Senior Cryptographic Services Specialist

🏗 We're Hiring: Senior Cryptographic Services Specialist

📍 Location: United Arab Emirates (Remote)

🕒 Employment Type: Full-Time

💼 Experience Level: Mid-Level to Senior

🌐 Work Arrangement: Fully Remote

About Us

We are a construction-focused organization committed to delivering complex projects through disciplined contract management, operational excellence, robust information security, and collaborative project delivery. Our distributed teams work across Project Management, Construction, Engineering, Procurement, Commercial, Legal, Finance, Human Resources, Design, Quality, HSE, Consultants, Contractors, Suppliers, Logistics, Administration, Information Technology, and Executive Leadership.

We recognize that secure cryptographic services are essential to protecting confidential information, safeguarding digital identities, maintaining trusted communications, and preserving the integrity of business-critical systems. Through effective cryptographic governance, secure key management, certificate lifecycle controls, and resilient security infrastructure, we aim to maintain strong protection for sensitive project information, commercial records, intellectual property, and enterprise technology assets.

The Role

We are seeking an experienced Senior Cryptographic Services Specialist to design, administer, secure, and improve enterprise cryptographic services across on-premises infrastructure, cloud environments, business applications, databases, networks, and digital platforms.

The successful candidate will manage cryptographic service capabilities involving encryption and decryption, cryptographic key management, Hardware Security Modules (HSMs), Public Key Infrastructure (PKI), digital certificates, digital signatures, cryptographic APIs, and secure key distribution. The role will focus on ensuring that cryptographic services are reliable, appropriately governed, securely configured, and aligned with organizational security requirements.

Working closely with Cybersecurity, Infrastructure, Cloud Engineering, Application Development, Network Engineering, Identity and Access Management (IAM), Data Protection, Compliance, and Risk Management teams, the specialist will establish secure cryptographic standards, maintain service availability, support cryptographic risk assessments, and strengthen the organization's overall information protection capabilities.

Key Responsibilities1. Enterprise Cryptographic Services Management

• Design, implement, administer, and maintain enterprise cryptographic services supporting business applications, infrastructure, cloud platforms, and security systems.
• Establish standards and procedures for the secure use of encryption, decryption, hashing, digital signatures, key exchange, and related cryptographic operations.
• Maintain an inventory of cryptographic services, dependencies, supported platforms, service owners, and associated security requirements.
• Define service requirements for availability, performance, scalability, access control, monitoring, resilience, and recoverability.
• Ensure cryptographic services are deployed and operated according to approved security architectures and organizational policies.
• Review existing cryptographic implementations to identify outdated algorithms, unsupported libraries, insecure configurations, and operational weaknesses.
• Coordinate the onboarding of applications and infrastructure components to approved enterprise cryptographic services.
• Establish consistent service patterns for centralized encryption, certificate validation, digital signing, and cryptographic key access.
• Evaluate new cryptographic technologies and recommend improvements based on security effectiveness, compatibility, and operational requirements.
• Maintain technical documentation covering service architecture, configuration standards, operational dependencies, and support procedures.
• Ensure that cryptographic services support business continuity and the protection of critical corporate and project information.

2. Cryptographic Key Management

• Manage the lifecycle of cryptographic keys, including generation, registration, distribution, storage, activation, rotation, revocation, archival, recovery, and destruction.
• Administer and support enterprise Key Management Systems (KMS) and associated cryptographic service integrations.
• Establish key ownership, classification, usage restrictions, access policies, rotation schedules, and lifecycle requirements.
• Ensure cryptographic keys are protected against unauthorized disclosure, alteration, misuse, and destruction.
• Apply least-privilege access controls and separation-of-duties requirements to key management operations.
• Support envelope encryption and hierarchical key management architectures where appropriate.
• Coordinate the secure distribution of keys and cryptographic material to authorized applications, systems, and services.
• Maintain accurate records of key ownership, purpose, status, associated systems, expiration dates, and applicable controls.
• Review key access permissions and investigate unusual or unauthorized key management activity.
• Establish procedures for emergency key revocation and replacement following suspected compromise.
• Coordinate secure key backup and recovery processes in accordance with approved business continuity requirements.
• Validate that retired keys are removed from active use and destroyed or retained securely according to approved requirements.
• Assess the operational impact of key rotation, replacement, or revocation on dependent applications and services.
• Maintain audit trails for key lifecycle operations and support periodic reviews of key management effectiveness.

3. Hardware Security Modules and Cryptographic Infrastructure

• Administer and support Hardware Security Modules used to protect cryptographic keys and perform sensitive cryptographic operations.
• Configure HSM security policies, cryptographic partitions, administrative roles, access permissions, and approved integrations.
• Support deployment and maintenance of HSM infrastructure across data centers and cloud environments where required.
• Ensure HSM configurations follow approved security baselines, vendor guidance, and organizational requirements.
• Support cryptographic key generation, signing operations, encryption services, and other authorized functions within HSM security boundaries.
• Monitor HSM availability, utilization, performance, capacity, and security events.
• Coordinate HSM upgrades, firmware updates, configuration changes, maintenance windows, and security testing.
• Support high-availability, replication, backup, and disaster recovery arrangements for critical cryptographic services.
• Maintain secure administrative procedures for HSM access, recovery operations, and emergency interventions.
• Investigate HSM failures, cryptographic operation errors, authentication issues, and integration problems.
• Coordinate with vendors and infrastructure teams to resolve complex HSM incidents.
• Maintain documentation covering HSM architecture, access procedures, recovery requirements, and operational dependencies.

4. Public Key Infrastructure and Certificate Services

• Administer or support enterprise Public Key Infrastructure (PKI) services for certificate issuance, validation, renewal, revocation, and lifecycle management.
• Coordinate certificate authority operations and trust configuration requirements with designated PKI owners.
• Manage or support certificate issuance workflows for servers, applications, network devices, users, machine identities, and enterprise services.
• Maintain certificate inventories covering ownership, issuing authorities, validity periods, intended usage, and renewal requirements.
• Monitor certificate expiration and coordinate renewal activities to prevent service interruptions.
• Review certificate configurations, certificate chains, trust relationships, and cryptographic parameters.
• Identify weak, expired, misconfigured, unauthorized, or unnecessary certificates and coordinate remediation.
• Support certificate revocation following private key compromise, unauthorized issuance, or changes in trust requirements.
• Ensure certificate private keys are generated, stored, accessed, and retired according to approved security standards.
• Support automated certificate enrollment and renewal processes where technically appropriate.
• Coordinate PKI integrations with HSMs, KMS platforms, enterprise applications, and cloud services.
• Assist with troubleshooting certificate validation failures, trust errors, and application authentication issues.
• Maintain operational procedures for certificate issuance, renewal, revocation, emergency replacement, and recovery.