Cloud Security Architect (Hybrid, 3-Year Contract)

Sasso Consulting; Johannesburg; Hybrid; ZAR 550,000 - 900,000; Full time

Job summary

Sasso Consulting is seeking experienced Cloud Security Specialists to design, implement, and continuously improve security controls across enterprise cloud environments.

You will protect cloud infrastructure, applications, networks, identities and data against cybersecurity threats, vulnerabilities and unauthorised access. The role encompasses architecture, IAM, network security, threat detection and data protection, plus DevSecOps integration.

Qualifications

• Minimum Requirements: Diploma or degree in IT, CS, Cybersecurity, Cloud Computing or related field.
• 3–5 years of cloud security experience.
• Hands-on experience implementing security controls in enterprise cloud environments.
• Strong knowledge of Azure, AWS or GCP.
• Experience with IAM controls, network security, CSPM, CWPP, CIEM.
• Understanding of Zero Trust and shared responsibility model.
• Experience with automation and IaC.
• Familiarity with ISO/NIST/CIS controls.

Responsibilities

• Design, implement and maintain security controls across enterprise cloud environments.
• Assess cloud infrastructure and workloads for risks and vulnerabilities.
• Develop secure cloud configurations, policies and architecture standards.
• Apply security best practices across IaaS, PaaS and SaaS.
• Support secure cloud deployments, migrations and modernization.
• Conduct cloud security reviews and remediation of misconfigurations.
• Collaborate with architects, engineers and cybersecurity teams to strengthen security posture.
• Maintain security documentation and compliance evidence.

Skills

Cloud security architecture

Zero Trust

RBAC & IAM

MFA & PAM

CI/CD Security

Education

Degree in IT or Cybersecurity

Tools

CWPP

CIEM

IAM

CSPM

WAF

KMS

Terraform

Job description

Sasso Consulting is seeking experienced Cloud Security Specialists to design, implement, and continuously improve security controls across enterprise cloud environments.

You will protect cloud infrastructure, applications, networks, identities and data against cybersecurity threats, vulnerabilities and unauthorised access. The role encompasses architecture, IAM, network security, threat detection and data protection, plus DevSecOps integration.