Security Administrator

What You'll Do

As a Security Administrator, you will:

• Engineer, administer, and improve security controls across Microsoft cloud environments.
• Investigate and remediate cloud security posture findings, including misconfigurations, exposed workloads, over-privileged identities, and vulnerable container images.
• Design and maintain enterprise identity and access controls, including Conditional Access, phishing-resistant MFA, and Privileged Access Management (PAM).
• Manage and optimise the Endpoint Detection and Response (EDR) platform through policy development, threat hunting, compliance monitoring, and risk management.
• Administer web application firewall (WAF), Zero Trust access, bot management, DNS-layer security, and support network security hardening initiatives.
• Operate and enhance email security controls, including SPF, DKIM, and DMARC.
• Investigate and respond to escalated security incidents, performing root cause analysis and coordinating containment and recovery.
• Manage the vulnerability management lifecycle, including scanning, prioritisation, remediation coordination, and penetration test remediation.
• Develop security automation using Power Shell, APIs, workflow automation platforms, cloud-native automation, and Infrastructure-as-Code.
• Support governance initiatives by implementing technical security controls, preparing audit evidence, and contributing to security maturity reporting.

• 3–5 years' experience in Security Engineering, Security Operations, or a Senior Security Administration role.
• Strong knowledge of enterprise Identity and Access Management (IAM), endpoint security, and Microsoft cloud security.
• Hands‑on experience administering an enterprise Endpoint Detection and Response (EDR) platform.
• Experience working with Web Application Firewalls (WAF), CDN technologies, or Zero Trust access solutions.
• Strong Power Shell scripting skills and experience working with REST APIs.
• Practical experience with vulnerability management and remediation.
• Solid understanding of networking fundamentals, including TCP/IP, DNS, TLS, VPNs, and network segmentation.
• Grade 12 (Matric) with a relevant IT qualification or equivalent practical experience.

• Microsoft certifications such as SC-200, AZ-500, or SC-300.
• CompTIA Security+, CySA+, or equivalent security certifications.
• Experience with Cloud Security Posture Management (CSPM) tools.
• Exposure to Kubernetes security, container security, image scanning, and software supply chain security.
• Experience with SIEM platforms or log management solutions.
• Familiarity with email authentication technologies including SPF, DKIM, DMARC, and MTA-STS.
• Experience with Infrastructure-as-Code and workflow automation.
• Knowledge of security frameworks such as NIST CSF, CIS Controls, ISO 27001, and POPIA.

Don't miss out, apply today!