Senior Cloud Engineer (AWS) - Cape Town at Progressive Edge

Role Overview

We are in search of an accomplished Senior Cloud Engineer with expertise in AWS technologies, specializing in the setup of cloud infrastructure and FortiGate firewalls. In this role, you will assume responsibility for the design, deployment, and upkeep of secure cloud infrastructure and networks. This role has a technical focus while encompassing managerial duties. You will collaborate with cross-functional teams to ensure the effective operation of the company's cloud environment. This requires your substantial expertise in cloud infrastructure, networking, and a dedication to adhering to security best practices.

Working Environment

While standard office hours are the norm, achieving results remains our top priority. Occasional application deployments may take place in the evening, and the time spent on these deployments will be accounted for separately from regular office hours. Our team thrives in a hybrid work setting, permitting both on-site and remote work. As such, proficiency in virtual team management and the capability to oversee deliverables in a virtual setting is pivotal for this role.

Key Qualities of the Ideal Candidate

We seek an intelligent, resolute, tech-savvy, outcome-focused professional. We require a highly knowledgeable and seasoned person to lead, advise, and implement best practices for all company systems.

Primary Responsibilities:

• Overseeing the comprehensive security of the corporate infrastructure.
• Crafting and executing cloud-based network, infrastructure, and firewall solutions.
• Leading and managing the cloud team along with external consultants.
• Establishing robust CI/CD pipelines.
• Configuring, administering, and troubleshooting firewalls to ensure optimum network security and performance.
• Collaborating with multifunctional teams, encompassing network engineers, system administrators, and developers, for the setup and maintenance of networks and security measures.
• Executing security assessments and audits to identify vulnerabilities and recommend remediation solutions.
• Developing and sustaining documentation, including network diagrams, configuration guides, and standard operating procedures related to networks and security.
• Staying updated with the latest AWS security advancements, FortiGate firewall technologies, and industry trends to provide recommendations for enhancing network security and performance.
• Participating in incident response activities and conducting root cause analyses for security-related incidents.
• Offering technical guidance and mentoring to junior team members regarding network and security configurations and best practices.

Requirements:

• Possessing a bachelor's degree in computer science, information technology, or a related field.
• Holding relevant certifications, such as AWS Certified Security Specialty or Fortinet NSE, would be advantageous.
• Demonstrating a track record in cloud network and security, particularly in AWS environments.
• Possessing in-depth knowledge of AWS services and features, including VPC, EC2, IAM, S3, CloudTrail, CloudWatch, AWS WAF, Route53, secrets manager, and AWS Security Hub.
• Exhibiting strong expertise in configuring and managing FortiGate firewalls, covering FortiOS, firewall policies, VPN configurations, and advanced threat protection features.
• Having a solid understanding of network protocols, security standards (e.g., SSL/TLS, IPsec), and networking principles (e.g., routing, subnetting, load balancing).
• Demonstrating experience with network security tools, including intrusion detection and prevention systems (IDS/IPS), web application firewalls (WAF), and vulnerability scanners.
• Proficiency in scripting and automation using languages like Python, PowerShell, or Bash to streamline security operations.
• Exceptional problem-solving abilities and the capability to analyze complex network security issues.
• Strong communication skills for effective collaboration with cross-functional teams and conveying technical information to both technical and non-technical stakeholders.
• The ability to thrive in a fast-paced environment and effectively manage multiple priorities concurrently.

Preferred Skills:

• Familiarity with cloud platforms and networks such as AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Knowledge of DevOps practices and tools, including infrastructure as code (IaC) through Terraform or AWS CloudFormation.
• Awareness of various security technologies and solutions, such as intrusion prevention systems (IPS), data loss prevention (DLP), and SIEM platforms.
• Experience with network monitoring and logging solutions, such as AWS CloudWatch, Elastic Stack, Splunk, etc.
• A background in banking security would be highly advantageous.
• Experience in configuring network peering would also be beneficial.