Platform Engineer (SRE), Vision Bank
Cloud and infrastructure as code
- Provision and manage multi-cloud infrastructure (OCI and GCP) with Terraform and GitLab CI/CD across DEV, UAT, PROD and DR, enabling scalable, secure and repeatable deployments.
- Act as the bank's infrastructure SME for banking vendors. I lead end-to-end onboarding and environment readiness, automating GitLab repositories, Kubernetes clusters, Argo CD applications, Harbor registries, Privileged Access Management and HashiCorp Vault policies across all environments.
Kubernetes and GitOps
- Implement and operate production-grade CI/CD and GitOps workflows with GitLab CI/CD, Argo CD and Helm, supporting microservices and Kubernetes-based platforms.
- Operate and support production Kubernetes clusters on OKE and GKE.
- Customize and maintain Helm charts for enterprise tooling (Dynatrace, Teleport, Prometheus, ELK Stack) to keep environments consistent.
Security and compliance (SAMA)
- Deliver platforms that meet SAMA regulatory requirements in KSA banking.
- Manage Privileged Access Management with Teleport, enforcing least-privilege access and RBAC policies aligned with SAMA.
- Apply DevSecOps controls across pipelines and platforms: Harbor for image registry security, HashiCorp Vault for secrets management and Sysdig for container security and runtime monitoring.
- Implement SIEM log ingestion with the ELK/EFK stack, forwarding security and system logs through Fluent Bit for centralized monitoring and analysis.
Observability and reliability
- Own enterprise observability, covering monitoring, logging and alerting with Dynatrace, Grafana, Loki, Prometheus and OpenTelemetry for end-to-end visibility and health checks.
- Onboard bank infrastructure, including applications, databases, Linux and Windows VMs, Kubernetes clusters (OKE and GKE) and synthetic monitors, by deploying agents on machines and DaemonSets on clusters.
- Ensure monitoring coverage across Production, DR and pre-production environments.
- Integrate alerting with ServiceNow, Mattermost, webhooks and email for real-time notifications and operational workflows.
- Design dashboards and alerts for uptime, availability and performance. Work with developers, QA and chapter leads on SOPs for alert handling and process automation that reduce MTTR and MTTD.
- Apply SRE principles by defining and tracking SLIs, SLOs and error budgets to improve reliability, availability and performance of critical banking platforms.
Operations and mentoring
- Take part in production support and on-call, run post-mortems, guide RCA and find performance bottlenecks through traces and monitoring.
- Mentor command center and operations teams on observability: custom dashboards, alerts, logs, traces, spans and event mechanisms, and how to interpret key insights.