Operations and Security Engineer

📣 إعلان

منذ ساعتين تقريبا

	نوع العقد	دوام كامل
	طبيعة الوظيفة	بالموقع
	الموقع	الرياض

وصف الوظيفة

About the Role

****** is seeking an Operations and Security Engineer to join their team in Riyadh, Riyadh Province. This full-time role involves comprehensive platform monitoring, incident response, and the implementation and operation of security controls. The engineer will be responsible for ensuring platform stability and security across various environments.

Key Responsibilities

Monitor the platform continuously, respond to alerts, troubleshoot issues, and restore services.
Manage emergencies both during and outside office hours, and prepare client reports as requested.
Perform patching, hardening, and regular vulnerability reviews on all components, ensuring endpoint protection compatibility.
Implement and operate security controls including identity and access with MFA, RBAC, and single sign-on; pervasive encryption; separated development, test, and production environments; signed and verified automation code; file-type whitelisting; and mobile-device restrictions.
Manage security logging, audit logs, and SIEM integration, with measures to protect logs from tampering.
Secure APIs using gateway solutions, OAuth , and OWASP API security best practices.
Oversee backups, business continuity, and disaster recovery, including regular testing.
Lead incident response, ensuring immediate notification, initial reports within 24 hours, and documented procedures with SLAs and escalation paths.
Develop security architecture and API design documents, infrastructure components of the architecture pack, and bi-monthly operations reports.

Required Qualifications and Skills

Proficiency in Linux and Windows server administration on public and sovereign clouds (*, GCP, OCI, Deem).
Administration experience with at least two of Qlik Sense, Talend, Dataiku, and MS SQL Server, in addition to GCP services.
Experience with monitoring and alerting tools (*, Cloud Logging and Monitoring, Prometheus, Grafana) and runbook development.
Demonstrated ability in incident management, including triage, escalation, and root-cause analysis.
Expertise in identity and access management: IAM, MFA, RBAC, and SSO integration.
Knowledge of encryption at rest and in transit, key management, and certificates.
Skills in vulnerability scanning, patching, hardening, and working with endpoint-protection tools.
Experience with SIEM integration and audit-log design.
Familiarity with API gateways, OAuth , and OWASP API Security Top Ten principles.
Capability in cloud-based backup, restore, business continuity, and disaster recovery.

Desirable Skills and Certifications

Experience with Terraform and CI/CD, along with SRE practices such as SLOs, error budgets, and cost alerts.
In-depth MS SQL Server DBA knowledge.
Certifications such as Google Professional Cloud Security Engineer, CISSP, CCSP, or ITIL.
Prior experience with national cybersecurity-control audits.

Work Environment

This is a full-time position based in Riyadh, offering an opportunity to contribute to the operational stability and security posture of ******'s platform.