Azure Cloud Security Engineer — CSPM & DevSecOps

Travelbyinvestec; Sandton; On-site; ZAR 600,000 - 1,000,000; Full time

Job summary

Investec seeks a Cloud Security Engineer to design, implement, and maintain security controls across its Azure cloud environments. The role emphasizes cloud governance, identity security, IaC security, and DevSecOps enablement to ensure secure, scalable, and compliant Azure services.

The position collaborates with platform engineering, infrastructure, and development teams to embed security into cloud platforms, CI/CD pipelines, and cloud-native delivery processes for enterprise standards.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline (or equivalent practical experience)

Responsibilities

• Design, implement, and maintain Azure security controls across subscriptions, management groups, and services.
• Configure CSPM tooling and governance controls; identify risks and remediation actions.
• Manage identity and access security, RBAC, service principals, and secrets management.
• Secure IaC deployments using Terraform and CI/CD guardrails; integrate security into pipelines.
• Secure Azure DevOps repositories, pipelines, and deployments; manage permissions and branch protections.
• Collaborate with security, risk, architecture, and engineering teams to ensure regulatory compliance and incident response readiness.

Skills

Azure Security

RBAC & Least Privilege

DevSecOps

CI/CD Security

Governance & Compliance

Automation & Scripting

Education

AZ-500

Azure Administrator Associate

Terraform Associate

CCSP/CCSK

Tools

Terraform

Azure Policy

Azure DevOps

Defender for Cloud

Job description

Investec seeks a Cloud Security Engineer to design, implement, and maintain security controls across its Azure cloud environments. The role emphasizes cloud governance, identity security, IaC security, and DevSecOps enablement to ensure secure, scalable, and compliant Azure services.

The position collaborates with platform engineering, infrastructure, and development teams to embed security into cloud platforms, CI/CD pipelines, and cloud-native delivery processes for enterprise standards.