CISSP, CISM, CEH, or PKI-specific certifications) are highly desirable.
• Experience: Minimum of 5 years of hands-on experience in HSM and PKI security, including deployment, configuration, and troubleshooting. Experience with leading HSM vendors (e.g., Thales, Gemalto, Utimaco) and PKI solutions (e.g., Microsoft AD CS, OpenSSL, EJBCA) is required.
• Technical Proficiency: In-depth knowledge of cryptographic principles, algorithms (e.g., RSA, ECC, AES), and protocols (e.g., TLS, SSL, IPsec). Familiarity with key management systems, certificate revocation mechanisms (e.g., CRL, OCSP), and secure coding practices.
• Soft Skills: Strong analytical, problem-solving, and communication skills. Ability to work independently and collaboratively in a fast-paced environment. Commitment to continuous learning and staying updated with industry trends.
• Language Proficiency: Fluency in English is required; proficiency in Arabic is a plus.

Work Environment & Benefits

This role is based in Dammam, offering a dynamic and collaborative work environment with opportunities for professional growth. We provide a competitive salary, comprehensive benefits package, and access to cutting-edge technologies. Join us in shaping the future of secure digital infrastructure and protecting our organization’s most critical assets.