About the Role
In this position, you will monitor the platform continuously, respond to alerts, troubleshoot issues, and restore services promptly. You will handle emergencies both inside and outside regular office hours, providing timely reports as requested by clients. Your primary focus will be on implementing and operating security controls, managing backups, and running incident responses while ensuring robust security architecture documentation.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities
- Monitor the platform around the clock, respond to alerts, troubleshoot issues, fix and restore service.
- Handle emergencies inside or outside office hours, and turn around any report the client requests.
- Patch, harden, and conduct regular vulnerability reviews on every component; ensure endpoint protection compatibility.
- Implement and operate security controls including identity and access management with MFA, RBAC, and single sign-on; ensure encryption is utilized effectively; manage separated development, testing, and production environments; ensure signed and verified automation code; enforce file-type whitelisting; and apply mobile-device restrictions.
- Manage security logging, audit logs, and SIEM integration, ensuring protection against log tampering.
- Secure APIs using gateway, OAuth 2.0, and OWASP API security best practices.
- Own backups, oversee business continuity, and lead disaster recovery efforts, conducting tests regularly.
- Run incident response, ensuring immediate notification, developing an initial report within 24 hours, and maintaining documented procedures with SLAs and escalation protocols.
- Write security architecture, API design documents, and contribute to the infrastructure sections of the architecture pack and the bi-monthly operations report.
Requirements
- Experience with Linux and Windows server administration on public and sovereign clouds (GCP, OCI, Deem or similar).
- Proficient in administrating at least two of the following: Qlik Sense, Talend, Dataiku, and MS SQL Server, in addition to GCP services.
- Skills in monitoring and alerting solutions (Cloud Logging and Monitoring, Prometheus and Grafana or similar) and producing runbooks.
- Strong incident management expertise including triage, escalation, and root-cause analysis.
- Knowledge in identity and access management, MFA, RBAC, and SSO integration.
- Experience with encryption at rest and in transit, key management, and certificates.
- Familiarity with vulnerability scanning, patching, and hardening procedures; experience with endpoint protection tools.
- Proficient in SIEM integration and audit-log design.
- Expertise with API gateways, OAuth 2.0, and OWASP API Security Top Ten.
- Skills in backup, restore, business continuity, and disaster recovery processes in cloud environments.
Good to Have
- Familiarity with Terraform and CI/CD processes; experience with SRE practices including SLOs, error budgets, and cost alerts.
- MS SQL Server DBA experience.
- Relevant certifications such as Google Professional Cloud Security Engineer, CISSP, CCSP, or ITIL.
- Experience with national cybersecurity control audits.
