Encryption & KMS Engineer

About the role

Requirements

• Required Qualifications & Experience
• - Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
• - 5+ years of relevant experience in encryption, data security, KMS, key management, or enterprise cybersecurity.
• - Strong understanding of symmetric and asymmetric cryptography, cryptographic key lifecycle, TLS/SSL, certificates, and secure key storage.
• - Hands-on experience with enterprise KMS/encryption platforms is highly preferred.
• - Experience with AD/LDAP, KMIP, databases, servers, applications, or storage integrations.
• - Experience working with enterprise security infrastructure and regulated environments is an advantage.
• - Willingness to work full-time onsite in Dammam.
• Required Certification
• - CompTIA Security+ or equivalent recognized cybersecurity certification.
• Preferred Certifications & Training
• - Thales CipherTrust Manager / CipherTrust Transparent Encryption (CTE) / KMS official training or certification.
• - PKI and cryptography training.
• - Vendor-specific encryption/KMS certification.
• - ITIL 4 Foundation.
• Core Competencies
• KMS | Encryption | Cryptography | Key Lifecycle Management | KMIP | AD/LDAP | Security Operations | Troubleshooting | Documentation
• Please submit the CV highlighting hands-on KMS, encryption, cryptography, and enterprise security experience.

Responsibilities

• - Operate and administer the centralized Key Management System (KMS).
• - Perform cryptographic key generation, storage, rotation, backup, recovery, revocation, archival, and secure destruction.
• - Configure and maintain encryption policies according to approved security standards.
• - Administer KMS connectors, agents, and integrations across enterprise systems.
• - Support AD/LDAP integration and identity-based access controls.
• - Support KMIP integrations and enterprise key-management workflows.
• - Monitor KMS health, system events, audit logs, and security alerts.
• - Investigate key-management and encryption-related incidents.
• - Coordinate with database, application, infrastructure, and security teams during system onboarding.
• - Support encryption-at-rest and data-protection implementations.
• - Maintain configuration records, operational documentation, procedures, and runbooks.
• - Participate in testing, disaster recovery, maintenance, and knowledge-transfer activities.
• - Escalate complex technical issues to senior engineers and OEM/vendor support.

Skills

• KMS
• Encryption
• Cryptography
• Key Lifecycle Management
• KMIP
• AD/LDAP
• Security Operations
• Incident Investigation
• TLS/SSL
• Key Management Lifecycle
• Encryption at Rest
• System Onboarding
• Backup and Recovery