Security Engineer - HSM & PKI

About the Role

Help AG seeks an experienced Security Engineer specializing in Hardware Security Modules (HSM) and Public Key Infrastructure (PKI). This role involves hands-on management of Microsoft Active Directory Certificate Services (AD CS), HSM platforms, and certificate lifecycle processes within enterprise environments.

Key Responsibilities

• Administer and configure HSM environments, with a preference for Entrust, Thales Luna, or comparable hardware.
• Conduct routine health assessments of HSMs and troubleshoot connectivity or authentication problems.
• Manage cryptographic key generation, secure storage, backups, and restoration procedures.
• Integrate HSM solutions with Microsoft's AD CS.
• Handle HSM partitions, user roles, and access controls effectively.
• Support high availability setups and disaster recovery strategies for HSMs.
• Resolve cryptographic and HSM-specific operational issues.
• Maintain and manage Microsoft Active Directory Certificate Services environments, including Root CA, Intermediate CA, and Issuing CA.
• Oversee all aspects of certificate management: issuance, renewal, revocation, and expiration tracking.
• Configure and troubleshoot certificate templates and auto-enrollment features.
• Monitor and resolve issues related to CRL, CDP, AIA, and OCSP services.
• Troubleshoot problems with certificate chains, enrollment processes, trust settings, and certificate bindings.
• Use tools such as certutil, PKIView, and Event Viewer to perform PKI health checks.
• Support applications relying on certificates like SSL/TLS, VPN, S/MIME, and authentication mechanisms.
• Perform CA backup, restoration, renewal, and basic disaster recovery operations.
• Work with certificate lifecycle management tools, including Venafi TPP or equivalents.
• Maintain certificate inventories and monitor expiration to ensure system integrity.
• Assist in automating certificate-related tasks through PowerShell scripting.

Qualifications and Skills

• Bachelor’s degree in Computer Science, IT, Electronics, or related disciplines.
• 3 to 5 years of practical experience with PKI, HSM, or certificate management.
• Hands-on experience in Microsoft AD CS and familiarity with Entrust or Thales Luna HSM platforms.
• Comprehensive knowledge in troubleshooting PKI and certificate issues.
• Experience with certificate lifecycle management tools such as Venafi.
• Solid grasp of enterprise PKI structures and core principles of cryptography.
• Relevant certifications or equivalent hands-on experience preferred.
• Exposure to production operations and customer-facing roles.
• Familiarity with ITIL processes including incident, problem, and change management.
• In-depth understanding of:
  • Microsoft AD CS and PKI concepts
  • HSM platforms including Entrust, Thales Luna, or equivalents
  • Integration between HSM and Microsoft AD CS
  • Root CA and Issuing CA management
  • Certificate templates and auto enrollment functionality
  • CRL, CDP, AIA, and fundamental OCSP knowledge
  • Certificate lifecycle processes (issuance, renewal, revocation, deployment)
  • Certificate chain/trust troubleshooting
  • Venafi TPP or similar certificate management tools
  • Cryptographic standards such as PKCS#11, CSP, KSP
  • Use of certutil, OpenSSL, and PowerShell for certificate and cryptography operations
• Professional attributes including ability to work under pressure, strong analytical and problem-solving skills, excellent communication and documentation capabilities, and ability to handle escalations and collaborate with diverse technical teams.

Benefits

• Comprehensive health insurance coverage from top international providers.
• Opportunities for career growth through challenging projects.
• Year-round employee wellness and engagement programs.
• Access to excellent learning and development resources.
• Annual flight tickets.
• A work environment promoting inclusion, diversity, and flexibility.
• Open door policy encouraging communication and transparency.

About Help AG

Help AG is the cybersecurity division of e&, recognized as the trusted partner in the Middle East for cybersecurity. The company empowers governments, enterprises, and critical industries to innovate securely by providing strategic consulting, advanced managed security services, and deep technological expertise. Help AG focuses on enhancing cyber resilience, securing AI deployments, and creating trusted sovereign digital frameworks. With regional insights and a commitment to customers, Help AG delivers comprehensive cybersecurity solutions that protect critical systems, manage evolving cyber risks, and facilitate secure digital transformations.