Cloud Security Specialist / Consultant

Cloud Security Specialist/Consultant

12 month contract

Remote

Maximum budget R120 000 per month

Executive Summary

Netsurit is seeking a contractor to fulfil a Cloud Security Specialist/Consultant role for one of our clients. The ideal candidate will have hands-on expertise across major cloud platforms-particularly AWS and Microsoft Azure-to secure, govern, architect, and optimize enterprise cloud environments.

The role requires strong cloud security and cloud enablement capabilities, including solution architecture, governance, cybersecurity, risk management, and secure-by-design implementation. Experience in AI security and DevSecOps practices will be considered an advantage. The resource should be able to provide both strategic advisory services and hands-on delivery within large-scale enterprise environments.

Core Technical & Delivery Requirements

1. Cloud Expertise

• Deep hands-on expertise across Cloud platforms, including but not limited to Amazon web services, Microsoft Azure.
• Strong understanding of how Cloud technologies integrate across identity, collaboration, security, infrastructure, and data platforms.
• Ability to architect, optimize, and implement solutions leveraging the Cloud capabilities to support business, operational, compliance, and security objectives.
• Proven experience in cloud configuration, governance, administration, security hardening, and adoption enablement.

2. Security-Driven Delivery, Governance & Cybersecurity

• Strong understanding of enterprise security principles, cybersecurity frameworks, governance models, and secure-by-design methodologies.
• Ability to embed security controls, compliance requirements, identity governance, risk mitigation, and operational security into all solution designs.
• Experience in driving security maturity improvements across cloud, identity, collaboration, infrastructure, endpoint security, and data protection.
• Ability to identify vulnerabilities, security gaps, compliance concerns, and remediation opportunities.

3. AI Security

• Securing AI/ML systems and pipelines
• Familiarity with security frameworks such OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, Mitre ATLAS
• Managing risks such as:
• Model poisoning
• Data leakage
• Prompt injection
• Implementing governance and controls for AI usage
• Experience with cloud AI services such as Amazon Bedrock, Azure AI Foundry

4. DevSecOps

• Integrate security into CI/CD pipelines
• Use tooling such as:
• SAST / DAST / SCA
• Container security solutions
• Infrastructure-as-Code (IaC) scanning
• Promote shift-left security practices

5. Solution Design, Architecture & Implementation

• Demonstrated ability to assess business requirements, design scalable enterprise solutions, and lead end-to-end implementation.
• Capability to translate functional and technical requirements into secure, sustainable, and fit-for-purpose architectures.
• Experience across the full solution lifecycle including discovery, planning, architecture, build, testing, deployment, transition, support, optimization, and continuous improvement.
• Ability to provide both strategic solutioning and hands-on implementation support.

6. Cyber Risk Management

• Demonstrated experience in cyber risk identification, assessment, mitigation, monitoring, and reporting across enterprise environments.
• Ability to evaluate security threats, vulnerabilities, operational risks, and business impacts across cloud, infrastructure, endpoints, identity, and data environments.
• Experience implementing risk-based security controls, remediation strategies, and continuous monitoring processes.
• Strong understanding of cyber risk frameworks, governance models, compliance obligations, and audit readiness.
• Ability to align cyber risk management practices with broader enterprise risk, business continuity, disaster recovery, and security strategies.
• Experience in reducing organizational exposure through proactive risk assessments, threat prioritization, and security improvement initiatives.

Professional Competencies & Ways of Working

7. Methodical & Structured Approach

• Demonstrated ability to work in a disciplined, structured, and methodical manner.
• Strong planning, prioritization, documentation, governance, and execution capabilities.
• Ability to consistently follow delivery frameworks, security standards, and quality assurance processes.

8. Attention to Detail

• High degree of precision, diligence, and accuracy across analysis, architecture, implementation, validation, and documentation.
• Ability to proactively identify risks, dependencies, security concerns, configuration issues, compliance gaps, and operational impacts.
• Strong quality focus ensuring alignment with technical, regulatory, security, and business requirements.

9. Problem Solving & Strategic Thinking

• Ability to assess complex technical, operational, and cyber-related challenges and provide practical, scalable, and secure recommendations.
• Strong analytical and troubleshooting skills across infrastructure, cloud, identity, security, and risk domains.
• Ability to align technical and security decisions with long-term business resilience and operational strategy.

10. Collaboration & Stakeholder Engagement

• Strong communication and stakeholder engagement skills across business, architecture, operations, security, compliance, and risk teams.
• Ability to facilitate workshops, gather requirements, provide advisory guidance, and drive alignment across multiple workstreams.
• Experience working within enterprise, cross-functional, and governance-heavy environments.

11. Documentation, Governance & Knowledge Transfer

• Ability to produce high-quality architecture documents, implementation plans, risk registers, security documentation, operational runbooks, support documentation, and governance artefacts.
• Strong documentation discipline and attention to detail.
• Commitment to knowledge transfer, handover, operational sustainability, and support readiness.

12. Proven Experience & Certifications

• Resources must demonstrate proven experience delivering enterprise-scale cloud, AI, endpoint security, cyber risk management, and infrastructure transformation initiatives.
• Relevant certifications in A mazon Web Services, Microsoft Azure, Security, Cybersecurity, Risk Management, AI, or Enterprise Architecture will be considered advantageous.