Senior Security Engineer - On-Prem & Air-Gapped Systems

Salt; Abu Dhabi; On-site; AED 240,000 - 460,000; Full time

Job summary

Salt is seeking an experienced Security Engineer to design, implement, and operate security across our infrastructure, applications, networks, and isolated computing environments. You will cover IAM, cryptography, secrets management, endpoint security, secure software delivery, and on-premises infrastructure.

You will design and manage access controls, configure Keycloak, manage PKI and secrets, secure Linux systems, and bolster air-gapped environments and self-hosted CI/CD pipelines.

Qualifications

• At least 5 years of hands-on experience in security engineering, infrastructure security, or a closely related technical security role.
• Practical experience with identity and access management, ideally Keycloak, including OIDC, SAML, SSO, federation, and MFA.
• Experience with PKI, certificate lifecycle management, cryptographic keys, and secrets management platforms such as HashiCorp Vault or OpenBao.
• Strong Linux, networking, and infrastructure security fundamentals.
• Experience securing on-premises environments, data centres, or isolated/air-gapped networks.
• Understanding of network segmentation, VPN/IPsec, firewalls, and secure remote access.
• Experience with source control and CI/CD security, preferably GitLab Self-Managed.
• Ability to automate security tasks using Bash, Python, Ansible, Terraform, or similar tools.
• Experience with security monitoring, vulnerability remediation, and incident response.
• Strong problem-solving skills, attention to detail, and the ability to document and explain technical decisions.

Responsibilities

• Design and manage identity and access controls, including SSO, MFA, federation, privileged access, and machine identities.
• Configure and operate Keycloak or an equivalent self-hosted identity provider.
• Manage secrets, certificates, PKI, certificate authorities, and cryptographic keys, including secure key ceremonies.
• Secure Linux systems, networks, endpoints, and on-premises infrastructure.
• Implement security controls for air-gapped environments, including controlled data transfers, offline updates, and network segmentation.
• Secure self-hosted source control and CI/CD pipelines, ideally GitLab Self-Managed, including secrets scanning, dependency management, and artifact signing.
• Support network security across multiple sites, including firewalls, IPsec tunnels, VPNs, reverse proxies, and access controls.
• Operate vulnerability management, security monitoring, incident response, and infrastructure hardening processes.
• Maintain technical documentation, security configurations, operational runbooks, and audit evidence.

Skills

Identity & Access Mgmt

Keycloak

Linux Security

Networking Security

PKI & Certificates

Secrets Management

Scripting (Bash/Python)

CI/CD Security

Incident Response

Threat Modeling

Tools

Keycloak

HashiCorp Vault

OpenBao

GitLab Self-Managed

Terraform

Ansible

Job description

Salt is seeking an experienced Security Engineer to design, implement, and operate security across our infrastructure, applications, networks, and isolated computing environments. You will cover IAM, cryptography, secrets management, endpoint security, secure software delivery, and on-premises infrastructure.

You will design and manage access controls, configure Keycloak, manage PKI and secrets, secure Linux systems, and bolster air-gapped environments and self-hosted CI/CD pipelines.