Lead Engineer – Thales (Cybersecurity & HSM Solutions)

Job Title: Lead Engineer – Thales (Cybersecurity & HSM Solutions) Location: Riyadh, Saudi Arabia (On-site) Job Type: Full-time Seniority Level: Lead / Senior Level About the Role We are seeking an experienced and results-driven Lead Engineer – Thales (Cybersecurity & HSM Solutions) to join our project team in Riyadh. In this role, you will lead the architecture, deployment, and ongoing operation of enterprise-grade data protection, hardware security modules (HSMs), and key management systems using Thales technologies. Key Responsibilities Architecture & Framework Integration: Architect and deploy enterprise-wide data encryption and access control frameworks, integrating Thales HSMs with databases (Oracle/MS SQL TDE), web servers (IIS, WebLogic, Tomcat), PAM, and PKI environments. HSM & CipherTrust Management: Manage and maintain Thales Luna, payShield, and CipherTrust Manager clusters; handle patch management, software updates, and overall appliance health with zero downtime. Audits & Security Compliance: Conduct regular security audits, vulnerability assessments, and risk reviews. Ensure compliance with data security and privacy regulations (PCI-DSS, GDPR, HIPAA). Monitoring & Incident Response: Oversee SIEM and log monitoring (Splunk, ELK) for anomaly detection, lead root-cause analysis, and refine alert thresholds for rapid incident response. Automation & Maintenance: Automate key-lifecycle tasks (key rotation, backups, provisioning, and retirement) using Ansible and REST APIs. Vendor & Stakeholder Collaboration: Coordinate with cross-functional IT/Risk teams and third-party vendors to assess security gaps, integrate controls, and validate external SLAs. Qualifications & Experience Experience: 3+ years of hands-on experience in Cybersecurity, specializing in Data Protection, Hardware Security Modules (HSMs), and Key Management. Thales Expertise: In-depth hands-on experience with Thales Luna HSM, payShield, and CipherTrust Data Security Platform. Strong mastery of cryptographic protocols, algorithms, and APIs (AES, RSA, PKCS#11, KMIP, CTE). Certifications (Preferred): Thales Certified Engineer / Administrator (Luna, payShield, High Speed Encryption, CipherTrust). Professional security certifications (e.g., CISSP, CISM, or equivalent). Education: Bachelor’s degree in Computer Science, Cybersecurity, Electronics & Communications Engineering, or a related technical field. What We Offer Competitive compensation package. High-impact opportunity working on critical national enterprise security projects. Collaborative and technology-driven work culture. Show more Show less