Cloud Security Specialist/Consultant
12 month contract
Remote
Maximum budget R120 000 per month
Executive Summary
Netsurit is seeking a contractor to fulfil a Cloud Security Specialist/Consultant role for one of our clients. The ideal candidate will have hands‑on expertise across major cloud platforms—particularly AWS and Microsoft Azure—to secure, govern, architect, and optimize enterprise cloud environments.
The role requires strong cloud security and cloud enablement capabilities, including solution architecture, governance, cybersecurity, risk management, and secure‑by‑design implementation. Experience in AI security and DevSecOps practices will be considered an advantage. The resource should be able to provide both strategic advisory services and hands‑on delivery within large‑scale enterprise environments.
Core Technical & Delivery Requirements
1. Cloud Expertise
- Deep hands-on expertise across Cloud platforms, including but not limited to Amazon web services, Microsoft Azure.
- Strong understanding of how Cloud technologies integrate across identity, collaboration, security, infrastructure, and data platforms.
- Ability to architect, optimize, and implement solutions leveraging the Cloud capabilities to support business, operational, compliance, and security objectives.
- Proven experience in cloud configuration, governance, administration, security hardening, and adoption enablement.
2. Security-Driven Delivery, Governance & Cybersecurity
- Strong understanding of enterprise security principles, cybersecurity frameworks, governance models, and secure-by-design methodologies.
- Ability to embed security controls, compliance requirements, identity governance, risk mitigation, and operational security into all solution designs.
- Experience in driving security maturity improvements across cloud, identity, collaboration, infrastructure, endpoint security, and data protection.
- Ability to identify vulnerabilities, security gaps, compliance concerns, and remediation opportunities.
3. AI Security
- Securing AI/ML systems and pipelines
- Familiarity with security frameworks such OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, Mitre ATLAS
- Managing risks such as:
- Model poisoning
- Data leakage
- Prompt injection
- Implementing governance and controls for AI usage
- Experience with cloud AI services such as Amazon Bedrock, Azure AI Foundry
4. DevSecOps
- Integrate security into CI/CD pipelines
- Use tooling such as:
- SAST / DAST / SCA
- Container security solutions
- Infrastructure-as-Code (IaC) scanning
- Promote shift-left security practices
5. Solution Design, Architecture & Implementation
- Demonstrated ability to assess business requirements, design scalable enterprise solutions, and lead end-to-end implementation.
- Capability to translate functional and technical requirements into secure, sustainable, and fit-for-purpose architectures.
- Experience across the full solution lifecycle including discovery, planning, architecture, build, testing, deployment, transition, support, optimization, and continuous improvement.
- Ability to provide both strategic solutioning and hands-on implementation support.
6. Cyber Risk Management
- Demonstrated experience in cyber risk identification, assessment, mitigation, monitoring, and reporting across enterprise environments.
- Ability to evaluate security threats, vulnerabilities, operational risks, and business impacts across cloud, infrastructure, endpoints, identity, and data environments.
- Experience implementing risk-based security controls, remediation strategies, and continuous monitoring processes.
- Strong understanding of cyber risk frameworks, governance models, compliance obligations, and audit readiness.
- Ability to align cyber risk management practices with broader enterprise risk, business continuity, disaster recovery, and security strategies.
- Experience in reducing organizational exposure through proactive risk assessments, threat prioritization, and security improvement initiatives.
Professional Competencies & Ways of Working
7. Methodical & Structured Approach
- Demonstrated ability to work in a disciplined, structured, and methodical manner.
- Strong planning, prioritization, documentation, governance, and execution capabilities.
- Ability to consistently follow delivery frameworks, security standards, and quality assurance processes.
8. Attention to Detail
- High degree of precision, diligence, and accuracy across analysis, architecture, implementation, validation, and documentation.
- Ability to proactively identify risks, dependencies, security concerns, configuration issues, compliance gaps, and operational impacts.
- Strong quality focus ensuring alignment with technical, regulatory, security, and business requirements.
9. Problem Solving & Strategic Thinking
- Ability to assess complex technical, operational, and cyber-related challenges and provide practical, scalable, and secure recommendations.
- Strong analytical and troubleshooting skills across infrastructure, cloud, identity, security, and risk domains.
- Ability to align technical and security decisions with long-term business resilience and operational strategy.
10. Collaboration & Stakeholder Engagement
- Strong communication and stakeholder engagement skills across business, architecture, operations, security, compliance, and risk teams.
- Ability to facilitate workshops, gather requirements, provide advisory guidance, and drive alignment across multiple workstreams.
- Experience working within enterprise, cross-functional, and governance-heavy environments.
11. Documentation, Governance & Knowledge Transfer
- Ability to produce high-quality architecture documents, implementation plans, risk registers, security documentation, operational runbooks, support documentation, and governance artefacts.
- Strong documentation discipline and attention to detail.
- Commitment to knowledge transfer, handover, operational sustainability, and support readiness.
12. Proven Experience & Certifications
- Resources must demonstrate proven experience delivering enterprise-scale cloud, AI, endpoint security, cyber risk management, and infrastructure transformation initiatives.
- Relevant certifications in Amazon Web Services, Microsoft Azure, Security, Cybersecurity, Risk Management, AI, or Enterprise Architecture will be considered advantageous.
