Security Engineer - HSM & PKI

Help AG; Dubai; Hybrid; AED 240,000 - 360,000; Full time

Benefits offered by this job

Health insurance

Career progression

Annual flight tickets

Flexible/Hybrid working

Open door policy

Job summary

Help AG is seeking a Security Engineer - HSM & PKI to lead PKI operations, HSM deployment, and certificate management in a large enterprise environment in Dubai. You will work hands-on with PKI, AD CS integration, and VO for certificate lifecycle across Root/Issuing CAs.

Ideal candidates bring 3–5 years of PKI/HSM experience, hands-on with Entrust or Thales Luna, and strong troubleshooting skills. The role offers a hybrid work setup and global security responsibilities.

Qualifications

• Bachelor-level degree required in CS/IT or related field.
• 3–5 years of PKI/HSM or certificate management experience.
• Hands-on with AD CS and PKI in enterprise environments.
• Certifications in PKI/HSM are a plus.

Responsibilities

• Configure and support HSM infrastructure and PKI services.
• Manage HSM health checks and connectivity issues.
• Oversee certificate issuance, renewal, revocation, and lifecycle.
• Integrate HSM with AD CS and manage templates.
• Support backup, DR, and high availability for PKI.
• Provide security operations and incident support.

Skills

PKI

HSM

AD CS

Venafi

Certificate Lifecycle

PowerShell

OpenSSL

PKCS#11 / CSP / KSP

Cryptography

Troubleshooting

Education

Bachelor’s degree in Computer Science / IT

Tools

Entrust

Thales Luna HSM

Venafi TPP

OpenSSL

Certutil

Job description

Help AG is looking for a talented and experienced Security Engineer - HSM & PKI with hands-on experience in Public Key Infrastructure (PKI), Microsoft Active Directory Certificate Services (AD CS), Hardware Security Modules (HSM), and certificate lifecycle management. This position will support day-to-day PKI and HSM operations, certificate management, troubleshooting, and implementation activities in an enterprise environment.

Responsibilities

• Configure and support HSM infrastructure, preferably Entrust, Thales Luna, or equivalent HSM platforms.
• Perform HSM health checks and troubleshoot connectivity and authentication issues.
• Support cryptographic key generation, secure storage, backup, and restoration.
• Support HSM integration with Microsoft AD CS.
• Assist with HSM partition, user, role, and access management.
• Support HSM high availability and disaster recovery activities.
• Troubleshoot cryptographic operations and HSM-related issues.
• Support and maintain Microsoft Active Directory Certificate Services (AD CS).
• Perform day-to-day operations for Root CA, Intermediate CA, and Issuing CA environments.
• Manage certificate issuance, renewal, revocation, and expiration.
• Configure and troubleshoot Certificate Templates and Auto Enrollment.
• Monitor and troubleshoot CRL, CDP, AIA, and OCSP services.
• Troubleshoot certificate chain, trust, enrollment, and certificate binding issues.
• Perform PKI health checks using certutil, PKIView, and Event Viewer.
• Support certificate-based applications including SSL/TLS, VPN, S/MIME, and authentication.
• Support CA backup, restoration, renewal, and basic disaster recovery activities.
• Support certificate lifecycle management using Venafi TPP or similar certificate management platforms.
• Maintain certificate inventory and monitor certificate expiry.
• Support certificate discovery, renewal, revocation, and deployment.
• Assist with certificate-related automation using PowerShell.

Qualifications & Skills

• Bachelor’s degree in Computer Science, Information Technology, Electronics, or a related field.
• 3-5 years of experience in PKI, HSM, or certificate management.
• Relevant technical certifications or strong hands-on experience will be considered.
• Hands-on experience with Microsoft AD CS.
• Practical experience with Entrust, Thales Luna HSM, or similar HSM platforms.
• Experience troubleshooting PKI and certificate-related issues.
• Experience with certificate lifecycle management tools such as Venafi.
• Good understanding of enterprise PKI and cryptography fundamentals.
• Relevant PKI, HSM, Microsoft, or vendor training/certification is an advantage.
• Experience working in production operations and customer-facing environments.
• Understanding of ITIL incident, problem, and change management processes.
• Required Technical Skills
  • Microsoft AD CS / PKI
  • Entrust, Thales Luna HSM, or equivalent HSM
  • HSM and AD CS integration
  • Root CA / Issuing CA concepts
  • Certificate Templates and Auto Enrollment
  • CRL / CDP / AIA
  • Basic OCSP knowledge
  • Certificate lifecycle management
• Expertise in all/many below technologies
  • Microsoft Active Directory Certificate Services (AD CS) / PKI
  • HSM - Entrust, Thales Luna, or equivalent HSM platforms
  • HSM and Microsoft AD CS integration
  • Certificate lifecycle management - issuance, renewal, revocation, and deployment
  • CRL, CDP, AIA and basic OCSP
  • Certificate chain and trust troubleshooting
  • Venafi TPP or similar certificate management platforms
  • PKCS#11, CSP, and KSP concepts
  • Cryptography fundamentals
  • certutil, OpenSSL, and PowerShell
• Ability to work under pressure and meet defined SLAs.
• Self-motivated with a professional attitude.
• Strong analytical and troubleshooting skills.
• Good customer-facing and communication skills.
• Ability to handle technical incidents and escalations.
• Well-organized, detail-oriented, and able to follow security procedures.
• Good documentation and technical writing skills.
• Ability to collaborate with infrastructure, application, security, and operations teams.

Benefits

• Health insurance with one of the leading global providers for medical insurance.
• Career progression and growth through challenging projects and work.
• Employee engagement and wellness campaigns activities throughout the year.
• Excellent learning and development opportunities.
• Annual flights tickets.
• Inclusive and diverse working environment.
• Flexible/Hybrid working environment.
• Open door policy.

About Us

Help AG, the cybersecurity arm of e&, is the Middle East's trusted cybersecurity partner, enabling governments, enterprises and critical industries to innovate with confidence. Combining strategic consulting, advanced managed security services and deep technology expertise, Help AG helps organisations strengthen cyber resilience, secure AI adoption and build trusted sovereign digital environments. With regional expertise and a customer-first approach, Help AG delivers end-to-end cybersecurity capabilities designed to protect critical operations, manage evolving risks and support secure digital transformation. Through continuous innovation, trusted partnerships and measurable outcomes, Help AG enables organisations to remain resilient, prepared and confident in a complex digital world.