Senior Security Engineer – IAM, PKI & On-Prem Security

Client of Salt; Dubai; On-site; AED 240,000 - 360,000; Full time

Job summary

Client of Salt is seeking an experienced Security Engineer to design, implement, and operate security across infrastructure, applications, networks, and isolated computing environments. The role spans IAM, cryptography, secrets management, endpoint security, secure software delivery, and on-premises security in air-gapped settings.

You will work across client-site data centres and air-gapped systems, emphasizing security reliability and operational discipline.

Qualifications

• At least 5 years of hands-on experience in security engineering or related technical security role.
• Practical experience with IAM, including Keycloak, OIDC, SAML, SSO, federation and MFA.
• Experience with PKI, certificate lifecycle management, cryptographic keys, and secrets management platforms such as Vault or OpenBao.
• Strong Linux, networking, and infrastructure security fundamentals.
• Experience securing on-premises environments, data centres, or isolated networks.

Responsibilities

• Design and manage identity and access controls including SSO MFA federation and machine identities.
• Configure and operate Keycloak or an equivalent self-hosted identity provider.
• Manage secrets, certificates, PKI, and cryptographic keys including secure key ceremonies.
• Secure Linux systems, networks, endpoints and on-premises infrastructure.
• Implement security controls for air-gapped environments including offline data transfers and segmented networks.
• Secure self-hosted source control and CI/CD pipelines including secrets scanning and artifact signing.
• Support network security across multiple sites including firewalls IPsec tunnels VPNs and access controls.
• Operate vulnerability management, security monitoring, incident response and infrastructure hardening processes.
• Maintain technical documentation, security configurations, runbooks and audit evidence.

Skills

Identity & access

IAM

MFA

Keycloak

PKI

Linux security

Network security

CI/CD security

Vulnerability management

Scripting (Bash/Python)

Tools

Keycloak

GitLab Self-Managed

HashiCorp Vault

OpenBao

Terraform

Ansible

Bash

Python

Job description

Client of Salt is seeking an experienced Security Engineer to design, implement, and operate security across infrastructure, applications, networks, and isolated computing environments. The role spans IAM, cryptography, secrets management, endpoint security, secure software delivery, and on-premises security in air-gapped settings.

You will work across client-site data centres and air-gapped systems, emphasizing security reliability and operational discipline.