09 Oct
Recru-IT
City of Cape Town
Reference: PE011000-Tabz-1
The ideal candidate will be responsible for ensuring the confidentiality, integrity, and availability of the company's organization's data assets across various data states, including structured and unstructured data, data at rest, data in transition, and data in transaction. This role will involve designing, implementing, and maintaining data security solutions to protect against threats and vulnerabilities, along with deep knowledge of data security products and associated concepts. This role will enable the successful candidate to make business and innovative decisions, leveraging the agility of cloud.
To provide cloud security expertise to build out and maintain resilient, scalable,
cost effective and high performing Cloud solutions.
Experience
Minimum:
- 7+ years' experience in Infrastructure, Software Development, DevOps or Security
- 4+ years design and implementation of highly available, enterprise-scale public Cloud infrastructure.
- 3+ years in AWS with focus on Data, Security & IAM
- Of introducing cloud security technology (start-up) in an environment – processes, principles etc.
- Design and hands on troubleshooting background on AWS Platform (Azure or GCP will be advantageous).
- Experience working in a DevOps environment.
- Experience developing and supporting infrastructure and cloud security capabilities for micro services-based architectures.
- Experience working with CI/CD technologies. i.e., GitLab and GitHub
- Experience with authentication and Authorization technologies and protocols (LDAP, Kerberos, AD, OAuth 2.0, OpenID Connect, SAML).
- Experience working with scripting and provisioning and IAC tools like Terraform, Ansible, CloudFormation or equivalent.
Ideal:
- 2+ years in AWS with focus on Networking
- Experience in a financial services or banking organisation
- Infrastructure security
- Experience in engineering data pipelines using Big Data technologies such as Spark, Kafka, Hadoop, Storm, etc.
- Experience with ELK, New Relic or similar on Public Cloud Platforms.
- Experience with Docker and Kubernetes, EKS.
- Experience working in a fast paced Agile/Scrum environment (Atlassian Stack).
- Experience working with various Database technologies, SQL Server, MySQL, PostgreSQL, RedShift, Oracle, etc.
- Experience working with Vault/Secret platforms, i.e., Hashicorp.
Qualifications (Minimum)
- A relevant tertiary qualification in AWS Foundation or Cloud Computing
Qualifications (Ideal or Preferred)
- Bachelor's Degree in Information Technology or Engineering – Other
- Relevant certifications such as CISSP, CISM, CISA, or other security-related certifications.
- AWS Data/Security certification
Knowledge
Minimum:
- Basic understanding of at least one high-level programming language (GoLang / .net / Java / python)
- Advanced scripting skills in at least one interpreted language (Bash/PowerShell)
- Design and deployment of highly available, enterprise-scale Cloud infrastructure.
- Advance knowledge of infrastructure concepts, technologies and patterns. (SDLC, IaC)
- Practical, working knowledge of:
- Developing and delivering systems on AWS Platforms (Azure or GCP will be advantageous).
- Supporting and enhancing build and release processes through automation using a combination of processes and existing tools.
- Understanding of Cloud Security technologies and best practices.
- Understanding of Networking in Cloud environments.
Ideal:
- Previous experience in a DevOps role and incorporating security controls in the build process.
- Experience in engineering data and/or security log pipelines using Big Data technologies such as Spark, Kafka, Hadoop, Storm, etc.
- Demonstrated experience in designing, implementing, and managing data security solutions for structured and unstructured data.
- Understanding of modern software engineering patterns, including those used in highly scalable, distributed, and resilient systems.
- Ability to deliver long-term,
repeatable IAC solutions that incorporate directly into an overall CI/CD process.
- Knowledge of JSON templates, PowerShell, CLI's, Shell, Python.
- Experience working with cross-functional teams and providing data security guidance to developers and IT staff.
- Familiarity with regulatory requirements and industry standards related to data protection.
Skills:
- Communications Skills
- Cloud Data Security: Experience securing data in cloud environments (e.g., AWS, Azure, GCP).
- Data Security: Proficiency with securing big data platforms, database systems and ensuring data integrity (e.g., Hadoop, Spark, MSSQL, Oracle).
- Data Masking:
- Knowledge of data masking and tokenization tools and their integration.
- Knowledge of data obfuscation techniques to protect sensitive information.
- Data Governance: Understanding of data governance frameworks and practices.
- Data Privacy Regulations: Familiarity with POPIA, GDPR or other data privacy regulations.
- 2 - 3 years Cloud experience.
- Data Encryption: Proficiency in data encryption techniques and technologies to safeguard structured and unstructured data.
- Access Control: Expertise in managing user access, permissions, and identity management systems for data security.
- Data Loss Prevention (DLP): Implementation and management of DLP solutions for monitoring and controlling data in transit and at rest.
- Secure Data Transfer Protocols: Understanding of secure protocols like TLS/SSL for data in transition.
- Data Classification:
Ability to classify data based on sensitivity and apply appropriate security measures.
- Secure Logging and Auditing: Setting up comprehensive logs and audit trails for data access and changes.
Competencies:
- Care and passion for the company people (Departmental Contributor)
- Earn and extend trust (Departmental Contributor)
- Simplify and make it easy (Departmental Contributor)
- Drive innovation mindset (Departmental Contributor)
- Lead with the "Why" (Departmental Contributor)
- Attract and relentlessly develop people (Departmental Contributor)
- Make decisions - faster and smarter (Departmental Contributor)
- Inspire optimism and persistence (Departmental Contributor)
Conditions of Employment
- Clear criminal and credit record
- A valid driver's license and own vehicle is required
R 1000 - R 1001 - Monthly
▶️ Data Security Resources (6 month contract) CPT - CBD
🖊️ Recru-IT
📍 City of Cape Town