{"id":2904645,"url":"https://alion.io/job/ccds-hsm-pki-security-engineer","title":"HSM & PKI Security Engineer","company":{"id":4451244,"name":"Cloud Consultancy","domain":"ccds.ws","url":"https://alion.io/company/ccds-ws","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Dammam, Saudi Arabia"],"countries":["SA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"PKI","optional":false}],"status":"live","first_seen_at":"2026-08-26T00:00:00Z","employer_posted_date":"2026-08-26","last_verified_at":"2026-10-25T20:12:44Z","board_verified":true,"closed_at":null,"days_open":60,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":60},"description":"Location: Dammam, Saudi Arabia\nEmployment Type: Full-Time | Onsite\nProject Duration: Long-term project assignment\nAbout the Role\nWe are seeking an experienced HSM & PKI Security Engineer to operate, secure, and support enterprise Hardware Security Module and Public Key Infrastructure environments.\nThe engineer will be responsible for HSM administration, cryptographic key protection, high availability, backup and recovery, PKI integrations, certificate lifecycle activities, and coordination with the HSM OEM.\nKey Responsibilities\nAdminister and operate Thales Luna HSM infrastructure.\nManage HSM partitions, security domains, roles, access controls, and high-availability configurations.\nSupport HSM backup, recovery, cloning, and disaster recovery procedures.\nManage PED/MFA and secure administrative access to HSM infrastructure.\nSupport integration of HSM with enterprise applications, databases, servers, and security platforms.\nProtect and manage cryptographic keys in accordance with security policies.\nSupport Microsoft Certificate Authority and AD CS environments.\nSupport public certificate lifecycle management, including issuance, renewal, installation, and revocation.\nCoordinate with DigiCert or other public Certificate Authority providers.\nTroubleshoot certificate, PKI, TLS/SSL, and HSM-related incidents.\nPerform health checks, maintenance, testing, and technical validation.\nCoordinate technical activities with OEM/vendor engineers.\nMaintain HSM/PKI documentation, configuration records, procedures, and recovery runbooks.\nSupport audit, compliance, and security assessment requirements.\nRequirements\nRequired Qualifications & Experience\nBachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or related discipline.\n5+ years of experience in HSM, PKI, cryptography, certificate management, or enterprise security.\nStrong knowledge of PKI, X.509 certificates, TLS/SSL, RSA, ECC, AES, and cryptographic key management.\nHands-on experience with enterprise HSM technologies.\nExperience with Microsoft AD CS / Certificate Services is highly desirable.\nExperience supporting enterprise or government cybersecurity environments is preferred.\nMust be available full-time onsite in Dammam.\nRequired Certification\nCompTIA Security+ or equivalent recognized security certification.\nPreferred Certifications & Training\nThales Luna HSM official training/certification.\nMicrosoft PKI / AD CS certification or advanced PKI training.\nVendor-specific HSM administration certification.\nRelevant cryptography or PKI professional certification.\nCore Competencies\nHSM | PKI | Cryptography | AD CS | Certificate Management | TLS/SSL | Key Protection | High Availability | Backup & Recovery | Troubleshooting\nCandidates should clearly indicate their HSM, PKI, certificate-management platforms, and vendor training/certifications on their CV.","description_format":"text","description_chars":2886,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Saudi Arabia","iso":"SA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Technology","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-20T07:31:22Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.428,"p_room":0.28,"age_days":60,"expected_fill_days":23,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/ccds-hsm-pki-security-engineer","json_url":"https://alion.io/job/ccds-hsm-pki-security-engineer.json","meta":{"generated_at":"2026-10-25T21:15:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30062,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4451244},"rest":"https://alion.io/mcp/rest/get_company?id=4451244"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fccds-hsm-pki-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fccds-hsm-pki-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fccds-hsm-pki-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ccds-hsm-pki-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fccds-hsm-pki-security-engineer"}]}