Security Engineer - HSM & PKI

Help AG; Dubai; Hybrid; AED 220,000 - 420,000; Full time

Benefits offered by this job

Health insurance

Career progression

Annual flights

Flexible/Hybrid working

Open door policy

Job summary

Help AG seeks a Security Engineer specializing in PKI, HSM, and certificate management. You will support PKI operations, AD CS integration, and HSM platforms in an enterprise setting.

The role requires hands-on experience with PKI, HSMs, and Venafi or similar tooling, with a focus on security infrastructure and customer-facing interactions. Hybrid work model in the UAE is supported.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Electronics, or a related field.
• 3–5 years of experience in PKI, HSM, or certificate management.
• Hands-on experience with Microsoft AD CS.
• Experience with Entrust, Thales Luna HSM, or equivalent HSM platforms.

Responsibilities

• Configure and support HSM infrastructure and PKI environments.
• Perform HSM health checks and troubleshoot connectivity and authentication issues.
• Manage certificate issuance, renewal, revocation, and expiration.
• Support AD CS and Root/Issuing CA environments.
• Assist with certificate templates, auto enrollment, CRL, CDP, AIA.

Skills

PKI expertise

HSM administration

AD CS

Certificate lifecycle

Troubleshooting

Customer-facing

Education

Bachelor's degree in CS/IT/EE

Tools

Venafi TPP

OpenSSL

certutil

Job description

Help AG is looking for a talented and experienced Security Engineer – HSM & PKI with hands-on experience in Public Key Infrastructure (PKI), Microsoft Active Directory Certificate Services (AD CS), Hardware Security Modules (HSM), and certificate lifecycle management.

This position will support day-to-day PKI and HSM operations, certificate management, troubleshooting, and implementation activities in an enterprise environment.

Responsibilities

• Configure and support HSM infrastructure, preferably Entrust, Thales Luna, or equivalent HSM platforms.
• Perform HSM health checks and troubleshoot connectivity and authentication issues.
• Support cryptographic key generation, secure storage, backup, and restoration.
• Support HSM integration with Microsoft AD CS.
• Assist with HSM partition, user, role, and access management.
• Support HSM high availability and disaster recovery activities.
• Troubleshoot cryptographic operations and HSM-related issues.
• Support and maintain Microsoft Active Directory Certificate Services (AD CS).
• Perform day-to-day operations for Root CA, Intermediate CA, and Issuing CA environments.
• Manage certificate issuance, renewal, revocation, and expiration.
• Configure and troubleshoot Certificate Templates and Auto Enrollment.
• Monitor and troubleshoot CRL, CDP, AIA, and OCSP services.
• Troubleshoot certificate chain, trust, enrollment, and certificate binding issues.
• Perform PKI health checks using certutil, PKIView, and Event Viewer.
• Support certificate-based applications including SSL/TLS, VPN, S/MIME, and authentication.
• Support CA backup, restoration, renewal, and basic disaster recovery activities.
• Support certificate lifecycle management using Venafi TPP or similar certificate management platforms.
• Maintain certificate inventory and monitor certificate expiry.
• Support certificate discovery, renewal, revocation, and deployment.
• Assist with certificate-related automation using PowerShell.

Qualifications & Skills

• Bachelor's degree in Computer Science, Information Technology, Electronics, or a related field.
• 3–5 years of experience in PKI, HSM, or certificate management.
• Relevant technical certifications or strong hands-on experience will be considered.
• Hands-on experience with Microsoft AD CS.
• Practical experience with Entrust, Thales Luna HSM, or similar HSM platforms.
• Experience troubleshooting PKI and certificate-related issues.
• Experience with certificate lifecycle management tools such as Venafi.
• Good understanding of enterprise PKI and cryptography fundamentals.
• Relevant PKI, HSM, Microsoft, or vendor training/certification is an advantage.
• Experience working in production operations and customer-facing environments.
• Understanding of ITIL incident, problem, and change management processes.
• Required Technical Skills
• Microsoft AD CS / PKI
• Entrust, Thales Luna HSM, or equivalent HSM
• HSM and AD CS integration
• Root CA / Issuing CA concepts
• Certificate Templates and Auto Enrollment
• CRL / CDP / AIA
• Basic OCSP knowledge
• Certificate lifecycle management
• Expertise in all/many below technologies
• Microsoft Active Directory Certificate Services (AD CS) / PKI
• HSM – Entrust, Thales Luna, or equivalent HSM platforms
• HSM and Microsoft AD CS integration
• Certificate lifecycle management – issuance, renewal, revocation, and deployment
• CRL, CDP, AIA, and basic OCSP
• Certificate chain and trust troubleshooting
• Venafi TPP or similar certificate management platforms
• PKCS#11, CSP, and KSP concepts
• Cryptography fundamentals
• certutil, OpenSSL, and PowerShell
• Ability to work under pressure and meet defined SLAs.
• Self-motivated with a professional attitude.
• Strong analytical and troubleshooting skills.
• Good customer-facing and communication skills.
• Ability to handle technical incidents and escalations.
• Well-organized, detail-oriented, and able to follow security procedures.
• Good documentation and technical writing skills.
• Ability to collaborate with infrastructure, application, security, and operations teams.

Benefits

• Health insurance with one of the leading global providers for medical insurance.
• Career progression and growth through challenging projects and work.
• Employee engagement and wellness campaigns activities throughout the year.
• Excellent learning and development opportunities.
• Annual flights tickets.
• Inclusive and diverse working environment.
• Flexible/Hybrid working environment.
• Open door policy.

About Us

Help AG, the cybersecurity arm of e&, is the Middle East's trusted cybersecurity partner, enabling governments, enterprises and critical industries to innovate with confidence. Combining strategic consulting, advanced managed security services and deep technology expertise, Help AG helps organisations strengthen cyber resilience, secure AI adoption and build trusted sovereign digital environments. With regional expertise and a customer-first approach, Help AG delivers end-to-end cybersecurity capabilities designed to protect critical operations, manage evolving risks and support secure digital transformation. Through continuous innovation, trusted partnerships and measurable outcomes, Help AG enables organisations to remain resilient, prepared and confident in a complex digital world.