Senior AWS DevSecOps Engineer

Samaha Consulting; Johannesburg; On-site; ZAR 700,000 - 1,100,000; Full time

Job summary

Samaha Consulting in Johannesburg seeks a Cloud Security Engineer to implement and manage security controls aligned with PCI DSS, SOX, GDPR and POPIA. You will design IAM roles, policies, and SSO integrations following least-privilege principles and work with Risk, Compliance and Security teams to satisfy audits.

The role covers IaC and automation using Terraform, CloudFormation or AWS CDK, building CI/CD pipelines, automating monitoring, disaster recovery and migration of on‑prem workloads to

Qualifications

• Experience implementing security controls aligned with regulations (PCI DSS, SOX, GDPR, POPIA).
• Experience designing IAM roles, policies and SSO integrations with least-privilege.
• Experience collaborating with Risk, Compliance and Security teams for audits.
• Experience vulnerability assessments, patching and encryption key management (KMS, HSM).

Responsibilities

• Implement and manage security controls aligned with banking regulations (PCI DSS, SOX, GDPR, POPIA).
• Create and manage IAM roles, policies, and SSO integrations with least-privilege principles.
• Work with Risk, Compliance, and Security teams to meet regulatory audit requirements.
• Perform vulnerability assessments, patching, and encryption key management (AWS KMS, HSM).
• Develop and maintain IaC using Terraform, CloudFormation, or AWS CDK to automate provisioning.
• Create CI/CD pipelines (CodePipeline, Jenkins, GitLab CI/CD, GitHub Actions) to streamline deployments.
• Drive automation of security monitoring, failover, and disaster recovery processes.
• Monitor cloud resources with CloudWatch, CloudTrail, GuardDuty, and Security Hub.
• Provide operational support for mission-critical banking applications with strict SLAs.
• Lead incident response and post-mortem analysis for infrastructure issues.
• Assist migrating on-prem workloads to AWS using Migration Hub, DMS, and Snowball.

Skills

Security controls

IAM & SSO

Vulnerability assessments

Encryption management

Automation & IaC

Tools

Terraform

CloudFormation

AWS CDK

Jenkins

GitHub Actions

CodePipeline

CloudWatch

GuardDuty

Job description

• Implement and manage security controls aligned with banking regulations (PCI DSS, SOX, GDPR, POPIA).
• Create and manage IAM roles, policies, and SSO integrations with strict least-privilege principles.
• Work closely with Risk, Compliance, and Security teams to meet regulatory audit requirements.
• Perform regular vulnerability assessments, patching, and encryption key management (AWS KMS, HSM).

Infrastructure as Code & Automation

• Develop and maintain Infrastructure as Code (IaC) using Terraform, CloudFormation, or AWS CDK to automate provisioning and configuration.
• Create CI/CD pipelines (AWS CodePipeline, Jenkins, GitLab CI/CD, GitHub Actions) to streamline deployments.
• Drive automation of security monitoring, failover, and disaster recovery processes.

Cloud Operations & Support

• Monitor cloud resources and performance using CloudWatch, CloudTrail, GuardDuty, and Security Hub.
• Provide operational support for mission‑critical banking applications, ensuring strict SLAs and uptime guarantees.
• Lead incident response and post‑mortem analysis for infrastructure‑related issues.
• Assist in migrating on‑premises workloads to AWS using services like AWS Migration Hub, DMS, and Snowball.