Cloud Security Specialist

Location: Centurion, Gauteng (provisional – to be confirmed)
Positions Available: 5
Salary: Market-related
Employment Type: To be confirmed

We are seeking experienced and technically proficient Cloud Security Specialists to design, implement, manage and continuously improve security controls across enterprise cloud computing environments.

The successful candidates will be responsible for protecting cloud infrastructure, applications, networks, identities and sensitive business information against cybersecurity threats, vulnerabilities and unauthorised access.

This role requires strong hands‑on expertise in cloud security architecture, cloud infrastructure protection, identity and access management, security monitoring, vulnerability management and regulatory compliance.

The ideal candidates will have proven experience securing cloud environments across platforms such as Microsoft Azure, Amazon Web Services (AWS) and Google Cloud Platform (GCP), with the ability to implement effective security controls within complex enterprise and hybrid cloud infrastructures.

Cloud Security Architecture and Implementation

• Design, implement, configure and maintain security controls across enterprise cloud environments.
• Assess cloud infrastructure, applications and workloads to identify security risks and vulnerabilities.
• Develop and implement secure cloud configurations, policies and architecture standards.
• Apply cloud security best practices across Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS) environments.
• Support secure cloud infrastructure deployments, migrations and modernisation initiatives.
• Implement security controls aligned with Zero Trust principles and cloud security frameworks.
• Conduct cloud security architecture reviews and configuration assessments.
• Identify and remediate cloud misconfigurations, excessive permissions and infrastructure vulnerabilities.
• Collaborate with cloud architects, infrastructure engineers and cybersecurity teams to strengthen cloud security posture.

Cloud Identity and Access Security

• Implement and maintain identity and access management controls across cloud platforms.
• Configure role‑based access control (RBAC), least‑privilege permissions and secure access policies.
• Implement multi‑factor authentication (MFA), privileged access controls and conditional access mechanisms.
• Secure cloud service accounts, managed identities, API credentials and administrative access.
• Monitor and investigate suspicious authentication activity and unauthorised access attempts.
• Support identity federation and secure integration between cloud and on‑premises environments.
• Conduct periodic access reviews and privileged access assessments.
• Implement secure authentication and authorisation practices across cloud services.

Cloud Network and Infrastructure Security

• Configure and maintain cloud firewalls, security groups and network access controls.
• Implement network segmentation, private connectivity and secure cloud networking architectures.
• Secure virtual networks, subnets, gateways and cloud‑based infrastructure.
• Configure Web Application Firewalls (WAF), DDoS protection and network threat prevention controls.
• Monitor cloud network traffic and investigate suspicious activity.
• Implement secure connectivity between cloud environments and on‑premises infrastructure.
• Support security hardening of virtual machines, containers and cloud workloads.
• Identify and remediate network security vulnerabilities and misconfigurations.

Cloud Threat Detection and Security Monitoring

• Implement and maintain cloud security monitoring and threat detection solutions.
• Configure Cloud Security Posture Management (CSPM) and Cloud Workload…