Company Description
1Pass is a leading Saudi fitness and wellness platform that provides flexible access to hundreds of gyms, studios, padel courts, spas, and recovery experiences across major cities in the Kingdom. Through a single subscription, users can tailor their wellness journey by choosing activities that fit their goals, schedule, and lifestyle. In addition to its consumer offering, 1Pass delivers comprehensive Corporate Wellness Programs designed to improve employee wellbeing, morale, and productivity while reducing absenteeism. These programs offer data-driven insights, diverse activity options, and flexible activation plans customized to each organization’s needs. 1Pass is focused on building a dynamic, health-centered ecosystem powered by technology and user experience.
The Role
We are looking for a hands‑on engineer to own the day‑to‑day health of our Google Cloud environment, build and maintain our CI/CD pipelines, and act as the first line of defence on infrastructure security.
Responsibilities
Cloud Infrastructure (GCP)
- Provision and operate our Google Cloud environment: compute, managed databases, storage, VPC networking, load balancing and DNS.
- Define environments in Terraform so staging and production are reproducible and versioned.
- Own backups, restore testing, disaster recovery and capacity planning.
- Set up monitoring, logging and alerting so issues are caught early.
- Track and optimise cloud spend.
CI/CD
- Build and maintain deployment pipelines using Cloud Build, GitHub Actions or GitLab CI.
- Containerise services with Docker and manage image registries.
- Set up automated testing gates, staged environments, safe rollbacks and zero-downtime releases.
- Reduce manual steps and document how the platform works.
Security
- Enforce least-privilege IAM across cloud and internal systems, and support periodic access reviews.
- Manage secrets and keys properly, and keep credentials out of code and pipelines.
- Harden the environment: firewall rules, network segmentation, TLS, WAF and patching.
- Run vulnerability and dependency scanning, and drive remediation with the engineering team.
- Maintain audit trails and support incident response.
Compliance
- Help keep regulated workloads and data hosted inside Saudi Arabia.
- Support alignment with NCA cybersecurity controls and the Saudi Personal Data Protection Law (PDPL).
- Maintain architecture documentation, runbooks and control evidence for audits.
Requirements
- 3-5 years in DevOps, cloud infrastructure, SRE or platform engineering.
- Hands‑on experience with Google Cloud Platform. Strong AWS or Azure experience with a clear willingness to work on GCP will also be considered.
- Solid Linux administration skills.
- Infrastructure as Code with Terraform or equivalent.
- Docker in production, and familiarity with Kubernetes concepts.
- Building and maintaining CI/CD pipelines end to end.
- Scripting and automation in Bash and Python.
- Networking fundamentals: VPC design, DNS, TLS, load balancing and firewall rules.
- Operational familiarity with relational databases, including backups and restores.
- A security‑first mindset around least privilege, blast radius and auditability.
- Good written and spoken English, with clear documentation habits.
Nice to Have
- Working knowledge of NCA compliance frameworks and how they translate into technical controls.
- Familiarity with Saudi PDPL or other local regulatory requirements.
- Google Cloud certification: Associate Cloud Engineer, Professional Cloud DevOps Engineer or Professional Cloud Security Engineer.
- A security certification such as CompTIA Security+, CySA+ or similar.
- Arabic language skills.