Infrastructure & Security Engineer

About the Role FundingSouq is a DIFC- and SAMA-regulated Shariah-compliant SME lending platform operating across the UAE and Saudi Arabia. We are looking for an Infrastructure & Security Engineer to own our server infrastructure, cloud environments, and security practices — from hands-on administration and DevSecOps integration to patching governance and disaster recovery. Key Responsibilities Infrastructure Administration • Administer Windows Server (primary) and Linux environments in production • Manage IIS, DNS, FTPS/SFTP, Active Directory, and Group Policy • Fine-tune SQL Server — query optimisation, indexing, performance monitoring, and backups • Administer corporate VPN infrastructure — configuration, user provisioning, and access policy • Monitor server health, proactively resolve server-side issues, and maintain audit logs Cloud & DevSecOps • Manage and secure cloud infrastructure on GCP — compute, networking, IAM, and logging • Integrate SAST, DAST, dependency scanning, and secrets detection into CI/CD pipelines • Enforce security gates and unit testing standards across the development lifecycle • Automate security checks and drive vulnerability remediation across infrastructure and applications Patching, DR & Governance • Own the full patching lifecycle with defined policies to protect production during upgrades • Design and regularly test disaster recovery procedures; maintain validated RTOs and RPOs • Author and maintain security policies, change management procedures, and risk registers • Support internal and external audits with infrastructure compliance evidence Required Skills • Strong hands-on Windows Server administration (2016/2019/2022); working knowledge of Linux • Solid IIS, DNS, SQL Server tuning, and FTPS/SFTP experience • GCP hands-on experience — compute, networking, IAM, and cloud security • VPN administration — configuration, access management, and policy enforcement • Experience integrating SAST/DAST tools into CI/CD pipelines (GitHub Actions, GitLab CI, or Jenkins) • Proven patching and upgrade management without production disruption • Familiarity with a compliance framework — ISO 27001, SAMA, or equivalent Nice to Have • Scripting skills — PowerShell, Bash, or Python • Experience with Terraform or equivalent IaC tooling • Monitoring tools — Datadog, Google Cloud Monitoring, or ELK • Certifications: GCP Professional Cloud Security Engineer, CompTIA Security+, CISSP, or equivalent