Senior Technical Lead – Secure Access & Endpoint Platforms

Sabenza IT & Recruitment; South Africa; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Sabenza IT & Recruitment seeks a senior hands-on technical leader to own design assurance, implementation and delivery governance across enterprise secure access and endpoint management platforms. Core stack includes Cisco Secure Access, Microsoft Entra ID and ManageEngine Endpoint Central.

You will assess environments, validate designs, craft execution plans, lead delivery, coordinate with MSPs and ensure a smooth handover into BAU with runbooks and monitoring.

Qualifications

• 8+ years in enterprise networking, security or infrastructure with Cisco expertise.
• CCIE or equivalent senior-level Cisco expertise.
• Delivery of Cisco Secure Access implementations and endpoint modernisation.
• Identity and access skills: Entra ID, Active Directory, SAML, SSO, MFA and certificate-based authentication.
• Solid networking and security grounding: routing, firewalls, DNS, PKI and secure remote access.
• PowerShell, log analysis and strong root-cause troubleshooting.
• Experience governing managed service providers and coordinating cross-functional teams.

Responsibilities

• Assess current secure access, endpoint and identity environments.
• Validate high-level and low-level designs, and challenge vendor approaches where needed.
• Turn approved architecture into execution plans covering work packages, deployment waves, cutover and rollback, test plans, and go/no-go criteria.
• Lead Cisco Secure Access delivery, including SIA, SWG, ZTNA, SPA, Secure Client, Resource Connectors, and IPsec/VPN.
• Troubleshoot connectivity, routing, DNS, policy and authentication issues.
• Oversee Intune, covering enrolment, app deployment, compliance, configuration profiles, security baselines, MDM/MAM and Conditional Access.
• Oversee Endpoint Central packaging and deployment reliability too.
• Own end-to-end testing and technical acceptance: connectivity, authentication, failover, pilots and operational readiness.
• Run change management through CAB, plus hypercare and a smooth handover into BAU, with runbooks, SOPs, monitoring and as-built documentation.
• Act as the main technical liaison with managed service providers and hold vendors to quality, incident resolution and documentation standards.

Skills

Cisco expertise

CCIE

Delivery leadership

Identity & access

Networking & security

PowerShell

Log analysis

Root-cause troubleshooting

Vendor management

Education

Matric + IT/CS/Engineering qualification

Job description

We're looking for a senior, hands‑on technical leader to own design assurance, implementation and delivery governance across our enterprise secure access and endpoint management platforms. The core stack is Cisco Secure Access, Microsoft Intune and ManageEngine Endpoint Central.

What you’ll do

• Assess current secure access, endpoint and identity environments.
• Validate high‑level and low‑level designs, and challenge vendor approaches where needed.
• Turn approved architecture into execution plans covering work packages, deployment waves, cutover and rollback, test plans, and go/no‑go criteria.
• Lead Cisco Secure Access delivery, including SIA, SWG, ZTNA, SPA, Secure Client, Resource Connectors, and IPsec/VPN.
• Troubleshoot connectivity, routing, DNS, policy and authentication issues.
• Oversee Intune, covering enrolment, app deployment, compliance, configuration profiles, security baselines, MDM/MAM and Conditional Access.
• Oversee Endpoint Central packaging and deployment reliability too.
• Own end‑to‑end testing and technical acceptance: connectivity, authentication, failover, pilots and operational readiness.
• Run change management through CAB, plus hypercare and a smooth handover into BAU, with runbooks, SOPs, monitoring and as‑built documentation.
• Act as the main technical liaison with managed service providers and hold vendors to quality, incident resolution and documentation standards.

What you’ll bring

• 8+ years in enterprise networking, security or infrastructure, with deep hands‑on Cisco expertise.
• CCIE or equivalent senior‑level Cisco expertise.
• Proven delivery of Cisco Secure Access implementations and endpoint modernisation projects, from assessment through to BAU.
• Strong identity and access skills: Entra ID, Active Directory, SAML, SSO, MFA and certificate‑based authentication.
• Solid networking and security grounding: routing, firewalls, DNS, PKI and secure remote access.
• PowerShell, log analysis and strong root‑cause troubleshooting.
• Experience governing managed service providers and coordinating cross‑functional teams.
• Matric plus a relevant IT, Computer Science or Engineering qualification.

Advantageous

• Cisco Security, SASE or Zero Trust certifications.
• Microsoft Intune, Security or Identity certifications.
• ITIL Foundation or higher.
• Experience in large or highly regulated enterprise environments.