Cloud Security Specialist

• Google Cloud Platform (GCP)
• Cloud Workload Protection Platforms (CWPP)
• Cloud Infrastructure Entitlement Management (CIEM)
• Google Cloud IAM

Location: Gauteng

Positions Available: 5

Salary: Market-related

Employment type: 3 Year contract, hybrid

We are seeking experienced and technically proficient Cloud Security Specialists to design, implement, manage and continuously improve security controls across enterprise cloud computing environments.

The successful candidates will be responsible for protecting cloud infrastructure, applications, networks, identities and sensitive business information against cybersecurity threats, vulnerabilities and unauthorised access.

• Design, implement, configure and maintain security controls across enterprise cloud environments.
• Assess cloud infrastructure, applications and workloads to identify security risks and vulnerabilities.
• Develop and implement secure cloud configurations, policies and architecture standards.
• Apply cloud security best practices across Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS) environments.
• Support secure cloud infrastructure deployments, migrations and modernisation initiatives.
• Implement security controls aligned with Zero Trust principles and cloud security frameworks.
• Conduct cloud security architecture reviews and configuration assessments.
• Identify and remediate cloud misconfigurations, excessive permissions and infrastructure vulnerabilities.
• Collaborate with cloud architects, infrastructure engineers and cybersecurity teams to strengthen cloud security posture.

• Implement and maintain identity and access management controls across cloud platforms.
• Configure role-based access control (RBAC), least-privilege permissions and secure access policies.
• Implement multi-factor authentication (MFA), privileged access controls and conditional access mechanisms.
• Secure cloud service accounts, managed identities, API credentials and administrative access.
• Monitor and investigate suspicious authentication activity and unauthorised access attempts.
• Support identity federation and secure integration between cloud and on-premises environments.
• Conduct periodic access reviews and privileged access assessments.
• Implement secure authentication and authorisation practices across cloud services.

• Configure and maintain cloud firewalls, security groups and network access controls.
• Implement network segmentation, private connectivity and secure cloud networking architectures.
• Secure virtual networks, subnets, gateways and cloud-based infrastructure.
• Configure Web Application Firewalls (WAF), DDoS protection and network threat prevention controls.
• Monitor cloud network traffic and investigate suspicious activity.
• Implement secure connectivity between cloud environments and on-premises infrastructure.
• Support security hardening of virtual machines, containers and cloud workloads.
• Identify and remediate network security vulnerabilities and misconfigurations.

• Implement and maintain cloud security monitoring and threat detection solutions.
• Configure Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) capabilities.
• Monitor cloud security alerts, audit logs and threat intelligence.
• Investigate cloud security incidents and coordinate appropriate response activities.
• Support integration with Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) platforms.
• Conduct cloud vulnerability assessments and coordinate remediation activities.
• Analyse suspicious cloud…