DevOps Engineer

Overview

requirements

• .
• We need someone who treats security, auditability, and uptime as first-class concerns, not afterthoughts.
• ━━━━━━━━━━━━━━━━━━━━
• 𝗪𝗵𝗮𝘁 𝗬𝗼𝘂'𝗹𝗹 𝗗𝗼
• 𝗖𝗜/𝗖𝗗 𝗮𝗻𝗱 𝗗𝗲𝗹𝗶𝘃𝗲𝗿𝘆
• Build and maintain CI/CD pipelines for backend services, web frontends, mobile apps, and data services across multiple language stacks
• Manage release workflows across dev, staging, UAT, and production environments with proper approval gates
• Containerize applications using Docker and orchestrate deployments across our self-hosted and cloud infrastructure
• Maintain Infrastructure-as-Code (Ansible, Terraform, or equivalent) for repeatable, auditable environments
• 𝗦𝘆𝘀𝘁𝗲𝗺𝘀 𝗮𝗻𝗱 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗔𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗶𝗼𝗻
• Install, configure, and manage Linux servers (Ubuntu/RHEL) hosting application servers, databases, message brokers, reverse proxies, and caching layers
• Deploy and manage monitoring and management agents across the fleet
• Apply OS security hardening baselines aligned with CIS benchmarks and NCA ECC controls
• Implement and schedule security patch updates with documented change windows
• Provision administrative-level user accounts in line with least-privilege and approval policy
• Provide responsive support for immediate operational tasks and incidents
• 𝗕𝗮𝗰𝗸𝘂𝗽, 𝗥𝗲𝗰𝗼𝘃𝗲𝗿𝘆, 𝗮𝗻𝗱 𝗕𝘂𝘀𝗶𝗻𝗲𝘀𝘀 𝗖𝗼𝗻𝘁𝗶𝗻𝘂𝗶𝘁𝘆
• Install, configure, and operate backup systems and agents for databases, application servers, and configuration
• Define and document data backup, retention, and recovery requirements aligned with healthcare data protection standards
• Run regular restore drills and document recovery time and recovery point objectives (RTO/RPO)
• 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗮𝗻𝗱 𝗣𝗲𝗿𝗶𝗺𝗲𝘁𝗲𝗿 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆
• Define and document network and perimeter security requirements in collaboration with the security lead
• Implement secure network configurations across production, staging, and corporate environments
• Configure and manage firewall policies, including rule reviews and change documentation
• Validate network segmentation between PHI-bearing, internal, and public-facing environments
• Implement and operate secure VPN access for remote engineering and partner users
• 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗢𝗽𝗲𝗿𝗮𝘁𝗶𝗼𝗻𝘀 𝗮𝗻𝗱 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲
• Monitor security vulnerability alerts (CVEs, vendor advisories, internal scanners) and drive remediation
• Implement Identity and Access Management (IAM)

requirements

• across systems, including SSO, MFA, and access reviews
• Maintain audit logs and evidence trails to support CBAHI, JCI, and NPHIES audits
• Partner with the security function on incident response, including detection, containment, and post-mortems
• 𝗠𝗼𝗻𝗶𝘁𝗼𝗿𝗶𝗻𝗴, 𝗥𝗲𝗹𝗶𝗮𝗯𝗶𝗹𝗶𝘁𝘆, 𝗮𝗻𝗱 𝗣𝗲𝗿𝗳𝗼𝗿𝗺𝗮𝗻𝗰𝗲
• Operate centralized logging, metrics, and alerting (e.g., Prometheus, Grafana, ELK/OpenSearch, Sentry)
• Tune database and application performance in collaboration with engineering teams
• Lead postmortems and drive systemic reliability improvements
• ━━━━━━━━━━━━━━━━━━━━
• 𝗪𝗵𝗮𝘁 𝗪𝗲'𝗿𝗲 𝗟𝗼𝗼𝗸𝗶𝗻𝗴 𝗙𝗼𝗿
• 𝗥𝗲𝗾𝘂𝗶𝗿𝗲𝗱
• 3+ years in a DevOps, SRE, or Systems Engineering role running production Linux workloads
• Strong Linux administration skills (Ubuntu/RHEL): networking, systemd, cron, SSH hardening, log management
• CI/CD experience with GitLab CI, GitHub Actions, Jenkins, or equivalent — not just using pipelines, but designing them
• Containers: solid Docker fundamentals; comfortable writing Dockerfiles and managing container lifecycles
• Infrastructure-as-Code using Ansible, Terraform, or similar
• PostgreSQL operations: backups, replication, monitoring, basic tuning
• Networking fundamentals: TCP/IP, DNS, TLS, VPN, firewall rule design, network segmentation
• Security mindset: you know what hardening means and have applied it; you don't open ports without thinking
• Scripting: proficient in Bash and Python
• Source control: confident with Git workflows, branching strategies, and code review etiquette
• 𝗡𝗶𝗰𝗲 𝘁𝗼 𝗛𝗮𝘃𝗲
• Experience operating large open-source business or healthcare platforms in production
• Event streaming platforms (Kafka or similar): consumer groups, partitioning, monitoring, DLQs
• Experience working under healthcare or financial compliance regimes (CBAHI, JCI, HIPAA, NPHIES, PCI, NCA ECC)
• Familiarity with Nginx as a reverse proxy and WAF integrations
• Cloud experience (AWS, Azure, or GCP) alongside on-premise / hybrid environments
• Self-hosted developer platforms (Git hosting, issue tracking, CI runners)
• Arabic language skills
• ━━━━━━━━━━━━━━━━━━━━
• 𝗛𝗼𝘄 𝗬𝗼𝘂 𝗪𝗼𝗿𝗸
• You document. Tribal knowledge is a liability — runbooks, RACI, and change records are part of the deliverable.
• You communicate calmly during incidents and write postmortems without blame.
• You push back when something is unsafe, and you propose alternatives.
• You understand that in healthcare, "move fast and break things" is the wrong phrase.
• ━━━━━━━━━━━━━━━━━━━━
• 𝗪𝗵𝗮𝘁 𝗪𝗲 𝗢𝗳𝗳𝗲𝗿
• A meaningful mission — your work directly supports clinicians and patients across Saudi Arabia
• Modern engineering practices and a team that takes code review and architecture seriously
• Direct ownership of infrastructure decisions — not buried under five layers of management
• Competitive salary, benefits, and learning budget
• Visibility on certification paths (AWS, Kubernetes, security certifications) supported by the company