Cloud Infrastructure & DevOps Engineer; GCP

Company Description

1

Pass is a leading Saudi fitness and wellness platform that provides flexible access to hundreds of gyms, studios, padel courts, spas, and recovery experiences across major cities in the Kingdom. Through a single subscription, users can tailor their wellness journey by choosing activities that fit their goals, schedule, and lifestyle. In addition to its consumer offering, 1

Pass delivers comprehensive Corporate Wellness Programs designed to improve employee wellbeing, morale, and productivity while reducing absenteeism. These programs offer data-driven insights, diverse activity options, and flexible activation plans customized to each organization’s needs. 1

Pass is focused on building a dynamic, health-centered ecosystem powered by technology and user experience.

We are looking for a hands‑on engineer to own the day‑to‑day health of our Google Cloud environment, build and maintain our CI/CD pipelines, and act as the first line of defence on infrastructure security.

• Provision and operate our Google Cloud environment: compute, managed databases, storage, VPC networking, load balancing and DNS.
• Define environments in Terraform so staging and production are reproducible and versioned.
• Own backups, restore testing, disaster recovery and capacity planning.
• Set up monitoring, logging and alerting so issues are caught early.
• Track and optimise cloud spend.

• Build and maintain deployment pipelines using Cloud Build, Git Hub Actions or Git Lab CI.
• Containerise services with Docker and manage image registries.
• Set up automated testing gates, staged environments, safe rollbacks and zero-downtime releases.
• Reduce manual steps and document how the platform works.

• Enforce least-privilege IAM across cloud and internal systems, and support periodic access reviews.
• Manage secrets and keys properly, and keep credentials out of code and pipelines.
• Harden the environment: firewall rules, network segmentation, TLS, WAF and patching.
• Run vulnerability and dependency scanning, and drive remediation with the engineering team.
• Maintain audit trails and support incident response.

• Help keep regulated workloads and data hosted inside Saudi Arabia.
• Support alignment with NCA cybersecurity controls and the Saudi Personal Data Protection Law (PDPL).
• Maintain architecture documentation, runbooks and control evidence for audits.

• 3-5 years in Dev Ops, cloud infrastructure, SRE or platform engineering.
• Hands‑on experience with Google Cloud Platform. Strong AWS or Azure experience with a clear willingness to work on GCP will also be considered.
• Solid Linux administration skills.
• Infrastructure as Code with Terraform or equivalent.
• Docker in production, and familiarity with Kubernetes concepts.
• Building and maintaining CI/CD pipelines end to end.
• Scripting and automation in Bash and Python.
• Networking fundamentals: VPC design, DNS, TLS, load balancing and firewall rules.
• Operational familiarity with relational databases, including backups and restores.
• A security‑first mindset around least privilege, blast radius and auditability.
• Good written and spoken English, with clear documentation habits.

• Working knowledge of NCA compliance frameworks and how they translate into technical controls.
• Familiarity with Saudi PDPL or other local regulatory requirements.
• Google Cloud certification:
  Associate Cloud Engineer, Professional Cloud Dev Ops Engineer or Professional Cloud Security Engineer.
• A security certification such as CompTIA Security+, CySA+ or similar.
• Arabic language skills.