DevSecOps Engineer (GCP, Security, K8s)

About Us
PILLAR AI (formerly Ringkas) — the AI-native sales infrastructure for financial institutions, loan origination, built on four years of live, real-world data. We're not prototyping. We're scaling a system already proven across 33 bank partners and 50+ cities. What started in Asia is now expanding across the GCC through our partnership with ROSHN Group in Saudi Arabia and others.
Location: Remote
Division: Engineering
Working hours: Adhere to the employment regulations of the country you're based in & aligned to 8:00 AM–5:00 PM Saudi Arabia time
Reports to: Engineering Manager & Principal SE
Role Summary:
We're looking for a DevSecOps Engineer to help secure and stabilize our systems — monitoring service health and security posture across our cloud infrastructure, correlating logs across distributed micro-services, and tracing issues to their root cause, from the API gateway to the database layer. You'll also help embed security into our CI/CD pipelines and manage access controls across our platform.
This role sits at the intersection of security, DevOps, and engineering support, working closely with the teams behind our multiple products.
Key Responsibilities:
Monitor system health and security across cloud services using observability and log aggregation tools.
Correlate logs across micro-services to detect anomalies, performance issues, and security threats.
Support& Investigate production incidents, tracing root causes from API gateway to database.
Document incidents, root causes, and resolutions; maintain and improve runbooks for recurring issue patterns.
Debug issues across the API layer (GraphQL/REST), business logic, and PostgreSQL (Cloud SQL) data layer.
Embed security into CI/CD pipelines (vulnerability scanning, secure deployments).
Manage access controls, secrets, and cloud infrastructure security.
Collaborate with engineering, QA, and DevOps teams on security best practices.
Collaborate with engineering to escalate confirmed bugs, providing precise reproduction steps, log excerpts, and trace IDs.
Requirements:
4+ years in DevOps, DevSecOps, SRE, or related roles.
Strong experience with cloud platforms (AWS/GCP/Azure) and native monitoring tools.
Hands-on with Docker, Kubernetes, and Infrastructure-as-Code (Terraform, etc.).
Scripting skills (Python, Bash) for automation.
Experience embedding security into CI/CD pipelines.
Familiarity with IAM, secrets management, and network security.
Strong debugging skills in distributed/micro-service systems.
Good written and verbal English proficiency, for collaborating with cross-regional teams
Nice-to-have:
Experience in fintech, banking, or other regulated industries.
Experience with Hasura (ACL configuration, console debugging).
Experience supporting multi-region or multi-tenant systems, ideally with regulatory/compliance logging awareness (PII handling, audit trails).
Prior on-call/production support experience in a micro-services or Serverless environment.

Work arrangement
Yes