Senior DevOps Engineer

Who is Awaed?

Awaed Alosool Capital was established as a closed joint-stock company. The first Saudi platform for trading without commission. It operates under the Commercial Registration Number (7025411732) and has obtained a CMA license on March 21, 2023, to engage in dealing and asset management activities.

What is the role?

We run a regulated trading platform on Oracle Cloud Infrastructure: managed Kubernetes across non-production and production environments, GitOps delivery, an API gateway in front of every public endpoint, and a market-data path that has to stay up while trading hours are open.
You will own that platform end to end alongside a small infrastructure team: design it, automate it, keep it available during market hours, and make it defensible to auditors and pen-testers. This is a hands-on senior role with real architectural ownership, not a ticket queue.

What are we looking for?

• 6+ years in DevOps, SRE, platform or cloud engineering, including production ownership of a business-critical system.

• Deep Kubernetes: not just deploying to it, but debugging it (networking, DNS, scheduling, resource pressure, etc..).

• Terraform in anger: modules, state, drift, multi-environment layouts.

• Strong Linux and networking fundamentals: TCP/IP, DNS, TLS, routing, conntrack, packet capture. You can tell a client problem from a network problem from an app problem.

• Docker and Helm, plus a CI/CD system you have owned rather than just used (Jenkins, GitHub Actions, GitLab CI).

• Scripting and automation in Python and Bash.

• Observability practice: instrumenting services, designing dashboards, writing alert rules.

• Operating stateful services in production: at least one relational database (PostgreSQL, MySQL or SQL Server), one NoSQL store, one cache (Redis), and one message broker or streaming platform (Kafka, Pulsar, RabbitMQ).

• Secrets management and IAM in a cloud environment (Vault or an equivalent).

• Comfort leading an incident: calm, communicative, writes the RCA afterwards.

What will you do?

Platform and infrastructure

• Design, build and scale multi-region cloud environments (compute, networking, OKE, load balancers, object storage, etc..).

• Manage everything as code in Terraform: no console-only changes, reviewed via pull request.

• Run production-grade Kubernetes: node pools, upgrades, network policy, autoscaling, ingress, workload identity.

• Build and maintain CI/CD with Jenkins and GitOps (ArgoCD), Helm charts, and promotion paths that a developer can self-serve.

• Ship with zero downtime: rolling, blue/green and canary strategies.

• Automate the manual: Python, Bash, Go.

• Own monitoring, logging and alerting end to end (Prometheus-compatible metrics, Grafana, logs). Alerts should mean something, and page someone who can act.

• Define SLIs/SLOs for trading-critical paths: order ingestion, market data, auth, payments.

• Lead incident response, run root cause analysis, and write postmortems that produce follow-up work rather than blame.

• Own backup and disaster recovery, and prove it with restore drills.

• Integrate SAST, DAST, dependency and image scanning into the pipelines.

• Run secrets management and IAM: least privilege, short-lived credentials, no long-lived keys in repos.

• Harden Linux and Windows fleets, drive patching and remediate pen-test findings to closure.

• Keep infrastructure evidence-ready for CMA, SOC 2 and ISO 27001 style reviews.

• Track cloud spend per environment and service, and turn waste into an actionable backlog.

Nice to have:

• Oracle Cloud Infrastructure and OKE. Strong AWS or GCP background transfers well and we will help you convert.

• Fintech, trading or other latency-sensitive, regulated systems.

• API gateway operations at scale (Apache APISIX, Kong, Envoy) including OIDC/JWT at the edge.

• GitOps with ArgoCD or Flux.

• Cloudflare: WAF, Zero Trust access, tunnels, DNS.

• eBPF-based networking (Cilium), service mesh, or low-latency tuning.

• Event-driven architecture.

• Configuration management (Ansible) for the non-containerised fleet.

How we work?

• Infrastructure changes land through pull requests and GitOps, not through the console.

• Production access is audited and time-bound.

• We run a formal on-call rotation aligned with markets trading hours, with documented SLAs and a published escalation path.

• Every significant incident gets a written RCA and follow-up tickets.

Why you'll love working at Awaed?

• Hybrid work model.

• Highly competitive salary.

• Marriage Leave.

• A flexible, fast-moving environment working with modern technologies

• Be part of a mission-driven fintech shaping the future of trading in the Gulf.

• Work with modern technologies and a talented team that values innovation and impact.

Awaed is not for everyone; succeeding here requires adaptability, ownership, and a continuous drive to learn and improve.