Senior Key Management Specialist

🏗 We're Hiring: Senior Key Management Specialist

📍 Location: United Arab Emirates (Remote)

🕒 Employment Type: Full-Time

💼 Experience Level: Mid-Level to Senior

🌐 Work Arrangement: Fully Remote

About Us

We are a construction-focused organization committed to delivering complex projects through disciplined contract management, operational excellence, risk management, and collaborative project delivery. Our distributed teams work across Project Management, Construction, Engineering, Procurement, Commercial, Legal, Finance, Human Resources, Design, Quality, HSE, Consultants, Contractors, Suppliers, Logistics, Administration, Information Technology, and Executive Leadership to maintain secure, resilient, and efficient business operations.

As our organization continues to strengthen its digital infrastructure and cybersecurity capabilities, we recognize the importance of protecting sensitive information, securing cryptographic assets, and maintaining robust encryption and key management controls across enterprise systems, project environments, and business applications.

We are committed to maintaining high standards of confidentiality, integrity, availability, regulatory compliance, and operational resilience through effective security governance, modern cryptographic technologies, and continuous improvement.

The Role

We are seeking an experienced Senior Key Management Specialist to oversee and support enterprise cryptographic key management, encryption key lifecycle operations, Hardware Security Module (HSM) administration, cryptographic policy enforcement, and key management infrastructure across the organization.

The successful candidate will be responsible for establishing, implementing, and maintaining secure processes for cryptographic key generation, distribution, storage, rotation, backup, recovery, archival, revocation, and destruction. This role will help ensure that encryption keys, certificates, secrets, and other cryptographic assets are protected against unauthorized access, loss, misuse, and compromise.

Working closely with Cybersecurity, Information Security, Infrastructure, Cloud, Network, Application, Database, DevOps, Risk, Compliance, and Internal Audit teams, the Senior Key Management Specialist will strengthen cryptographic security controls across on-premises infrastructure, cloud platforms, enterprise applications, databases, communication systems, and construction project technology environments.

The ideal candidate will possess strong technical expertise in enterprise key management systems, cryptographic standards, HSM technologies, public key infrastructure, cloud key management services, and security governance, together with the ability to translate complex cryptographic requirements into practical, reliable, and auditable operational processes.

Key Responsibilities1. Enterprise Key Management

• Design, implement, administer, and maintain enterprise key management systems and supporting cryptographic infrastructure.
• Establish secure and standardized processes for managing encryption keys throughout their complete lifecycle.
• Define procedures for key generation, registration, distribution, activation, rotation, suspension, revocation, archival, recovery, and destruction.
• Maintain a centralized inventory of cryptographic keys, key identifiers, associated systems, owners, purposes, classifications, and lifecycle statuses.
• Ensure cryptographic keys are generated and managed using approved algorithms, key lengths, cryptographic libraries, and security configurations.
• Apply cryptographic separation of duties to prevent unauthorized individuals from independently controlling sensitive key management operations.
• Implement appropriate key ownership, authorization, approval, and accountability mechanisms.
• Establish clear procedures for managing production, development, testing, disaster recovery, and other environment-specific cryptographic keys.
• Ensure encryption keys are appropriately separated by application, environment, tenant, business function, and data classification where required.
• Maintain key management procedures that support business continuity, system availability, and secure operational recovery.
• Review existing key management practices and recommend improvements to strengthen security, reliability, and operational efficiency.

2. Cryptographic Key Lifecycle Management

• Manage the secure creation and provisioning of cryptographic keys in accordance with approved security policies.
• Ensure key generation uses approved cryptographically secure random number generators and trusted cryptographic mechanisms.
• Establish and maintain appropriate key rotation schedules based on cryptographic standards, risk assessments, data sensitivity, and system requirements.
• Coordinate planned key rotations with application owners, infrastructure teams, database administrators, and service providers.
• Validate that key rotation activities are completed successfully without disrupting critical business services.
• Manage key expiration, revocation, retirement, archival, and destruction activities through documented procedures.
• Ensure retired or compromised keys are handled according to approved retention, recovery, and destruction requirements.
• Prevent unauthorized reuse of retired keys or the reactivation of revoked cryptographic material.
• Maintain historical records of key lifecycle events for auditability, investigation, and compliance purposes.
• Review cryptoperiods and key usage restrictions to ensure they remain appropriate for the intended cryptographic purpose.
• Implement safeguards to prevent unauthorized key export, duplication, modification, or transfer.
• Establish processes for securely importing or exporting keys when business or technical requirements permit such operations.
• Verify that key lifecycle activities are authorized, documented, tested, and performed by appropriately privileged personnel.

3. Hardware Security Module Administration

• Administer and maintain Hardware Security Modules (HSMs) used to generate, store, protect, and process cryptographic keys.
• Support HSM deployment, configuration, integration, maintenance, upgrades, and security hardening.
• Configure HSM security domains, partitions, access controls, authentication mechanisms, and administrative roles in accordance with approved policies.
• Ensure sensitive cryptographic operations are performed within approved protected environments whenever required.
• Monitor HSM health, availability, capacity, performance, security events, and operational status.
• Coordinate HSM firmware updates, maintenance activities, and vendor support while minimizing operational risk.
• Manage HSM backup, replication, clustering, failover, and recovery capabilities where supported.
• Validate HSM configuration settings against vendor recommendations, organizational security standards, and applicable cryptographic requirements.
• Support secure initialization, commissioning, decommissioning, and replacement of HSM devices.
• Maintain controlled procedures for HSM administrative credentials, activation materials, recovery materials, and security officer access.
• Coordinate with infrastructure and application teams to troubleshoot HSM connectivity, authentication, cryptographic operation, and integration issues.
• Ensure HSM administrative actions are appropriately logged, monitored, reviewed, and retained.

4. Key Management Systems and Platforms

• Configure and maintain enterprise Key Management Systems (KMS) and associated management services.
• Support integration between key management platforms and enterprise applications, databases, storage platforms, backup systems, and infrastructure services.
• Administer cloud-based key management services and centrally managed encryption controls across supported environments.
• Manage key policies, access permissions, key aliases, key versions, rotation settings, and permitted cryptographic operations.
• Ensure key management services enforce least-privilege access and separation of administrative responsibilities.
• Support integrations with cloud platforms, enterprise identity services, certificate management solutions, secrets management systems, and security monitoring tools.
• Establish standardized configuration baselines for key management systems and maintain appropriate configuration documentation.
• Review platform permissions and administrative access to identify excessive privileges, unauthorized access paths, and unnecessary key usage rights.
• Support high-availability architectures and resilient key management deployments for business-critical applications.
• Assess the operational impact of platform upgrades, configuration changes, migrations, and service deprecations.
• Coordinate testing and implementation of key management enhancements across production and non-production environments.
• Maintain compatibility between key management platforms, cryptographic libraries, application frameworks, and dependent infrastructure components.