PKI & Cryptography Engineer (Nokia Focus)

We are hiring five (5) skilled PKI & Cryptography Engineers, each specializing in a specific technology area within Public Key Infrastructure and secure key management. The ideal candidates will have a primary specialization (PKI, HSM, CLM, or QKD) along with working knowledge of at least one additional cryptographic technology. A strong focus on the company’s NCM and NCLM platforms is preferred across the team.

Location: Riyadh, Saudi Arabia
Work Conditions:

• On-site
• Full-time
• Shift Coverage: 8×5 operational coverage, morning and evening shifts
• On-call rotation for critical P1 and P2 incidents

Key Responsibilities:

• Perform daily PKI administration, including certificate issuance, renewal, and revocation via platforms such as the company’s NCM and NCLM.
• Support configuration, operation, and monitoring of Hardware Security Modules (HSMs) for key generation and secure storage (Utimaco / Thales).
• Assist in key backup, restoration, lifecycle management, and integrity checks.
• Monitor cryptographic operations, certificate expiry, and compliance with SLA targets.
• Respond to PKI-related incidents and support internal teams during troubleshooting and audits.
• Maintain detailed operational documentation, change records, and configuration baselines.
• Participate in patching cycles, upgrades, and configuration validations under senior engineer guidance.
• Ensure secure handling of keys, certificates, and cryptographic materials.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field.
• Minimum 3 years of hands-on experience in PKI operations, key management, or infrastructure security.
• Working knowledge of X.509 certificates, key pairs, CRLs, trust stores, and cryptographic lifecycle management.
• Experience with the company’s PKI tools is highly preferred.

Technology Specializations (Candidates must be strong in at least ONE):

1. Public Key Infrastructure (PKI): Certificate management, digital signatures (Primary Vendor: the company)
2. Hardware Security Modules (HSM): Key generation, key storage, secure crypto operations (Vendors: Thales / Utimaco)
3. Certificate Lifecycle Management (CLM): Certificate issuance, renewal, revocation workflows (Primary Vendor: the company)
4. Quantum Key Distribution (QKD): Quantum-safe communication and key exchange

Preferred Certifications:

• the company NCM / NCLM Administrator
• Thales Certified Operator
• Utimaco HSM Certification
• Other PKI/HSM/cryptography-related credentials.