Senior Security Engineer

Client of Salt; Dubai; On-site; AED 240,000 - 360,000; Full time

Job summary

Client of Salt is seeking an experienced Security Engineer to design, implement, and operate security across infrastructure, applications, networks, and isolated computing environments. The role spans IAM, cryptography, secrets management, endpoint security, secure software delivery, and on-premises security in air-gapped settings.

You will work across client-site data centres and air-gapped systems, emphasizing security reliability and operational discipline.

Qualifications

• At least 5 years of hands-on experience in security engineering or related technical security role.
• Practical experience with IAM, including Keycloak, OIDC, SAML, SSO, federation and MFA.
• Experience with PKI, certificate lifecycle management, cryptographic keys, and secrets management platforms such as Vault or OpenBao.
• Strong Linux, networking, and infrastructure security fundamentals.
• Experience securing on-premises environments, data centres, or isolated networks.

Responsibilities

• Design and manage identity and access controls including SSO MFA federation and machine identities.
• Configure and operate Keycloak or an equivalent self-hosted identity provider.
• Manage secrets, certificates, PKI, and cryptographic keys including secure key ceremonies.
• Secure Linux systems, networks, endpoints and on-premises infrastructure.
• Implement security controls for air-gapped environments including offline data transfers and segmented networks.
• Secure self-hosted source control and CI/CD pipelines including secrets scanning and artifact signing.
• Support network security across multiple sites including firewalls IPsec tunnels VPNs and access controls.
• Operate vulnerability management, security monitoring, incident response and infrastructure hardening processes.
• Maintain technical documentation, security configurations, runbooks and audit evidence.

Skills

Identity & access

IAM

MFA

Keycloak

PKI

Linux security

Network security

CI/CD security

Vulnerability management

Scripting (Bash/Python)

Tools

Keycloak

GitLab Self-Managed

HashiCorp Vault

OpenBao

Terraform

Ansible

Bash

Python

Job description

We re looking for an experienced strong Security Engineer strong to help design implement and operate security across our infrastructure applications networks and isolated computing environments This is a hands-on technical role covering identity and access management cryptography secrets management endpoint security secure software delivery and on-premises infrastructure You ll work across connected environments client-site data centres and air-gapped systems where security reliability and operational discipline are essential strong

What you ll do strong

• Design and manage identity and access controls including SSO MFA federation privileged access and machine identities
• Configure and operate Keycloak or an equivalent self-hosted identity provider
• Manage secrets certificates public key infrastructure PKI certificate authorities and cryptographic keys including secure key ceremonies
• Secure Linux systems networks endpoints and on-premises infrastructure
• Implement security controls for air-gapped environments including controlled data transfers offline updates and network segmentation
• Secure self-hosted source control and CI CD pipelines ideally GitLab Self-Managed including secrets scanning dependency management and artifact signing
• Support network security across multiple sites including firewalls IPsec tunnels VPNs reverse proxies and access controls
• Operate vulnerability management security monitoring incident response and infrastructure hardening processes
• Maintain technical documentation security configurations operational runbooks and audit evidence

Nice to have strong

• Experience operating an offline root CA and personally participating in or leading a formal key ceremony
• Hands-on experience with hardware security modules HSMs
• Experience with MDM endpoint detection and response EDR and zero-trust security
• Experience in defence government financial services or critical infrastructure
• Familiarity with ISO 27001 SOC 2 or NIST security frameworks
• Experience with on-premises Kubernetes and container security

What we re looking for:

• At least 5 years of hands-on experience in security engineering, infrastructure security, or a closely related technical security role.
• Practical experience with identity and access management, ideally Keycloak, including OIDC, SAML, SSO, federation, and MFA.
• Experience with PKI, certificate lifecycle management, cryptographic keys, and secrets management platforms such as HashiCorp Vault or OpenBao.
• Strong Linux, networking, and infrastructure security fundamentals.
• Experience securing on-premises environments, data centres, or isolated/air-gapped networks.
• Understanding of network segmentation, VPN/IPsec, firewalls, and secure remote access.
• Experience with source control and CI/CD security, preferably GitLab Self-Managed.
• Ability to automate security tasks using Bash, Python, Ansible, Terraform, or similar tools.
• Experience with security monitoring, vulnerability remediation, and incident response.
• Strong problem-solving skills, attention to detail, and the ability to document and explain technical decisions.