Senior DevSecOps Engineer

We are looking for an experienced Senior DevSecOps Engineer to take ownership of our infrastructure, security, and developer support processes across office, cloud, and bare-metal environments. You will be responsible for ensuring reliability, scalability, and security across all layers of our systems, while supporting distributed development teams.

Responsibilities:

Office & Network

• Manage and support office-user devices (updates, troubleshooting, endpoint security).
• Administer and secure Microsoft 365 (accounts, access policies, integrations)
• Maintain and optimize office networking, including office access control and office monitoring

Cloud Infrastructure (AWS & Kubernetes)

• Design, maintain, and improve AWS infrastructure using Terraform.
• Manage and harden Kubernetes clusters, deployments, and monitoring stacks (Prometheus, Loki, Grafana).
• Operate CI/CD pipelines (GitHub Actions, ArgoCD, Helm) and support developer workflows.
• Implement secret and key management solutions.

Bare-Metal & Connectivity

• Maintain on-premises servers and virtualization platforms.
• Manage VPNs (site-to-site, IPSec tunnels) and ensure secure connectivity across environments.
• Oversee integrations between cloud, on-prem, and partner systems.

Security & Compliance

• Implement vulnerability scanning, patching, and threat detection.
• Define and enforce security policies across cloud, office, and application layers.
• Conduct internal security audits and maintain compliance with frameworks (ISO 27001, SOC 2, NIST).
• Develop and maintain documentation, playbooks, and incident response processes.

Cost Optimization

• Conduct audits of infrastructure and services with a focus on cost efficiency, scalability, and security.
• Recommend and implement migrations or updates to improve performance, resilience, and alignment with best practices.

Collaboration & Support

• Support distributed development teams (Python, Angular, React, Docker) with infrastructure and tooling.
• Act as a security advisor during architecture and design reviews.
• Mentor team members on DevSecOps practices and secure development.

Documentation

• Create and maintain clear, comprehensive documentation for all infrastructure, security, and operational processes.
• Ensure existing systems and solutions are well-documented to support knowledge sharing, onboarding, and compliance.
• Continuously update playbooks, runbooks, and configuration guides as systems evolve.

Requirements

• 5+ years of experience in DevSecOps, Cloud Security, or Infrastructure Engineering.
• Strong expertise in AWS services and security configurations.
• Deep hands-on experience with Kubernetes and container orchestration.
• Proven track record with Infrastructure as Code (Terraform).
• Proficiency with CI/CD tools and pipelines (GitHub Actions, ArgoCD, Helm).
• Solid scripting skills (Python, Bash, or equivalent).
• Familiarity with DevSecOps tools (Vault, Istio, Trivy, Snyk, etc.).
• Strong understanding of secure SDLC, OWASP Top 10, and modern threat modeling.
• Knowledge of network security (segmentation, policies, service mesh).
• Excellent communication and problem-solving skills.
• Ability and willingness to work 100% onsite in our Dubai office.

Preferred Certifications

• Certified DevSecOps Professional (CDP)
• Certified Kubernetes Security Specialist (CKS)
• AWS Security Specialty
• Other relevant security or cloud certifications

About GS1 Emirates:

GS1 Emirates is part of the global GS1 network, a not-for-profit organization that works with industry, for industry, providing global standards and technology-neutral services and solutions to help solve the business challenges of today and tomorrow.

GS1 develops and maintains the most widely used global standards for efficient business communication. It is best known for the barcode, named by the BBC as one of “the 50 things that made the world economy.” GS1 standards and services improve supply chains’ efficiency, safety, and visibility across physical and digital channels in 25 sectors. With offices in 118 countries, 2 million companies, and 6 billion transactions every day, GS1 standards create a common language that supports global systems and processes.

At GS1 Emirates, we collaborate with our stakeholder communities to develop and implement a robust system of standards that enables the unique identification, accurate capture, and automatic sharing of trusted and verified information about products, locations, and traceability events.

We are at the forefront of several UAE initiatives and are committed to helping Emirati businesses adopt world-class best practices. We offer a wide range of services and solutions to support companies, industry associations, and government authorities to work smarter and more efficiently using the GS1 global system of standards.

Job Type: Full-time

Ability to commute/relocate:

• Dubai: Reliably commute or planning to relocate before starting work (Preferred)

Application Question(s):

• Are you already based in UAE with a residence visa?