Specialist: Information Security x2 (FTC)-(Cloud Security Engineer) at The South African Revenue Service (SARS)

Job Purpose

• To provide expert advice and support on Information Security strategies in order to achieve business objectives.

Education and Experience

Minimum Qualification & Experience Required

• Bachelor's Degree / Advanced Diploma (NQF 7) in Information Security, Computer Science, IT, or related field AND 5-7 years' experience in IT Security or Cloud Security, of which 2-3 years hands-on cloud security engineering role.

ALTERNATIVE #

• Senior Certificate (NQF 4) AND 10 years IT Security, including practical experience securing cloud platforms of which 2-3 years hands-on cloud security engineering role.

Minimum Functional Requirements

• Strong understanding of cloud security concepts, shared responsibility models, and secure cloud architectures.
• Experience securing cloud identities, networks, workloads, and data
• Knowledge of security monitoring, logging, and incident response in cloud environments
• Familiarity with regulatory compliance, risk management, and IT governance principles
•  Ability to analyse security gaps and recommend practical, risk-based solutions

Job Outputs:

Process

• To proactively protect SARS cloud environments by identifying security risks, implementing preventative and detective controls, and monitoring for suspicious or unauthorised activities.
• Design, implement, and maintain cloud security controls across IaaS, PaaS, and SaaS environments.
• Secure cloud identities and access using least-privilege principles and strong authentication mechanisms.
•  Ensure Azure compute and platform services are securely configured in line with defence‑in‑depth principles.
• Configure and monitor cloud security posture management and threat detection capabilities.
•  Support secure cloud network designs, including segmentation, firewalling, and secure connectivity.
•  Review cloud architectures, configurations, and infrastructure-as-code templates for security compliance.
•  Investigate, analyse, and report on cloud-related security incidents and suspicious activities.
•  Contribute to the development of cloud security standards, policies, and technical guidelines.
•  Collaborate with infrastructure, application, and cyber security teams to embed security by design.
• Develop and maintain productive working relationships with peers, SARS role players and third parties to achieve predefined objectives.
• Execute specialist input through investigation &opportunities within the product process including risk concern.
• Provide specialist input through the investigation of opportunities for operational and process product and risk optimisation.
• Correctly apply policies, practices, standards, procedures and legislation in the delivery of work outputs.
• Accumulate information to review work progress that provides input to reporting, decision making and the identification of improvement opportunities.
• Apply practical and applied knowledge and act authoritatively on methods, systems and procedures to identify trends and potential risks.
• Communication of situational interpretation and judgement of work outputs and queries in area of specialisation.
• Draw on own knowledge and experience to diagnose symptoms, causes and possible effects in order to solve emerging problems.
• Initiate process and procedural change, implement the change and provide guidelines and support related to new requirements as a result of the change.
• Plan for value-added process improvements, initiatives and services to deliver on operational strategy and objectives.

Governance

• Ensure that completed work adhere to relevant policies, procedures, governance and legislative requirements and report on deviations & discrepancies.
• Implement and provide input into the development of governance, compliance, integrity and ethics processes within area of specialisation.

People

• Develop and maintain productive working relationships with peers and team members to achieve predefined objectives.
• Search for, integrate and share new knowledge attained through formal and informal learning opportunities in the execution of your job.

Finance

• Adhere to organisational policies and procedures to ensure cost effectiveness and reduction of financial costs.

Client

• Contribute to a culture of service excellence, which builds positive relationships and provides opportunity for feedback and exceptional service.
• Provide authoritative, specialist services, expertise and advice to internal and external stakeholders.

Behavioural competencies

• Fairness and Transparency
• Analytical Thinking
• Accountability
• Conceptual Ability
• Organisational Awareness
• Respect
• Trust
• Problem Solving and Analysis
• Honesty and Integrity
• Customer Service
• Attention to Detail
• Commitment to Continuous Learning
• Building Sustainability

Technical competencies

• System Thinking
• Computer Literacy
• Functional Policies and Procedures
• Business IT Systems
• IT Strategy and Planning
• Reporting
• Information Security Management
• Business Knowledge
• Efficiency improvement

Deadline:19th April, 2026