Senior Security Engineer: Infra, IAM & Air-Gapped Security

Salt; Dubai; On-site; AED 280,000 - 420,000; Full time

Job summary

Salt is seeking an experienced Security Engineer to design, implement, and operate security across our infrastructure, applications, networks, and isolated computing environments.

You will cover IAM, PKI, secrets management, and on-premises security, including air-gapped systems and GitLab CI/CD security for a multi-site setup. This hands-on role demands strong scripting and incident response capabilities.

Qualifications

• 5+ years of hands-on security engineering experience.
• IAM with Keycloak including OIDC, SAML, SSO, and MFA.
• Experience with PKI, certificate lifecycle, and vault/openbao-like tools.
• Strong Linux, networking, and on-prem security fundamentals.
• Experience securing data centers or air-gapped networks.
• Experience with GitLab Self-Managed for CI/CD security.
• Ability to automate with Bash, Python, Ansible, Terraform.

Responsibilities

• Design and manage access controls including SSO, MFA, federation, privileged access, and machine identities.
• Configure and operate Keycloak or equivalent self-hosted IDM.
• Manage secrets, certificates, PKI, CA, and cryptographic keys, incl. secure key ceremonies.
• Secure Linux systems, networks, endpoints, and on-prem infrastructure.
• Implement security controls for air-gapped environments with data transfer controls.
• Secure self-hosted CI/CD pipelines, including secrets scanning and signing.
• Support network security across sites, including firewalls and VPNs.
• Operate vulnerability management, security monitoring, and incident response.
• Maintain technical documentation, configurations, and audit evidence.

Skills

IAM

Keycloak

PKI

Secrets management

Linux security

Network security

CI/CD security

Scripting

Tools

GitLab Self-Managed

Job description

Salt is seeking an experienced Security Engineer to design, implement, and operate security across our infrastructure, applications, networks, and isolated computing environments.

You will cover IAM, PKI, secrets management, and on-premises security, including air-gapped systems and GitLab CI/CD security for a multi-site setup. This hands-on role demands strong scripting and incident response capabilities.