Security Engineer - HSM & PKI

Help AG
Dubai
Workplace: HybridFull timeFunction: CybersecurityExperience: 3-5 yearsEducation: bachelorsSkills: ["Analytical and troubleshooting","Customer-facing communication","Documentation","Technical writing","Collaboration"]

Support day-to-day enterprise PKI and HSM operations, including HSM infrastructure health checks, connectivity troubleshooting, and cryptographic key management. Integrate and maintain Microsoft Active Directory Certificate Services (AD CS), handling Root/Intermediate/Issuing CA operations like certificate issuance, renewal, revocation, and expiration. Monitor and troubleshoot CRL/CDP/AIA/OCSP, perform PKI health checks, and support certificate lifecycle automation using PowerShell and Venafi.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Help AG
Help AG
3 days ago

Security Engineer - HSM & PKI

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Support day-to-day enterprise PKI and HSM operations, including HSM infrastructure health checks, connectivity troubleshooting, and cryptographic key management. Integrate and maintain Microsoft Active Directory Certificate Services (AD CS), handling Root/Intermediate/Issuing CA operations like certificate issuance, renewal, revocation, and expiration. Monitor and troubleshoot CRL/CDP/AIA/OCSP, perform PKI health checks, and support certificate lifecycle automation using PowerShell and Venafi.
Location: Dubai
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Configure and support HSM infrastructure, including health checks and troubleshooting connectivity/authentication issues.
  • •Support cryptographic key generation, secure storage, backup, and restoration; assist with HSM partition/access management and HA/DR activities.
  • •Maintain and operate AD CS environments (Root/Intermediate/Issuing CAs), managing certificate issuance, renewal, revocation, and expiration.
  • •Monitor and troubleshoot CRL/CDP/AIA and OCSP services; resolve certificate chain, trust, enrollment, and binding issues.
  • •Support certificate lifecycle management with Venafi (or similar) and assist with certificate-related automation using PowerShell.

Pay and Benefits

Perks:Health InsuranceLearning BudgetFlexible WorkWellness StipendAnnual Flights

Key Requirements

  • •3–5 years of experience in PKI, HSM, or certificate management.
  • •Hands-on experience with Microsoft Active Directory Certificate Services (AD CS) / PKI.
  • •Practical experience with Entrust or Thales Luna HSM (or equivalent) and HSM–AD CS integration.
  • •Experience troubleshooting PKI and certificate-related issues, including certificate templates and auto enrollment.
  • •Knowledge of certificate lifecycle management (issuance, renewal, revocation, deployment) and enterprise PKI/cryptography fundamentals.
Experience:3-5 yearsPKIHSMCertificate managementEnterprise PKI
Education:Bachelor's in Computer Science, Information Technology, Electronics
Skills:Analytical and troubleshootingCustomer-facing communicationDocumentationTechnical writingCollaboration
Tech Stack:Microsoft Active Directory Certificate Services (AD CS)PKIHSMEntrustThales LunaVenafi TPPCertutilOpenSSLPowerShellPKCS#11CSPKSPRoot CAIntermediate CAIssuing CACertificate TemplatesAuto EnrollmentCRLCDPAIA

Company Brief

Help AG
Provides cybersecurity solutions and managed security services including MDR, SOC, threat intelligence, consulting, and compliance for enterprises across the Middle East and APAC. Offers integration, incident response, and risk-management services for complex IT environments.
Industry: Cybersecurity
Company Size: Large (251 to 1,000 employees)
Growth: Established Company
Headquarters: Dubai, United Arab Emirates
WebsiteLinkedIn