Cyber Security Engineer II at Capitec Bank

Purpose Statement

• Join us in building the next generation of secure, enterprise-grade platforms at Capitec. In this role, you’ll play a key part in protecting our systems, data and customers by designing and implementing modern Cyber Security solutions that operate at scale. You’ll work hands-on with cutting-edge technologies, driving the shift toward Zero Trust architecture and helping shape how secure access is delivered across a hybrid, cloud-first environment. From implementing and optimising solutions like Zscaler, to collaborating with engineering teams across the business, you’ll be at the forefront of securing a rapidly evolving digital landscape. This role is ideal for someone who enjoys solving complex security challenges, influencing architecture, and delivering robust, scalable solutions that make a real impact.

Experience
Minimum:

• 3–5 years’ experience in security engineering or a related technical role
• Proven experience designing and implementing enterprise-scale security solutions
• Exposure to multi-region or global deployments within complex environments
• Experience working in hybrid environments (on-premise and cloud)
• Hands-on experience with Zscaler technologies (ZIA and/or ZPA)
• Practical experience implementing or working within a Zero Trust security model, including VPN modernisation or migration
• Experience integrating security platforms with Azure AD / Entra ID, including SAML and OIDC authentication
• Exposure to SASE frameworks, identity-driven access and data protection (DLP)

Ideal:

• Experience configuring SSO, SCIM provisioning and Conditional Access policies
• Strong networking fundamentals (DNS, TCP/IP, routing, proxies, SSL/TLS)
• Experience working with AWS and/or Azure environments
• Hands-on experience troubleshooting production issues, including log analysis and traffic debugging (e.g. Zscaler Nanolog)
• The ability to collaborate across teams and simplify complex technical concepts

Qualifications (Minimum)

• A relevant tertiary qualification in Information Technology

Qualifications (Ideal or Preferred)
Knowledge
Key areas of knowledge include:

• IT systems processes (SDLC) and secure engineering practices
• DevOps principles and Infrastructure as Code (IaC)
• Cloud platforms (AWS, Azure) and modern application environments
• Identity and Access Management (IAM) concepts and technologies
• Security architecture, design patterns and compliance frameworks
• Current Cyber Security threats, trends and mitigation approaches

Strong working knowledge of:

• Zero Trust security principles and identity-led architecture
• SASE and secure access frameworks
• Authentication and authorisation protocols (SAML, OIDC, OAuth)
• Enterprise networking and traffic flow concepts
• Zscaler architecture, logging and traffic inspection

Skills

• Analytical Skills
• Communications Skills
• Consultation skills
• Planning, organising and coordination skills
• Problem solving skills