Senior Cybersecurity Engineer

Client of Salt; Riyadh; On-site; SAR 120,000 - 180,000; Full time

Job summary

Client of Salt is seeking a hands-on Senior Cybersecurity Engineer to manage enterprise encryption, cryptographic key-management and HSM environments for a large government-related organisation. You will ensure critical systems, sensitive data, and cryptographic keys remain secure, available, and audit-ready.

In this role you will administer Thales CipherTrust Manager, CipherTrust Transparent Encryption and Luna HSMs, handle the full key lifecycle, and collaborate with infrastructure,

Qualifications

• Experience with Thales CipherTrust Manager and Luna HSM.
• Knowledge of encryption, cryptography, HSM, key management and PKI.
• Experience with KMIP, PKCS#11, REST APIs, JCE and MS CNG/CAPI.
• Exposure to regulated environments and frameworks such as PCI DSS or ISO 27001.

Responsibilities

• Administer, configure, upgrade and support CipherTrust Manager and Luna HSM environments.
• Manage the full cryptographic key lifecycle including creation, rotation, backup and recovery.
• Configure high-availability groups, backups, disaster-recovery and secure partitions.
• Deliver and support encryption, tokenisation, masking and database file encryption use cases.
• Integrate CipherTrust and HSM services with apps, databases, middleware, PKI and cloud services.
• Investigate and resolve complex incidents related to encryption certificates and HSM connectivity.
• Monitor platform health, key activity, access controls and suspicious admin activity.
• Produce documentation, procedures and audit evidence.
• Collaborate with infrastructure, application, database, cyber and audit teams on changes.

Skills

Encryption knowledge

HSM experience

PKI expertise

Production troubleshooting

Tools

CipherTrust Manager

CipherTrust Transparent Encryption

Luna HSM

KMIP

PKCS#11

Job description

We are looking for a hands-on Senior Cybersecurity Engineer to manage and support enterprise encryption cryptographic key-management and HSM environments for a large government-related organisation. This is a specialist security-engineering role not a SOC GRC or people-management position. You will be responsible for ensuring critical systems sensitive data and cryptographic keys remain secure available and audit-ready.

Key responsibilities

• Administer, configure, upgrade and support Thales CipherTrust Manager Data Security Platform and Luna HSM environments
• Manage the full cryptographic key lifecycle including key creation rotation backup recovery revocation and secure destruction
• Configure and support Luna HSM partitions client connectivity high-availability groups secure backups and disaster-recovery capability
• Deliver and support encryption tokenisation masking and database file-encryption use cases
• Integrate CipherTrust and HSM services with applications databases middleware PKI identity platforms and cloud services
• Investigate and resolve complex L3 incidents involving encryption certificates key access HSM connectivity and platform availability
• Monitor platform health certificate expiry key activity access controls and suspicious administrative activity
• Produce technical documentation operational procedures and audit evidence
• Work closely with infrastructure application database cyber and audit teams on new deployments and changes

Key requirements

• Proven production experience with Thales CipherTrust Manager, CipherTrust Transparent Encryption and/or Thales Luna HSM
• Strong knowledge of encryption, cryptography, hardware security modules, key management and PKI
• Experience with technologies such as KMIP, PKCS#11, REST APIs, JCE and Microsoft CNG/CAPI
• Exposure to databases Linux/Windows networking clustering high availability and disaster recovery
• Experience supporting regulated environments and frameworks such as NCA, SAMA, PCI DSS, FIPS or ISO 27001 is highly desirable
• Strong troubleshooting skills and the ability to operate independently in a live production environment