وظيفة مهندس DevSecOps أول لدى Darb Pay بمدينة الرياض

About DarbPay

DarbPay is a SAMA-regulated fintech in Saudi Arabia, building secure, compliant payments infrastructure . Security isn't a checkbox for us - it's the foundation of everything we ship.

About the Role

We're hiring a Senior DevSecOps Engineer to own and harden our cloud infrastructure. You'll work at the intersection of platform engineering, security operations, and compliance - writing infrastructure as code, securing CI/CD pipelines, and building the detection capabilities that keep a regulated payments platform safe.

This is a hands-on senior role. You'll ship Terraform, tune Splunk detections, respond to incidents.

What You'll Do

• Design, build, and secure GCP infrastructure - GKE, VPC networking, IAM, and Cloud Armor WAF

• Own infrastructure as code with Terraform: reusable modules, remote state, drift detection, and policy-as-code guardrails

• Build and harden CI/CD pipelines in GitHub Actions - least-privilege workflows (OIDC / Workload Identity Federation), secrets management, and supply chain security

• Operate and improve our Splunk SIEM: log onboarding, detection engineering, alert tuning, and dashboarding

• Lead hardening across the stack - workload identity, secret management, network segmentation, WAF rules, and Kubernetes security policies

• Support SAMA CSF compliance: control implementation, evidence collection, and audit readiness

• Participate in incident response - triage, containment, root cause analysis, and blameless post-mortems

• Drive observability and reliability: SLOs, alerting, and capacity planning for production workloads

What We're Looking For

• 5+ years in DevOps, DevSecOps, SRE, or platform engineering roles

• Deep hands-on GCP experience - GKE, IAM, VPC, Cloud Armor, Cloud Logging and Monitoring

• Production Terraform experience: module design, state management, CI-driven plan/apply workflows

• Strong GitHub Actions skills, including pipeline security and runner management

• Working proficiency with Splunk - SPL, alerting, and building or tuning detections

• Solid Kubernetes fundamentals: RBAC, network policies, workload hardening

• Scripting ability in Bash and/or Python

• Experience in regulated or high-compliance environments (fintech, banking, or similar)

• Clear written communication - runbooks, post-mortems, and audit documentation

Nice to Have

• Certifications such as GCP Professional Cloud Security Engineer, CKA/CKS, or HashiCorp Terraform Associate

• Direct experience with SAMA CSF, PCI DSS, or comparable frameworks

• Detection engineering background (Sigma rules, MITRE ATT&CK mapping)

• Zero-trust networking experience

• Exposure to payments infrastructure or fraud/abuse detection

Our Stack

GCP • Terraform • GitHub Actions • Splunk • Kubernetes

Hiring Process

1. Shortlisting - we review your application and experience

2. Technical Assessment - a practical, scenario-based assessment

3. Technical Interview - a deep-dive with the engineering team on architecture, security, and how you think

We keep the process tight and respect your time. This is part-time, leading to full-time based on performance.