Entrust HSM & PKI Administraor

Role Description

We are seeking an experienced Entrust HSM & PKI Administrator for a full-time, on-site role located in the Riyadh Region. The administrator will be responsible for the day-to-day operations, configuration, monitoring, maintenance, and troubleshooting of Hardware Security Modules (HSMs) and Public Key Infrastructure (PKI) systems. This role involves implementing best practices for security, ensuring compliance with organizational policies, managing certificates, and collaborating with cross-functional teams to support security initiatives.

Education

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or Engineering
• Relevant security certifications are a strong plus

Core Technical Skills (Must-Have)

• Hands-on experience with Entrust nShield HSMs
• nShield Connect
• nShield Solo
• nShield Edge
• Strong understanding of cryptography concepts:
• Symmetric & asymmetric encryption
• RSA, ECC, AES
• Hashing (SHA-256, SHA-512)
• Digital signatures
• Key management lifecycle:
• Key generation, storage, rotation, backup, recovery, destruction
• HSM security world management:
• Security World creation
• Administrator & operator cards
• Module initialization and recovery

PKI & Integration Skills

• Experience with PKI infrastructure
• Integration of HSMs with:
• Certificate Authorities (CA)
• Core banking systems
• Payment systems
• SSL/TLS
• Code signing platforms
• Familiarity with:
• KMIP
• PKCS#11
• CSP / JCE providers
• REST APIs (basic understanding)

Systems & OS Knowledge

• Linux (RHEL, CentOS, Ubuntu) – very important
• Windows Server (basic to intermediate)
• Network fundamentals (ports, firewalls, secure connectivity)
• Shell scripting (bash / basic automation)

Operations & Support

• HSM installation, upgrade, patching, and firmware updates
• Troubleshooting HSM issues and performance
• Incident response related to cryptographic systems
• Backup, DR, and HSM high availability (HA) setups
• Documentation & audit support

Certifications (Nice to Have)

• Entrust nShield training/certification
• CISSP / CISM / CEH
• ISO 27001 Lead Implementer/Auditor
• PCI Professional (PCIP)

Soft Skills

• Strong documentation skills
• Ability to work with:
• Security teams
• Infrastructure teams
• Application teams
• Experience handling audits and compliance reviews
• Attention to detail (critical for cryptographic operations)

What We Offer:
Competitive salary and benefits package.
Opportunity to work on Entrust HSM & PKI Project.
Dynamic and collaborative work environment.
Career growth and professional development opportunities.

If you meet the above requirements and are passionate about HSM & PKI, please submit your CV and portfolio of projects demonstrating your expertise.

Job Types: Permanent, Full-time

Work Location: In person