The Role
Owner of secure, scalable infrastructure and CI/CD pipelines for financial trading systems. Integrate automated security testing, manage vulnerabilities, audit deployments, support DR/BC and compliance, and promote security-aware engineering practices.
Summary Generated by Built In
This is a remote position.
- Location: Remote – UAE
- Requirement: A Valid UAE work permit/employment visa is mandatory.
- Employment type: Independent Contractor
We are looking for a hands-on DevSecOps Engineer to own, secure, and scale our infrastructure and deployment pipelines. You will work directly with our engineering team to embed security into our CI/CD workflows, manage vulnerabilities, and ensure our financial trading systems are resilient, compliant, and highly available.
Key Responsibilities
Pipeline Security & Automation
- Design, maintain, and harden CI/CD pipelines across our delivery lifecycle.
- Integrate automated security testing tools, including SAST, DAST, dependency scanning, and container scanning, directly into development workflows.
- Proactively suggest automation improvements to reduce manual overhead and accelerate secure software delivery.
Vulnerability & Risk Management
- Lead end-to-end vulnerability management, including triage, remediation tracking, and cross-team reporting.
- Audit existing infrastructure and deployment workflows to identify gaps, risks, or inefficiencies.
- Contribute to disaster recovery (DR), business continuity (BC), and robust change management processes to guarantee platform resilience.
Compliance & Data Protection
- Support the secure handling of sensitive and regulated financial data across all environments.
- Work closely with the Compliance team to implement security controls and collect evidence for external audits.
- Document all security architecture, pipeline logic, and automated rules for team handoff and future maintenance.
- Promote a security-aware engineering culture through modern tooling, clear documentation, and proactive knowledge sharing.
Requirements
- 5 years of demonstrable experience in a DevOps, SRE, or DevSecOps role within a production environment for financial services.
- Proven experience building, maintaining, and hardening CI/CD tooling and infrastructure as code.
- Deep understanding of relevant security frameworks and standards (e.g., ISO 27001, PCI DSS, SOC 2).
- Practical exposure to database high availability tooling and managed datastore operations.
- Strong understanding of modern data models, containerization, and cloud security architecture.
- Excellent English communication skills — you will work closely with global teams and document critical infrastructure logic.
- Relevant industry certifications (e.g., AWS Certified Security, Certified DevSecOps Professional, CISSP, or equivalent) are highly preferred.
- Background in financial technology, SaaS environments, or secure cloud-native infrastructure best practices.
Skills Required
- Valid UAE work permit / employment visa
- 5 years experience in DevOps, SRE, or DevSecOps in financial services production environments
- Proven experience building, maintaining, and hardening CI/CD tooling and Infrastructure as Code
- Experience integrating automated security testing: SAST, DAST, dependency and container scanning
- Deep understanding of security frameworks and standards (ISO 27001, PCI DSS, SOC 2)
- Practical exposure to database high availability tooling and managed datastore operations
- Strong understanding of modern data models, containerization, and cloud security architecture
- Excellent English communication skills for global collaboration and documentation
- Relevant industry certifications (AWS Certified Security, Certified DevSecOps Professional, CISSP, or equivalent)
- Background in financial technology, SaaS environments, or secure cloud-native infrastructure best practices
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
CloudPSO is an IT outsourcing and software development company that offers custom software engineering, managed cloud services, and cybersecurity solutions to help enterprises optimize costs, scale faster, and innovate with confidence.
