Cloud Infrastructure and DevOps Engineer - Google Cloud Platform

About 1Pass

1Pass is a prominent Saudi fitness and wellness platform offering flexible access to numerous gyms, studios, padel courts, spas, and recovery centers across key cities in Saudi Arabia. It enables users to customize their wellness activities through a single subscription, aligning with their personal goals and lifestyle. Besides individual plans, 1Pass provides tailored Corporate Wellness Programs designed to enhance employee well-being, boost morale and productivity, and lower absenteeism. These programs leverage data insights, a variety of activity choices, and adaptable activation strategies to meet organizational requirements. The platform embraces a health-focused ecosystem built on strong technology and user experience foundations.

Role Summary

The role involves hands-on management of the Google Cloud infrastructure at 1Pass, developing and maintaining CI/CD pipelines, and serving as the primary guardian for infrastructure security.

Key Responsibilities

• Manage and provision Google Cloud resources such as compute services, managed databases, storage solutions, VPC networking, load balancing, and DNS configurations.
• Create and maintain Terraform scripts to ensure staging and production environments are reproducible and version-controlled.
• Assume responsibility for backups, restoration tests, disaster recovery measures, and capacity planning.
• Implement monitoring, logging, and alert systems to detect and address issues promptly.
• Monitor and optimize cloud expenditures to maintain cost efficiency.
• Develop and sustain deployment workflows using Cloud Build, GitHub Actions, or GitLab CI platforms.
• Containerize application services with Docker and manage container image repositories.
• Establish automated testing gates, staged environments, safe rollback procedures, and zero-downtime release strategies.
• Minimize manual operational tasks and produce comprehensive platform documentation.
• Enforce least-privilege access control across cloud and internal systems, supporting routine access reviews.
• Secure handling of secrets and credentials, ensuring they are excluded from codebases and CI/CD pipelines.
• Enhance environment security through firewall configurations, network segmentation, TLS, Web Application Firewall (WAF) settings, and timely patching.
• Conduct vulnerability and dependency scans and collaborate with engineers to remediate identified issues.
• Maintain detailed audit logs and assist in incident response activities.
• Ensure regulated workloads and related data are hosted within Saudi Arabia.
• Support adherence to NCA cybersecurity guidelines and Saudi Personal Data Protection Law (PDPL).
• Maintain architecture documentation, operational runbooks, and control evidence to facilitate audits.

Requirements

• Three to five years of experience in DevOps, cloud infrastructure management, Site Reliability Engineering (SRE), or platform engineering roles.
• Practical experience with Google Cloud Platform; strong AWS or Azure background with willingness to transition to GCP is also acceptable.
• Profound Linux systems administration skills.
• Experience with Infrastructure as Code, particularly Terraform or comparable tools.
• Use of Docker in production environments and familiarity with Kubernetes principles.
• Expertise in building and maintaining end-to-end CI/CD pipelines.
• Proficiency in scripting and automation using Bash and Python.
• Understanding of networking fundamentals including VPC design, DNS, TLS, load balancing, and firewall configurations.
• Operational knowledge of relational databases inclusive of backup and restore procedures.
• A security-focused mindset emphasizing least privilege principles, limiting blast radius, and ensuring auditability.
• Strong written and verbal English communication skills, with disciplined documentation practices.

Preferred Qualifications

• Familiarity with NCA cybersecurity compliance frameworks and their technical implementation.
• Awareness of Saudi PDPL or other pertinent local regulatory requirements.
• Google Cloud certifications such as Associate Cloud Engineer, Professional Cloud DevOps Engineer, or Professional Cloud Security Engineer.
• Security certifications like CompTIA Security+, CySA+, or similar credentials.
• Arabic language proficiency.

Application Process

Interested candidates should submit their CVs directly to the hiring team via email. Applications are assessed on a rolling basis.