Junior DevOps & Information Security Engineer

Role overview

Key responsibilities

• Support AWS infrastructure including EC2, RDS, S3, IAM, VPC, CloudWatch, CloudTrail, load balancers, and security groups.
• Support development, staging, and production environments and assist with application deployments.
• Maintain and improve CI/CD pipelines and Docker-based deployments.
• Assist with infrastructure automation using Terraform or similar tools.
• Monitor infrastructure performance, availability, security alerts, and AWS resource utilization.
• Support backup, recovery, disaster recovery, and AWS cost optimization.
• Implement and maintain IAM, MFA, least-privilege access, encryption, and secure configuration.
• Assist with vulnerability management, patching, VAPT coordination, and remediation tracking.
• Monitor security logs and assist with security incident investigation and response.
• Support SOC 2, ISO 27001, and GDPR technical controls and audit evidence requirements.
• Maintain documentation for security controls, access reviews, vulnerabilities, backups, incidents, and compliance.
• Work with engineering, QA, management, and external security or compliance partners.

Required skills

• 1–3 years of experience in DevOps, cloud infrastructure, system administration, or cybersecurity.
• Hands-on knowledge of AWS and a good understanding of Linux environments.
• Knowledge of Git/GitHub, CI/CD, Docker, and shell scripting.
• Basic knowledge of Terraform and Python.
• Understanding of IAM, network security, encryption, TLS/SSL, vulnerability management, and security monitoring.
• Basic knowledge of PostgreSQL, database backups, and access control.
• Understanding of OWASP and basic incident-response principles.
• Good troubleshooting, analytical, and documentation skills.
• Good written and spoken English.
• Willingness to learn and work across DevOps, cloud security, and information security compliance.

Compliance knowledge

• Basic understanding of, or willingness to learn, SOC 2, ISO 27001, and GDPR.
• Basic understanding of information-security risk management and access-control management.
• Basic understanding of audit and evidence preparation and vulnerability-management processes.

Education and certifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• AWS or security certifications are advantageous but not mandatory.

Work location

• In-person work in Abu Dhabi.