Lead Cloud Security Engineer

Placements24; Cape Town; Hybrid; ZAR 1,200,000 - 1,600,000; Full time

Job summary

Placements24 in South Africa seeks a Lead Cloud Security Engineer to design, implement and manage security for cloud infra across AWS, Azure and GCP. This fully remote role allows you to work from anywhere in SA while guiding a security team.

You will automate with IaC (Terraform, Ansible, CloudFormation), lead IAM, data protection and network security, run audits and pen tests, and drive DevSecOps across CI/CD. Strong leadership and cloud security expertise are essential.

Qualifications

• 5+ years in cybersecurity, with at least 3 years focused on cloud security engineering.
• Proven experience securing AWS, Azure and GCP.
• Hands-on with IaC and CI/CD pipelines.
• Proficiency in scripting languages (Python, Bash, PowerShell).
• Strong problem-solving, leadership and communication skills.

Responsibilities

• Architect, deploy, and maintain secure cloud infrastructure across AWS, Azure and GCP.
• Develop and implement security policies, controls, and best practices for cloud platforms.
• Lead IAM, data protection, network security, and vulnerability management in the cloud.
• Automate security processes and deployments using IaC and scripting languages.
• Conduct regular security audits, penetration testing, and risk assessments.
• Develop and manage incident response plans for cloud incidents.
• Collaborate with Dev and Ops to embed security into the CI/CD pipeline.
• Mentor junior engineers and lead a security team.

Skills

Cloud security

IAM

Network security

Data encryption

Logging & monitoring

Python

Bash

PowerShell

DevSecOps

Leadership

Education

Bachelor's degree in CS/Engineering/Cybersecurity

Master's degree (nice to have)

Tools

Terraform

Ansible

CloudFormation

Docker

Kubernetes

SIEM

Job description

About the Role

Our client, a globally recognized leader in cloud-native solutions, is seeking a highly experienced Lead Cloud Security Engineer to spearhead their security initiatives. This is a fully remote position, offering the flexibility to work from anywhere within South Africa. You will be responsible for designing, implementing, and managing the security architecture for our client's cloud infrastructure across major providers (AWS, Azure, GCP). This role requires a strategic thinker with extensive hands-on experience in cloud security best practices, automation, and threat mitigation. You will lead a team of security engineers, mentor junior staff, and play a critical role in safeguarding our client's cloud environments and sensitive customer data. If you are passionate about cloud security and thrive in a remote, collaborative setting, this is the opportunity for you.

Key Responsibilities

Architect, deploy, and maintain secure cloud infrastructure environments (AWS, Azure, GCP). Develop and implement robust security policies, controls, and best practices for cloud platforms. Lead the design and implementation of security solutions for identity and access management (IAM), data protection, network security, and vulnerability management in the cloud. Automate security processes and deployments using Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation) and scripting languages. Conduct regular security audits, penetration testing, and risk assessments of cloud environments. Develop and manage security incident response plans for cloud-based incidents, ensuring rapid detection, containment, and eradication. Collaborate with development and operations teams to embed security into the CI/CD pipeline (DevSecOps). Mentor and guide junior cloud security engineers, fostering a culture of continuous learning and improvement. Stay current with emerging cloud security threats and technologies, recommending and implementing appropriate countermeasures.

Requirements

Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field; Master's degree is a plus. 5+ years of experience in cybersecurity, with at least 3 years focused specifically on cloud security engineering. Proven experience securing major cloud platforms (AWS, Azure, GCP). Expertise in cloud security services, IAM, network security groups, encryption, and logging/monitoring solutions. Hands-on experience with IaC tools (Terraform, Ansible, CloudFormation) and CI/CD pipelines. Proficiency in scripting languages such as Python, Bash, or PowerShell. Strong understanding of container security (Docker, Kubernetes). Experience with security monitoring and SIEM tools in a cloud context. Excellent problem-solving, communication, and leadership skills. Relevant cloud security certifications (e.g., AWS Certified Security - Specialty, Azure Security Engineer Associate, CCSP) are highly desirable.

Benefits

As a fully remote role, our client offers unparalleled flexibility. Benefits include a highly competitive salary, comprehensive medical, dental, and vision insurance, a generous retirement savings plan, and a substantial annual bonus structure. You will have access to ongoing professional development, including funding for certifications and conferences. Our client promotes a strong work-life balance, offers ample paid time off, and provides a stipend for home office setup. Join a forward-thinking company at the forefront of cloud innovation, working with a talented, distributed team dedicated to building secure and scalable cloud solutions.