Security Engineer – Platform, DevSecOps & PKI

Introduction

12 Month Contract | JHB - Hybrid | A leading financial services client is seeking a Security Engineer – Platform, DevSecOps & PKI to strengthen security across enterprise platforms, cloud infrastructure, and software delivery pipelines. The successful candidate will be responsible for Public Key Infrastructure (PKI), Azure Key Vault, DevSecOps security, GitHub Advanced Security, automation governance, and AI/Copilot security controls to ensure secure development, platform resilience, and compliance with enterprise security standards.

Job Description

• Design, implement, and maintain enterprise Public Key Infrastructure (PKI), including certificate issuance, renewal, revocation, lifecycle management, and governance.

• Administer Azure Key Vault, including access policies, secrets management, key rotation, audit logging, and secure integration with enterprise applications and CI/CD pipelines.

• Configure and manage GitHub Advanced Security or equivalent platforms, including code scanning, secret scanning, dependency scanning, and vulnerability remediation workflows.

• Implement DevSecOps security controls within Azure DevOps and CI/CD pipelines, including security gates, policy validation, SAST, DAST, and Infrastructure as Code (IaC) security.

• Monitor certificate health, secrets rotation, DevSecOps security posture, and platform security controls to proactively identify and remediate security risks.

• Develop and maintain technical documentation, operational runbooks, standards, and procedures for platform security and DevSecOps operations.

• Collaborate with Cloud Security, Infrastructure, Application Development, and Cyber Security teams to embed security into enterprise platforms and software delivery processes.

• Contribute to security architecture reviews, continuous improvement initiatives, and the adoption of modern security engineering practices aligned with organisational governance and regulatory requirements.

Minimum Requirements

• Bachelor's Degree or Diploma in Information Technology, Computer Science, Cyber Security, Software Engineering, or a related field.

• Minimum 5 years' experience in Cyber Security, Platform Security, DevSecOps, or Cloud Security Engineering.

Strong hands-on experience with

• Microsoft Active Directory Certificate Services (AD CS) or Enterprise PKI

• Azure Key Vault administration and secrets management

• GitHub Advanced Security or equivalent DevSecOps security tools

• Azure DevOps and CI/CD pipeline security

• Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST)

• Infrastructure as Code (IaC) security and policy enforcement

• Microsoft Power Platform and Power Automate governance

• PowerShell, Azure CLI, and YAML pipeline scripting

• Experience implementing secure software development lifecycle (SSDLC) and DevSecOps best practices.

• Knowledge of certificate lifecycle management, encryption, key management, and secrets rotation.

• Experience integrating security controls into cloud-native development and deployment pipelines.

• Understanding of AI security, Microsoft Copilot governance, and secure automation practices.

• Strong analytical, troubleshooting, documentation, and stakeholder engagement skills.

Package & Remuneration

Salary Market Related