DevSecOps Engineer

This is a fully remote position, open to applicants in Pakistan.

📋 Description

• Take ownership of the GCP infrastructure and security for a pioneering healthtech SaaS startup based in KSA.

• Create the sole production delivery pathway via merge requests, code reviews, successful tests, staged rollouts, and verified rollbacks.

• Oversee migrations between environments and reinforce CI runners.

• Design and manage identity and access control for GitLab, GCP, production data, and internal tools.

• Handle secrets, keys, devices, rotation, masked CI variables, and workload identity management.

• Develop tenant onboarding pipelines for provisioning, configuration, data seeding, and separation.

• Implement Terraform across the entire infrastructure and ensure reproducible environments.

• Safeguard private data tiers, manage egress control, apply edge protection, and enforce organizational policies.

• Create tamper-evident, queryable audit logging and set up alerts.

• Implement tracing for .NET and Python, establish SLOs, configure paging alerts, and conduct blameless post-mortems for incidents.

• Manage PostgreSQL pooling, replicas, failover processes, and restore drills.

• Ensure the maintenance of WebSocket sessions during scaling operations.

⛳️ Requirements

• A minimum of 5 years of relevant experience.

• Proven production experience with a multi-tenant B2B SaaS platform featuring paying customers.

• Expertise in designing and enforcing least-privilege access for engineering teams.

• Extensive GCP knowledge, specifically with Cloud Run, Cloud SQL, VPC, IAM, Secret Manager, and workload identity.

• Hands-on production experience with Terraform, including the codification of an existing environment.

• Significant experience working with GitLab.

• Proven track record in building CI/CD as the exclusive production delivery method, with a focus on runner and secrets fortification.

• Proficiency in PostgreSQL operations, covering pooling, replicas, failover, and restore drills.

• Capability to write code in either Python or C#.

• Ability to collaborate effectively within cross-functional teams.

• High level of proficiency in English communication skills.

🏝️ Benefits

• Competitive salary and equity options.

• Opportunity to work in a dynamic startup environment with a focus on innovation.

• Flexible working hours and remote work opportunities.

• Comprehensive health and wellness benefits.

• Ongoing professional development and learning opportunities.