DevOps Engineer

About Secure Tech Secure Tech is a system integration company in Riyadh, Saudi Arabia, specializing in security systems and technical solutions. Our commitment is to provide the best service and equipment in the technological and security fields, adhering to international standards. Our team of qualified professionals strives for development and improvement for a better future in Saudi Arabia. Job Summary Builds the CI/CD environment, and delivery security practices around the current development stack (.NET, HTML, GitHub), aligned to the fact that the e-commerce platform runs in Azure behind Cloudflare and application data sits on SQL Server. It also supports the new Super App platform on Google Cloud (GKE, Kafka, Redis), keeping it fast, reliable and releasable. Responsibilities • – Design and own CI/CD pipelines for .NET applications from the existing GitHub repositories through build, test, and deployment. • – Introduce environment separation (dev / staging / production). • – Embed security scanning into the pipeline static code analysis, dependency/secret scanning before code reaches production. • – Set up application monitoring/alerting for deployed services and coordinate with the Security Analyst and NOC on incidents. • – Document infrastructure-as-code for repeatable environment provisioning rather than manual setup. • – Manage deployments to GKE (Helm or GitOps), releases and rollbacks across dev, QA, UAT and production. • – Extend pipeline security gates to container image scanning, image signing and approval for production. • – Operate Kafka and Redis: high availability, upgrades, broker replacement, backups, tuning and capacity planning. • – Operate the workflow engine and background workers. • – Run observability: OpenTelemetry, Prometheus and Grafana, centralized logs, dashboards and alerts. • – Define service-level objectives with the app teams and track them. • – Tune autoscaling (HPA and KEDA) and run load tests before peaks and releases. • – Lead incident response: on-call, triage, ServiceNow incidents, post-incident reviews and runbooks. • – Automate repetitive work and schedule non-production scale-down to save cost. Must Have • – Given the current stack (.NET, HTML, GitHub), this role should bring: GitHub Actions for CI/CD authoring. • – C#/.NET build & test tooling; • – Azure fundamentals App Service/VM deployment, storage, networking. • – DevSecOps tooling SAST (e.g., GitHub Advanced Security/CodeQL or SonarQube), dependency and secret scanning • – SQL Server deployment/migration tooling to safely version database changes. • – Containerization (Docker and Kubernetes) is a must . • – 5+ years in DevOps or SRE roles supporting production systems. • – Kubernetes in production on Google Kubernetes Engine (GKE), including Helm and GitOps deployments. • – Google Cloud fundamentals: GKE, Artifact Registry, Cloud Build, IAM and Workload Identity. • – Container security: image vulnerability scanning and image signing (e.g., Artifact Analysis, Binary Authorization, Cosign). • – Hands-on operation of Apache Kafka and Redis in production. • – Observability: Prometheus and Grafana (or a similar stack), OpenTelemetry, centralized logging and alerting. • – Autoscaling and performance: Kubernetes HPA, KEDA and load-testing tools (e.g., k6 or JMeter). • – SRE practices: service-level objectives, error budgets and post-incident reviews. • – Scripting in Python, Bash or Go; Linux troubleshooting. • – On-call and incident management experience, including ITSM tools such as ServiceNow. • – Other CI/CD tools (GitLab CI, Jenkins or Cloud Build) are a plus. • – Good written and spoken English. Show more Show less

Must Have – Given the current stack (.NET, HTML, GitHub), this role should bring: GitHub Actions for CI/CD authoring. – C#/.NET build & test tooling; – Azure fundamentals App Service/VM deployment, storage, networking. – DevSecOps tooling SAST (e.g., GitHub Advanced Security/CodeQL or SonarQube), dependency and secret scanning – SQL Server deployment/migration tooling to safely version database changes. – Containerization (Docker and Kubernetes) is a must. – 5+ years in DevOps or SRE roles supporting production systems. – Kubernetes in production on Google Kubernetes Engine (GKE), including Helm and GitOps deployments. – Google Cloud fundamentals: GKE, Artifact Registry, Cloud Build, IAM and Workload Identity. – Container security: image vulnerability scanning and image signing (e.g., Artifact Analysis, Binary Authorization, Cosign). – Hands-on operation of Apache Kafka and Redis in production. – Observability: Prometheus and Grafana (or a similar stack), OpenTelemetry, centralized logging and alerting. – Autoscaling and performance: Kubernetes HPA, KEDA and load-testing tools (e.g., k6 or JMeter). – SRE practices: service-level objectives, error budgets and post-incident reviews. – Scripting in Python, Bash or Go; Linux troubleshooting. – On-call and incident management experience, including ITSM tools such as ServiceNow. – Other CI/CD tools (GitLab CI, Jenkins or Cloud Build) are a plus.

Design and own CI/CD pipelines for .NET applications from the existing GitHub repositories through build, test, and deployment. – Introduce environment separation (dev / staging / production). – Embed security scanning into the pipeline static code analysis, dependency/secret scanning before code reaches production. – Set up application monitoring/alerting for deployed services and coordinate with the Security Analyst and NOC on incidents. – Document infrastructure-as-code for repeatable environment provisioning rather than manual setup. – Manage deployments to GKE (Helm or GitOps), releases and rollbacks across dev, QA, UAT and production. – Extend pipeline security gates to container image scanning, image signing and approval for production. – Operate Kafka and Redis: high availability, upgrades, broker replacement, backups, tuning and capacity planning. – Operate the workflow engine and background workers. – Run observability: OpenTelemetry, Prometheus and Grafana, centralized logs, dashboards and alerts. – Define service-level objectives with the app teams and track them. – Tune autoscaling (HPA and KEDA) and run load tests before peaks and releases. – Lead incident response: on-call, triage, ServiceNow incidents, post-incident reviews and runbooks. – Automate repetitive work and schedule non-production scale-down to save cost.