Cloud Security Engineer

Boardroom Appointments; Cape Town; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Boardroom Appointments seeks an experienced cloud security/DevOps engineer to design and implement resilient AWS-based infrastructure. The role emphasizes security, IAM, networking, and automation with CI/CD pipelines.

Ideal candidates bring 7+ years across infrastructure, devops or security, plus 3+ years in AWS security, with hands-on Terraform, Kubernetes and cloud tooling experience.

Qualifications

• Bachelor's degree in IT or Engineering or equivalent.
• 7+ years in Infrastructure, Software Development, DevOps or Security.
• 4+ years designing and implementing enterprise-scale public cloud infra.
• 3+ years in AWS with focus on Security & IAM.
• Experience with Terraform, Ansible, CloudFormation or equivalent.
• Experience with CI/CD tools and scripting (GoLang/Java/Powershell).

Responsibilities

• Design and implement highly available cloud infrastructure.
• Work in DevOps environments with security controls in build processes.
• Develop and support cloud security capabilities for microservices architectures.

Skills

AWS

Security

IAM

Networking

DevOps

CI/CD

Scripting

GoLang

Java

PowerShell

Python

Terraform

Ansible

CloudFormation

Docker

Kubernetes

Education

Bachelors in IT or Engineering

AWS Foundation or Cloud Computing qualification

Tools

Terraform

Ansible

CloudFormation

Docker

Kubernetes

GoLang

Java

PowerShell

Job description

• A relevant tertiary qualification in AWS Foundation or Cloud Computing
• Bachelor's Degree in Information Technology or Engineering - Other (IDEAL)
• 7+ years experience in Infrastructure, Software Development, DevOps or Security
• 4+ years design and implementation of highly available, enterprise-scale public Cloud infrastructure.
• 3+ years in AWS with focus on Security & IAM
• Of introducing cloud security technology (start-up) in an environment processes, principles etc.
• Design and hands on troubleshooting background on AWS Platform (Azure or GCP will be advantageous).
• Experience working in a DevOps environment.
• Experience developing and supporting infrastructure and cloud security capabilities for micro services- based architectures.
• Experience working with CI/CD tools.
• Experience with authentication and Authorization technologies and protocols (LDAP, Kerberos, AD, OAuth 2.0, OpenID Connect, SAML).
• Experience working with scripting and provisioning tools like Terraform, Ansible, CloudFormation or equivalent.

Ideal:

• 2+ years in AWS with focus on Networking
• Experience in a financial services or banking organisation
• Infrastructure security
• Experience in engineering data pipelines using Big Data technologies such as Spark, Kafka, Hadoop, Storm, etc.
• Experience with ELK, New Relic or similar on Public Cloud Platforms.
• Experience with Docker and Kubernetes.
• Experience working in a fast paced Agile/Scrum environment (Atlassian Stack).

Knowledge

Minimum:

• Basic understanding of at least one high-level programming language (GoLang / .net / Java)
• Advanced scripting skills in at least one interpreted language (Bash/PowerShell)
• Design and deployment of highly available, enterprise-scale Cloud infrastructure.
• Advance knowledge of infrastructure concepts, technologies and patterns. (SDLC, IaC) Practical, working knowledge of:
• Developing and delivering systems on AWS Platforms (Azure or GCP will be advantageous).
• Supporting and enhancing build and release processes through automation using a combination of processes and existing tools.
• Understanding of Cloud Security technologies and best practices.
• Understanding of Networking in Cloud environments.

Ideal:

• Previous experience in a Devops role and incorporating security controls in the build process.
• Experience in engineering data and/or security log pipelines using Big Data technologies such as Spark, Kafka, Hadoop, Storm, etc.
• Understanding of modern software engineering patterns, including those used in highly scalable, distributed, and resilient systems.
• Ability to deliver long-term, repeatable IaC solutions that incorporate directly into an overall CI/CD process.
• Knowledge of JSON templates, PowerShell, CLIs, Shell, Python.