Senior DevSecOps Leader: Cloud Security & Automation

Optimal Growth Technologies; Johannesburg; Hybrid; ZAR 1,000,000 - 1,500,000; Full time

Job summary

Optimal Growth Technologies is seeking a Senior Cloud Security & DevSecOps Manager to lead a hybrid, 12-month program focused on secure cloud delivery, threat management, and automated security tooling. The role requires deep AWS expertise, strong leadership, and experience with regulated environments including POPIA compliance.

You will guide DevSecOps practices across Architecture, Development, Security, and Compliance teams, building secure CI/CD pipelines and incident response capabilities

Qualifications

• Bachelor's degree in a relevant field and 8+ years in DevOps, Cloud Engineering, or Cybersecurity.
• Proven leadership in regulated environments (POPIA/GDPR).
• Strong hands-on AWS experience and IaC/CI/CD proficiency.

Responsibilities

• Lead DevSecOps engineers and foster a security-by-design culture.
• Design, implement, and govern secure cloud architectures (AWS/Azure/GCP).
• Build secure CI/CD pipelines with security gates (SAST/DAST/IaC).
• Oversee vulnerability management, threat modelling, and incident response.
• Ensure compliance with POPIA and regulatory changes.

Skills

Cloud security

DevSecOps

AWS

Kubernetes

CI/CD

Threat modelling

POPIA compliance

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering

Tools

Terraform

Ansible

CloudFormation

Docker

Kubernetes

Git

Security tools (Inspector, GuardDuty)

Job description

Optimal Growth Technologies is seeking a Senior Cloud Security & DevSecOps Manager to lead a hybrid, 12-month program focused on secure cloud delivery, threat management, and automated security tooling. The role requires deep AWS expertise, strong leadership, and experience with regulated environments including POPIA compliance.

You will guide DevSecOps practices across Architecture, Development, Security, and Compliance teams, building secure CI/CD pipelines and incident response capabilities