Senior Security Engineer

Salt; Dubai; On-site; AED 280,000 - 420,000; Full time

Job summary

Salt is seeking an experienced Security Engineer to design, implement, and operate security across our infrastructure, applications, networks, and isolated computing environments.

You will cover IAM, PKI, secrets management, and on-premises security, including air-gapped systems and GitLab CI/CD security for a multi-site setup. This hands-on role demands strong scripting and incident response capabilities.

Qualifications

• 5+ years of hands-on security engineering experience.
• IAM with Keycloak including OIDC, SAML, SSO, and MFA.
• Experience with PKI, certificate lifecycle, and vault/openbao-like tools.
• Strong Linux, networking, and on-prem security fundamentals.
• Experience securing data centers or air-gapped networks.
• Experience with GitLab Self-Managed for CI/CD security.
• Ability to automate with Bash, Python, Ansible, Terraform.

Responsibilities

• Design and manage access controls including SSO, MFA, federation, privileged access, and machine identities.
• Configure and operate Keycloak or equivalent self-hosted IDM.
• Manage secrets, certificates, PKI, CA, and cryptographic keys, incl. secure key ceremonies.
• Secure Linux systems, networks, endpoints, and on-prem infrastructure.
• Implement security controls for air-gapped environments with data transfer controls.
• Secure self-hosted CI/CD pipelines, including secrets scanning and signing.
• Support network security across sites, including firewalls and VPNs.
• Operate vulnerability management, security monitoring, and incident response.
• Maintain technical documentation, configurations, and audit evidence.

Skills

IAM

Keycloak

PKI

Secrets management

Linux security

Network security

CI/CD security

Scripting

Tools

GitLab Self-Managed

Job description

We’re looking for an experienced **Security Engineer** to help design, implement, and operate security across our infrastructure, applications, networks, and isolated computing environments.

This is a hands-on technical role covering identity and access management, cryptography, secrets management, endpoint security, secure software delivery, and on-premises infrastructure. You’ll work across connected environments, client-site data centres, and air-gapped systems where security, reliability, and operational discipline are essential.

What you’ll do:

• Design and manage identity and access controls, including SSO, MFA, federation, privileged access, and machine identities.
• Configure and operate Keycloak or an equivalent self-hosted identity provider.
• Manage secrets, certificates, public key infrastructure (PKI), certificate authorities, and cryptographic keys, including secure key ceremonies.
• Secure Linux systems, networks, endpoints, and on-premises infrastructure.
• Implement security controls for air-gapped environments, including controlled data transfers, offline updates, and network segmentation.
• Secure self-hosted source control and CI/CD pipelines, ideally GitLab Self-Managed, including secrets scanning, dependency management, and artifact signing.
• Support network security across multiple sites, including firewalls, IPsec tunnels, VPNs, reverse proxies, and access controls.
• Operate vulnerability management, security monitoring, incident response, and infrastructure hardening processes.
• Maintain technical documentation, security configurations, operational runbooks, and audit evidence.

What we’re looking for:

• At least 5 years of hands-on experience in security engineering, infrastructure security, or a closely related technical security role.
• Practical experience with identity and access management, ideally Keycloak, including OIDC, SAML, SSO, federation, and MFA.
• Experience with PKI, certificate lifecycle management, cryptographic keys, and secrets management platforms such as HashiCorp Vault or OpenBao.
• Strong Linux, networking, and infrastructure security fundamentals.
• Experience securing on-premises environments, data centres, or isolated/air-gapped networks.
• Understanding of network segmentation, VPN/IPsec, firewalls, and secure remote access.
• Experience with source control and CI/CD security, preferably GitLab Self-Managed.
• Ability to automate security tasks using Bash, Python, Ansible, Terraform, or similar tools.
• Experience with security monitoring, vulnerability remediation, and incident response.
• Strong problem-solving skills, attention to detail, and the ability to document and explain technical decisions.

Nice to have:

• Experience operating an offline root CA and personally participating in or leading a formal key ceremony.
• Hands-on experience with hardware security modules (HSMs).
• Experience with MDM, endpoint detection and response (EDR), and zero-trust security.
• Experience in defence, government, financial services, or critical infrastructure.
• Familiarity with ISO 27001, SOC 2, or NIST security frameworks.
• Experience with on-premises Kubernetes and container security.

We’re looking for someone who enjoys solving complex technical security challenges and takes ownership of building and maintaining secure systems.

**Employment:** Full-time, permanent

**Location and work arrangement:** To be confirmed.