Job Title: DevSecOps Manager Location: Midrand - Hybrid Duration: 12 months Role Summary

• This senior role drives secure, automated, and compliant cloud-native delivery while managing monitoring/alerting, penetration testing programs, vulnerability management, and broader cybersecurity initiatives.
• You will lead a team of DevSecOps engineers, foster a security by design culture, and enable the business to innovate rapidly in a regulated South African and global context

Key Responsibilities DevOps

• Provision and manage cloud infrastructure as code (Terraform, Ansible,

CloudFormation) on AWS, Azure, or GCP.

• Implement containerization and orchestration (Docker, Kubernetes, Helm) for

consistent environments.

• Automate repetitive tasks, reduce toil, and improve developer experience through self

service tools

• Collaborate with software developers, QA, and security teams to embed DevOps

practices (shift-left security, automated testing).

• Perform root-cause analysis on production issues, implement fixes, and drive

continuous improvement.

• Participate in on-call rotations and incident response.

Leadership & Team Management

• Lead, mentor, and develop a high-performing team of DevOps, SRE, and security

engineers.

• Mentor junior engineers and promote a culture of automation and shared ownership
• Champion DevSecOps practices and culture across Development, Operations, Security, and Compliance teams.
• Define and track KPIs: vulnerability remediation time, security gate pass rate, MTTR, deployment frequency, and alert reduction.

AWS Cloud Environment Management & Security

• Design, implement, and govern secure AWS architectures (multi-account landing

zones via Control Tower, VPCs, EKS, Lambda, RDS, etc.) using Infrastructure as

Code (Terraform, AWS CloudFormation, CDK).

• Enforce least-privilege IAM, encryption (KMS), secrets management, network

security, and data sovereignty for POPIA compliance.

• Leverage AWS-native services: Amazon Inspector, GuardDuty, Security Hub, Config,

IAM Access Analyzer, and AWS Security Agent for automated security.

• Build and Secure CI/CD Pipelines & Automation
• Build and evolve secure CI/CD pipelines (AWS CodePipeline, GitLab), optimizing

workflows to automate testing, builds, and deployments with security gates (SAST,

• DAST, SCA, IaC, secret, and container scanning)

Monitoring, Alerting & Observability

• Architect comprehensive monitoring and alerting using AWS CloudWatch, GuardDuty,

X-Ray, EventBridge, and SIEM integrations.

• Design intelligent alerting with automated routing, escalation, noise reduction, and

rapid incident response processes (critical for Cybercrimes Act obligations).

• Set up monitoring, logging, and alerting to maintain high availability and performance.
• Ensure 24/7 visibility into security posture, performance, and compliance.

Cybersecurity, Penetration Testing & Risk Management

• Lead and coordinate regular penetration testing
• Oversee vulnerability management: scanning, risk-based prioritization, remediation

tracking, and exception processes.

• Conduct threat modelling, runtime protection, supply-chain security, zero-trust

implementation, and incident response.

• Ensure appropriate, reasonable technical and organisational measures for POPIA

Condition 7 (Security Safeguards), including encryption, access controls, logging,

and regular testing.

Compliance, Governance & Continuous Improvement

• Support audits and evidence collection
• Collaborate on release management with security go/no-go decisions.
• Stay current with AWS security updates, emerging threats, and South African

regulatory changes.

• Drive maturity of DevSecOps practices and conduct regular AWS Well-Architected
• Framework reviews (Security Pillar).

Qualifications & Experience

• Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering

Experience

• 8–10+ years in DevOps, Cloud Engineering, or Cybersecurity.
• 3–5+ years in technical leadership or management roles.
• Strong hands-on AWS experience
• Proven track record in regulated environments with POPIA/GDPR compliance.

Certifications

• AWS Certified Security – Specialty or AWS Certified DevOps Engineer – Professional.
• CISSP, CISM, CCSP, or CISA.

Essential Skills & Competencies Technical:

• Deep expertise in AWS.
• Proficiency with security tools (Inspector, GuardDuty, SAST/DAST like SonarQube,
• SIEM).
• Proficiency in at least one scripting language (Python, Bash, PowerShell).
• Strong experience with Linux, networking, and Git.
• Hands-on expertise with CI/CD, IaC, Docker/Kubernetes, and at least one major
• cloud platform (AWS/Azure/GCP certifications preferred).
• Penetration testing methodologies and vulnerability management.
• Knowledge of monitoring, observability, and infrastructure security.

Leadership & Soft Skills:

• Excellent stakeholder communication (technical to executive level).
• Ability to drive cultural change in hybrid/fast-paced environments.
• Strong problem-solving, metrics-driven approach, and collaboration skills.