Microservices Security Specialist

Microservices Security Specialist

Location: Gauteng

Positions Available: 5

Salary: Market-related

Employment type: 3 Year contract, hybrid

We are seeking experienced and technically proficient Microservices Security Specialists to design, implement, manage and continuously improve security controls across enterprise microservices architectures, containerised applications and cloud-native environments. The successful candidates will be responsible for securing distributed applications, APIs, containers, Kubernetes environments and service-to-service communications against cybersecurity threats, vulnerabilities and unauthorised access. This role requires strong hands‑on expertise in microservices security, API protection, container security, Dev Sec Ops , secure application architecture and cloud-native security technologies.

The ideal candidates will have proven experience implementing security controls within enterprise microservices environments, with a strong understanding of secure software development, application security testing, identity management and Zero Trust security principles.

• Design, implement and maintain security controls across enterprise microservices architectures.
• Conduct security assessments of distributed applications and microservices environments.
• Identify and remediate security vulnerabilities within microservices, APIs and supporting infrastructure.
• Implement secure communication mechanisms between microservices and distributed applications.
• Apply Zero Trust principles to service-to-service authentication and authorisation.
• Support the development of secure microservices architecture standards and security design patterns.
• Conduct threat modelling and security architecture reviews for cloud‑native applications.
• Collaborate with software architects and development teams to implement security‑by‑design principles.
• Ensure microservices security controls align with organisational security policies and recognised industry standards.

• Implement and maintain security controls for RESTful APIs, GraphQL APIs and microservices endpoints.
• Configure secure API authentication and authorisation mechanisms.
• Implement OAuth 2.0, OpenID Connect, JSON Web Tokens (JWT) and mutual TLS (mTLS).
• Secure API gateways and manage API access policies.
• Identify and mitigate common API vulnerabilities, including those outlined in the OWASP API Security Top 10.
• Implement API rate limiting, request validation and traffic protection mechanisms.
• Secure service‑to‑service communications within distributed environments.
• Monitor API security events and investigate suspicious access patterns.
• Support API security testing and vulnerability remediation.

• Implement security controls across Docker and Kubernetes environments.
• Conduct container image vulnerability assessments and security configuration reviews.
• Secure container registries, runtime environments and orchestration platforms.
• Configure Kubernetes Role‑Based Access Control (RBAC), network policies and workload security controls.
• Implement secure secrets management and container authentication mechanisms.
• Monitor container and Kubernetes security events.
• Identify and remediate misconfigurations within containerised environments.
• Apply security hardening standards to Kubernetes clusters and workloads.
• Support container runtime protection and cloud‑native threat detection.
• Collaborate with infrastructure and Dev Ops teams to maintain secure container platforms.

• Integrate security controls into software development and CI/CD pipelines.
• Implement automated application security testing…