To provide cloud security expertise to build out and maintain resilient, scalable, cost effective and high performing Cloud solutions.
Requirements:
- Design and deployment of highly available, enterprise-scale Cloud infrastructure.
- Advanced knowledge of infrastructure concepts, technologies and patterns (SDLC, IaC).
- Developing and delivering systems on AWS Platforms (Azure or GCP will be advantageous).
- Supporting and enhancing build and release processes through automation using a combination of processes and existing tools.
- Understanding of Cloud Security technologies and best practices.
- Understanding of Networking in Cloud environments.
- Experience in a DevOps role and incorporating security controls in the build process.
- Experience in engineering data and/or security log pipelines using Big Data technologies such as Spark, Kafka, Hadoop, Storm, etc.
- Demonstrated experience in designing, implementing, and managing data security solutions for structured and unstructured data.
- Understanding of modern software engineering patterns, including those used in highly scalable, distributed, and resilient systems.
- Ability to deliver long-term, repeatable IaC solutions that incorporate directly into an overall CI/CD process.
- Knowledge of JSON templates, PowerShell, CLI’s, Shell, Python.
- Experience working with cross-functional teams and providing data security guidance to developers and IT staff.
- Familiarity with regulatory requirements and industry standards related to data protection.
- Knowledge of data masking and tokenization tools and their integration.
- Knowledge of data obfuscation techniques to protect sensitive information.
- Data Governance: Understanding of data governance frameworks and practices.
- Data Privacy Regulations: Familiarity with POPIA, GDPR or other data privacy regulations.
- Data Encryption: Proficiency in data encryption techniques and technologies to safeguard structured and unstructured data.
- Access Control: Expertise in managing user access, permissions, and identity management systems for data security.
- Data Loss Prevention (DLP): Implementation and management of DLP solutions for monitoring and controlling data in transit and at rest.
- Secure Data Transfer Protocols: Understanding of secure protocols like TLS/SSL for data in transition.
- Data Classification: Ability to classify data based on sensitivity and apply appropriate security measures.
- Secure Logging and Auditing: Setting up comprehensive logs and audit trails for data access and changes.
Experience:
- 7+ years’ experience in Infrastructure, Software Development, DevOps or Security.
- 4+ years design and implementation of highly available, enterprise-scale public Cloud infrastructure.
- 4 years in AWS with focus on Data, Security & IAM.
- Experience in introducing cloud security technology (start-up) in an environment – processes, principles etc.
- Design and hands-on troubleshooting background on AWS Platform (Azure or GCP will be advantageous).
- Experience working in a DevOps environment.
- Experience developing and supporting infrastructure and cloud security capabilities for microservices-based architectures.
- Experience working with CI/CD technologies, e.g., GitLab and GitHub.
- Experience with authentication and authorization technologies and protocols (LDAP, Kerberos, AD, OAuth 2.0, OpenID Connect, SAML).
- Experience working with scripting and provisioning and IaC tools like Terraform, Ansible, CloudFormation or equivalent.
Skills:
- 5 years in AWS with focus on Networking.
- Experience in a financial services or banking organisation.
- Infrastructure security.
- Basic understanding of at least one high-level programming language (GoLang / .NET / Java / Python).
- Advanced scripting skills in at least one interpreted language (Bash/PowerShell).
- Experience in engineering data pipelines using Big Data technologies such as Spark, Kafka, Hadoop, Storm, etc.
- Experience with ELK, New Relic or similar on Public Cloud Platforms.
- Experience with Docker and Kubernetes, EKS.
- Experience working in a fast-paced Agile/Scrum environment (Atlassian Stack).
- Experience working with various Database technologies, SQL Server, MySQL, PostgreSQL, RedShift, Oracle, etc.
- Experience working with Vault/Secret platforms, e.g., Hashicorp.
#J-18808-Ljbffr
