Cybersecurity Engineer – IAM, PAM & HSM | Riyadh, Saudi Arabi

Location

Riyadh, Saudi Arabia

Job Category

Information Technology (IT) & Software
Security & Defence
Legal & Compliance

Job Overview

We are seeking an experienced Cybersecurity Engineer to support enterprise security infrastructure in Riyadh, Saudi Arabia. The role focuses on Identity and Access Management (IAM), Privileged Access Management (PAM), Hardware Security Modules (HSM), and Key Lifecycle Management (KLM), with responsibility for maintaining secure authentication, privileged access, cryptographic infrastructure, and security controls.

The successful candidate will work with technologies including RSA IAM, BeyondTrust PAM, and Thales HSM/KLM platforms. The position requires hands-on expertise in identity services, privileged account management, password rotation, authentication workflows, cryptographic operations, audit monitoring, and security reporting.

This opportunity provides strong career growth potential within cybersecurity, identity security, privileged access management, and cryptographic infrastructure. Relevant cybersecurity certifications, technical training, and professional development can support progression toward Senior Cybersecurity Engineer, IAM/PAM Specialist, Security Architect, or Cybersecurity Lead roles.

Key Responsibilities

IAM – RSA

• Manage IAM components, authentication servers, identity services, administration consoles, and supporting infrastructure.
• Configure and maintain IAM policies, authentication workflows, authorization rules, and access controls.
• Manage user lifecycle activities, including provisioning, de-provisioning, role assignment, and access modification.
• Manage privileged access activities within IAM environments.
• Support application onboarding and secure authentication integrations.
• Maintain IAM procedures, architecture documentation, configuration guides, and troubleshooting runbooks.

PAM – BeyondTrust

• Manage BeyondTrust PAM policies, workflows, access controls, and privileged account management.
• Manage password rotation and reconciliation processes.
• Monitor privileged access activities, session recordings, authentication events, and administrative actions.
• Maintain high-availability, disaster recovery, and backup configurations.
• Prepare operational and management reports covering privileged access, password rotation, sessions, violations, and risk metrics.

KLM & HSM – Thales

• Administer and maintain Thales HSM and Key Lifecycle Management platforms.
• Monitor HSM health, cluster status, key operations, system performance, and security events.
• Configure and manage key lifecycle processes with the relevant PS team.
• Monitor HSM audit logs, cryptographic operations, administrative activities, and security events.
• Ensure compliance with applicable security standards and regulatory requirements.
• Prepare operational and compliance reports covering key lifecycle activities, HSM health, audit events, cryptographic operations, and overall security posture.

Requirements & Qualifications

• Minimum 4 years of relevant cybersecurity engineering experience.
• Strong hands-on experience with IAM, PAM, HSM, and KLM solutions.
• Experience with RSA IAM environments.
• Experience with BeyondTrust PAM.
• Experience administering Thales HSM and Key Lifecycle Management platforms.
• Strong understanding of authentication, authorization, identity lifecycle management, and privileged access controls.
• Experience with password rotation, privileged session monitoring, and access governance.
• Knowledge of cryptographic operations, HSM security, and key lifecycle management.
• Strong understanding of security standards and regulatory compliance requirements.
• Strong technical documentation, reporting, troubleshooting, and communication skills.
• Fluent Arabic speaker is mandatory.
• Candidates currently based in Saudi Arabia are preferred.
• Local Saudi candidates are preferred.

Salary, Benefits & Career Growth

Salary information has not been provided for this position and therefore no salary estimate is included.

The role offers an opportunity to develop advanced expertise across IAM, PAM, HSM, KLM, privileged access security, identity governance, and cryptographic infrastructure. Professional development through cybersecurity certifications and specialized training in identity security, privileged access management, and cryptographic technologies can support long-term career progression into senior engineering, security architecture, or cybersecurity leadership roles.

Application Process

Application Process (Website)

Apply only through the official job link.

Click Apply Now on the website to proceed with the application process.

HR Email for Application

Send your updated CV directly

Candidates should highlight their relevant IAM, PAM, HSM, KLM, RSA, BeyondTrust, and Thales experience in their CV.