Senior Cloud Security Architect

Bebeesecurity; Johannesburg; On-site; ZAR 600 000 - 800 000; Full time

Job summary

A cybersecurity company is seeking a Kubernetes Engineer & Security Specialist to lead their initiatives in Kubernetes and security. This role involves designing and managing scalable Kubernetes clusters, configuring networking components, and implementing security measures across various platforms. The ideal candidate will have strong expertise in Kubernetes, network security, and automation tools like Terraform. This is a fantastic opportunity to enhance security in cloud and container environments in South Africa.

Qualifications

• Experience in designing and managing Kubernetes clusters.
• Familiarity with networking components and ingress controllers.
• Expertise in endpoint security and compliance standards.

Responsibilities

• Design, deploy, and manage Kubernetes clusters.
• Configure networking with CNI plugins and ingress controllers.
• Lead threat detection and incident response.

Skills

Kubernetes management

Network security

Infrastructure as code

Endpoint security

Tools

Terraform

Ansible

Azure

Fortinet

Palo Alto

Job description

Job Role

We are seeking a seasoned expert to spearhead our Kubernetes and security initiatives.

Kubernetes Engineer & Security Specialist Responsibilities

Design, deploy, and manage highly available, scalable, and secure Kubernetes clusters on AKS and self-managed environments.

Configure and maintain networking components such as CNI plugins (Calico or Cilium) and ingress controllers (NGINX / Traefic).

Implement network policies, pod security standards, and role-based access control within Kubernetes.

Integrate Kubernetes networking with Azure Virtual Networks, Network Security Groups, private endpoints, and load balancers.

Automate infrastructure deployment and management using tools like Terraform and Ansible.

Network Security Expertise

Manage and configure enterprise firewalls (Fortinet, Palo Alto, Cisco ASA / FTD, or Check Point).

Implement zero-trust architecture models

Secure applications using Firewalls, Application Gateway, WAF, DDo S Protection, and private endpoints.

Lead threat detection, incident response, and vulnerability remediation across cloud and container platforms.

DNS, Identity, and Compliance

Administer Microsoft Entra ID (Azure Active Directory) for Single Sign-On, Multi-Factor Authentication, RBAC, and conditional access.

Manage DNS services (Azure DNS, BIND, Microsoft DNS), DHCP, SSL / TLS certificates, DNSSEC, and public domain registrations.

Integrate Entra ID with Kubernetes workloads and role-based access policies.

Endpoint Security & Compliance

Deploy and maintain endpoint security solutions.

Create and enforce security baselines, group policies, and organizational security policies aligned to compliance standards.

Operations & Monitoring

Monitor and troubleshoot network, Kubernetes, DNS, and firewall issues.

Participate in incident response, root cause analysis, and disaster recovery testing.

Automate operational tasks and workflows.