Skip to content

Backend Architect (Python, Security platform)

  • Hybrid
    • Rawabi,, Gaza, Palestine, State of
  • Service Delivery

Job description

About ASAL:

ASAL Technologies was established in 2000 and has grown to become a leading technology company across Jordan, KSA, UAE, and Palestine. With a workforce of over 450 engineers, ASAL offers a wide range of AI agents, services and products, Software and Digital Transformation services, Engineering and R&D services. ASAL Technologies is assembling a team of PD Engineers for a high-end multinational company. The team will be working with top notch engineers in the semiconductor industry from all over the world.

 

What you will do:

  • Own the architecture: access control, secrets, certificates, migrations, deployment and the move toward multi-tenancy.

  • Own testing: CI, automated access-control tests, log-pipeline health checks, detection tests and release sign-off.

  • Build human-approved response automation (firewall blocking, host isolation) with safety limits and rollback.

  • Act as the final technical escalation for platform incidents and take part in the on-call rota.

  • Review code and mentor the engineers who join the team.

  • Build defences from the attacker's view: threat modelling, vulnerability management and hardening, including against AI-driven attacks.

Job requirements

  • 8+ years of software engineering, with a Python backend you took to production and operated.

  • Experience guiding other engineers through design and code review.

  • Strong in FastAPI or a similar framework, SQLAlchemy, PostgreSQL, Docker and Linux.

  • Real experience with authentication and access control (JWT, OIDC, LDAP/AD, MFA, role-based access).

  • A testing mindset: CI, automated tests, and the discipline to stop a release that is not ready.

  • Good knowledge of attack techniques (MITRE ATT&CK), vulnerabilities (CVE / OWASP), defence methods and threat hunting.

  • Familiarity with red-teaming tools (Atomic Red Team, Caldera, Burp Suite, Metasploit) and the traces they leave.

  • Understanding of how AI is used in attacks and red teaming (AI-written phishing, deepfakes, prompt injection, LLM red-teaming), and how to build AI features safely.

  • Strong written and verbal English skills.

Nice to have:

  • Security-product or SOC experience (Wazuh, OpenSearch, Graylog, SIEM).

  • Multi-tenant SaaS and Kubernetes.

  • PKI / OpenSSL and secrets management.

  • Threathunting experience.

or