Encryption & KMS Engineer

CCDS; Dammam; On-site; SAR 279,000 - 502,000; Full time

Job summary

CCDS in Dammam seeks an experienced Encryption & KMS Engineer to operate and support a centralized Key Management System and enterprise encryption infrastructure. You will manage cryptographic keys through their lifecycle, implement encryption-at-rest, and coordinate with databases, applications, and security teams during onboarding.

This full-time onsite role requires a security-focused mindset, CompTIA Security+ certification, and the ability to work across IT, infrastructure, and vendor

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
• 5+ years of relevant experience in encryption, data security, KMS, key management, or enterprise cybersecurity.
• Strong understanding of symmetric and asymmetric cryptography, cryptographic key lifecycle, TLS/SSL, certificates, and secure key storage.
• Hands-on experience with enterprise KMS/encryption platforms is highly preferred.
• Experience with AD/LDAP, KMIP, databases, servers, applications, or storage integrations.
• Experience working with enterprise security infrastructure and regulated environments is an advantage.
• Willingness to work full-time onsite in Dammam.

Responsibilities

• Operate and administer the centralized Key Management System (KMS).
• Perform cryptographic key generation, storage, rotation, backup, recovery, revocation, archival, and secure destruction.
• Configure and maintain encryption policies according to approved security standards.
• Administer KMS connectors, agents, and integrations across enterprise systems.
• Support AD/LDAP integration and identity-based access controls.
• Support KMIP integrations and enterprise key-management workflows.
• Monitor KMS health, system events, audit logs, and security alerts.
• Investigate key-management and encryption-related incidents.
• Coordinate with database, application, infrastructure, and security teams during system onboarding.
• Support encryption-at-rest and data-protection implementations.
• Maintain configuration records, operational documentation, procedures, and runbooks.
• Participate in testing, disaster recovery, maintenance, and knowledge-transfer activities.
• Escalate complex technical issues to senior engineers and OEM/vendor support.

Skills

KMS

Encryption

Key management

AD/LDAP

KMIP

TLS/SSL

Security operations

Documentation

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

CipherTrust Manager

CipherTrust Transparent Encryption

Job description

Location: Dammam, Saudi Arabia
Employment Type: Full-Time | Onsite
Project Duration: Long-term project assignment

About the Role

We are looking for an experienced Encryption & KMS Engineer to operate and support a centralized Key Management System and enterprise encryption infrastructure.

The role is responsible for the secure management of cryptographic keys throughout their lifecycle and for supporting integrations with enterprise applications, databases, infrastructure, identity services, and security platforms.

Key Responsibilities

• Operate and administer the centralized Key Management System (KMS).
• Perform cryptographic key generation, storage, rotation, backup, recovery, revocation, archival, and secure destruction.
• Configure and maintain encryption policies according to approved security standards.
• Administer KMS connectors, agents, and integrations across enterprise systems.
• Support AD/LDAP integration and identity-based access controls.
• Support KMIP integrations and enterprise key-management workflows.
• Monitor KMS health, system events, audit logs, and security alerts.
• Investigate key-management and encryption-related incidents.
• Coordinate with database, application, infrastructure, and security teams during system onboarding.
• Support encryption-at-rest and data-protection implementations.
• Maintain configuration records, operational documentation, procedures, and runbooks.
• Participate in testing, disaster recovery, maintenance, and knowledge-transfer activities.
• Escalate complex technical issues to senior engineers and OEM/vendor support.

Required Qualifications & Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
• 5+ years of relevant experience in encryption, data security, KMS, key management, or enterprise cybersecurity.
• Strong understanding of symmetric and asymmetric cryptography, cryptographic key lifecycle, TLS/SSL, certificates, and secure key storage.
• Hands-on experience with enterprise KMS/encryption platforms is highly preferred.
• Experience with AD/LDAP, KMIP, databases, servers, applications, or storage integrations.
• Experience working with enterprise security infrastructure and regulated environments is an advantage.
• Willingness to work full-time onsite in Dammam.

Required Certification

• CompTIA Security+ or equivalent recognized cybersecurity certification.

Preferred Certifications & Training

• Thales CipherTrust Manager / CipherTrust Transparent Encryption (CTE) / KMS official training or certification.
• PKI and cryptography training.
• Vendor-specific encryption/KMS certification.
• ITIL 4 Foundation.

Core Competencies

KMS | Encryption | Cryptography | Key Lifecycle Management | KMIP | AD/LDAP | Security Operations | Troubleshooting | Documentation