Microservices Security Specialist

Location: Centurion, Gauteng (provisional - to be confirmed)
Positions Available: 5
Salary: Market-related
Employment Type: To be confirmed

We are seeking experienced and technically proficient Microservices Security Specialists to design, implement, manage and continuously improve security controls across enterprise microservices architectures, containerised applications and cloud-native environments.

The successful candidates will be responsible for securing distributed applications, APIs, containers, Kubernetes environments and service-to-service communications against cybersecurity threats, vulnerabilities and unauthorised access.

This role requires strong hands-on expertise in microservices security, API protection, container security, Dev Sec Ops , secure application architecture and cloud-native security technologies.

The ideal candidates will have proven experience implementing security controls within enterprise microservices environments, with a strong understanding of secure software development, application security testing, identity management and Zero Trust security principles.

Microservices Security Architecture and Implementation

• Design, implement and maintain security controls across enterprise microservices architectures.
• Conduct security assessments of distributed applications and microservices environments.
• Identify and remediate security vulnerabilities within microservices, APIs and supporting infrastructure.
• Implement secure communication mechanisms between microservices and distributed applications.
• Apply Zero Trust principles to service-to-service authentication and authorisation.
• Support the development of secure microservices architecture standards and security design patterns.
• Conduct threat modelling and security architecture reviews for cloud-native applications.
• Collaborate with software architects and development teams to implement security-by-design principles.
• Ensure microservices security controls align with organisational security policies and recognised industry standards.

API Security and Service-to-Service Protection

• Implement and maintain security controls for RESTful APIs, GraphQL APIs and microservices endpoints.
• Configure secure API authentication and authorisation mechanisms.
• Implement OAuth 2.0, OpenID Connect, JSON Web Tokens (JWT) and mutual TLS (mTLS).
• Secure API gateways and manage API access policies.
• Identify and mitigate common API vulnerabilities, including those outlined in the OWASP API Security Top 10.
• Implement API rate limiting, request validation and traffic protection mechanisms.
• Secure service-to-service communications within distributed environments.
• Monitor API security events and investigate suspicious access patterns.
• Support API security testing and vulnerability remediation.

Container and Kubernetes Security

• Implement security controls across Docker and Kubernetes environments.
• Conduct container image vulnerability assessments and security configuration reviews.
• Secure container registries, runtime environments and orchestration platforms.
• Configure Kubernetes Role-Based Access Control (RBAC), network policies and workload security controls.
• Implement secure secrets management and container authentication mechanisms.
• Monitor container and Kubernetes security events.
• Identify and remediate misconfigurations within containerised environments.
• Apply security hardening standards to Kubernetes clusters and workloads.
• Support container runtime protection and cloud-native threat detection.
• Collaborate with infrastructure and Dev Ops teams to maintain secure container platforms.

Dev Sec Ops  and Secure Software Development

• Integrate security controls into software development and CI/CD pipelines.
• Im…