DevSecOps Engineer (UAE)

This is a remote position. * **Location:** Remote – UAE * **Requirement:** **A Valid UAE work permit/employment visa is mandatory.** * **Employment type:** Independent Contractor We are looking for a hands-on DevSecOps Engineer to own, secure, and scale our infrastructure and deployment pipelines. You will work directly with our engineering team to embed security into our CI/CD workflows, manage vulnerabilities, and ensure our financial trading systems are resilient, compliant, and highly available. **Key Responsibilities** ***Pipeline Security & Automation*** * Design, maintain, and harden CI/CD pipelines across our delivery lifecycle. * Integrate automated security testing tools, including SAST, DAST, dependency scanning, and container scanning, directly into development workflows. * Proactively suggest automation improvements to reduce manual overhead and accelerate secure software delivery. **Vulnerability & Risk Management** * Lead end-to-end vulnerability management, including triage, remediation tracking, and cross-team reporting. * Audit existing infrastructure and deployment workflows to identify gaps, risks, or inefficiencies. * Contribute to disaster recovery (DR), business continuity (BC), and robust change management processes to guarantee platform resilience. **Compliance & Data Protection** * Support the secure handling of sensitive and regulated financial data across all environments. * Work closely with the Compliance team to implement security controls and collect evidence for external audits. * Document all security architecture, pipeline logic, and automated rules for team handoff and future maintenance. * Promote a security-aware engineering culture through modern tooling, clear documentation, and proactive knowledge sharing. ### **Requirements** * 5 years of demonstrable experience in a DevOps, SRE, or DevSecOps role within a production environment for financial services. * Proven experience building, maintaining, and hardening CI/CD tooling and infrastructure as code. * Deep understanding of relevant security frameworks and standards (e.g., ISO 27001, PCI DSS, SOC 2). * Practical exposure to database high availability tooling and managed datastore operations. * Strong understanding of modern data models, containerization, and cloud security architecture. * Excellent English communication skills — you will work closely with global teams and document critical infrastructure logic. * Relevant industry certifications (e.g., AWS Certified Security, Certified DevSecOps Professional, CISSP, or equivalent) are highly preferred. * Background in financial technology, SaaS environments, or secure cloud-native infrastructure best practices.