Senior Key Management Specialist

We're Hiring: Senior Key Management Specialist

Location:
United Arab Emirates (Remote) Employment Type: Full-Time Experience Level: Mid-Level to Senior Work Arrangement: Fully Remote

About Us
We are a construction-focused organization committed to delivering complex projects through disciplined contract management, operational excellence, risk management, and collaborative project delivery.

Our distributed teams work across Project Management, Construction, Engineering, Procurement, Commercial, Legal, Finance, Human Resources, Design, Quality, HSE, Consultants, Contractors, Suppliers, Logistics, Administration, Information Technology, and Executive Leadership to maintain secure, resilient, and efficient business operations. As our organization continues to strengthen its digital infrastructure and cybersecurity capabilities, we recognize the importance of protecting sensitive information, securing cryptographic assets, and maintaining robust encryption and key management controls across enterprise systems, project environments, and business applications.

We are committed to maintaining high standards of confidentiality, integrity, availability, regulatory compliance, and operational resilience through effective security governance, modern cryptographic technologies, and continuous improvement.

The Role

We are seeking an experienced Senior Key Management Specialist to oversee and support enterprise cryptographic key management, encryption key lifecycle operations, Hardware Security Module (HSM) administration, cryptographic policy enforcement, and key management infrastructure across the organization. The successful candidate will be responsible for establishing, implementing, and maintaining secure processes for cryptographic key generation, distribution, storage, rotation, backup, recovery, archival, revocation, and destruction.

This role will help ensure that encryption keys, certificates, secrets, and other cryptographic assets are protected against unauthorized access, loss, misuse, and compromise.

Working closely with Cybersecurity, Information Security, Infrastructure, Cloud, Network, Application, Database, DevOps, Risk, Compliance, and Internal Audit teams, the Senior Key Management Specialist will strengthen cryptographic security controls across on‐premises infrastructure, cloud platforms, enterprise applications, databases, communication systems, and construction project technology environments.

The ideal candidate will possess strong technical expertise in enterprise key management systems, cryptographic standards, HSM technologies, public key infrastructure, cloud key management services, and security governance, together with the ability to translate complex cryptographic requirements into practical, reliable, and auditable operational processes.

Key Responsibilities
1. 1. Enterprise Key Management

Design, implement, administer, and maintain enterprise key management systems and supporting cryptographic infrastructure. Establish secure and standardized processes for managing encryption keys throughout their complete lifecycle. Define procedures for key generation, registration, distribution, activation, rotation, suspension, revocation, archival, recovery, and destruction. Maintain a centralized inventory of cryptographic keys, key identifiers, associated systems, owners, purposes, classifications, and lifecycle statuses.

Ensure cryptographic keys are generated and managed using approved algorithms, key lengths, cryptographic libraries, and security configurations. Apply cryptographic separation of duties to prevent unauthorized individuals from independently controlling sensitive key management operations. Implement appropriate key ownership, authorization, approval, and accountability mechanisms. Establish clear procedures for managing production, development, testing, disaster recovery, and other environment‐specific cryptographic keys.

Ensure encryption keys are appropriately separated by application, environment, tenant, business function, and data classification where required. Maintain key management procedures that support business continuity, system availability, and secure operational recovery. Review existing key management practices and recommend improvements to strengthen security, reliability, and operational efficiency.

2. Cryptographic Key Lifecycle Management

Manage the secure creation and provisioning of cryptographic keys in accordance with approved security policies. Ensure key generation uses approved cryptographically secure random number generators and trusted cryptographic mechanisms. Establish and maintain appropriate key rotation schedules based on cryptographic standards, risk assessments, data sensitivity, and system requirements. Coordinate planned key rotations with application owners, infrastructure teams, database administrators, and service providers.

Validate that key rotation activ