Operations

Rigger

Sappi·Mpumalanga, south-africa·Full Time·Internship
OperationsFull TimeInternship
-

We are hiring!

  • At Sappi, we are a leading global provider with a reputation for delivering high-quality sustainable Woodfibre products and solutions for the global markets. We lead through our values centred around safety, integrity, courage, making smart decisions which we execute with speed. We are seeking unique people who believe in fostering a diverse and inclusive and safe environment.
  • We are on the lookout for a Rigger to provide a specialist service to the customer on rigging and inspection of lifting equipment on a daily basis and shift basis throughout the mill according to safe engineering standards.

As a Rigger, you will be responsible for:

Ensure Health, Safety, Environmental Compliance

  • Create a safe work environment by identifying and managing risks associated with the task to be performed.
  • Report incidents and accidents immediately to the Foreman and participate in incident investigations as required.
  • Take out work permits and perform Job Safety Analysis (JSA) risk assessments in accordance with Sappi policy.
  • Maintain a high level of good housekeeping and ensure the correct selection and use of PPE at all times.
  • Obtain and maintain the required licenses for operating various mobile equipment across the mill.

Work Scheduled & Planned Maintenance

  • Liaise with plant engineers, foremen, and production personnel to scope work and advise on rigging requirements.
  • Assist production personnel with the isolation process where required when taking out work permits.
  • Perform specialised rigging tasks by assessing job requirements and calculating safe lifting angles, radii, and loads for lifting equipment and mobile cranes.
  • Conduct legal inspections on lifting equipment, complete statutory registers, and declare equipment fit or unfit for use.
  • Drive mobile cranes and machinery when required or in the absence of designated crane drivers.
  • Support shift artisans with breakdown repairs and opportunity maintenance, actively sharing knowledge across teams.

Effective Communication

  • Maintain clear communication with artisans and crane drivers during active rigging operations and lifting equipment maneuvers.
  • Attend maintenance morning meetings and promptly report any plant defects, abnormalities, or safety risks to the Foreman.

What are we looking for?

  • Grade 12 or N3 qualification with Mathematics and Physical Science.
  • Recognized Trade Test Certificate as a Rigger.
  • Minimum of 2 years post-apprenticeship experience in a heavy engineering environment.
  • Valid Driver's License.

What's in it for you?

  • Opportunity to work within a global organisation that continues to thrive in a rapidly changing world even after 80 years of existence.
  • Learning and development programmes to fast-track your career within Sappi.
  • Opportunities to travel.
  • Market leading leave benefits.
  • Employee wellbeing benefits.

Key skills

Matric

At a glance

Company

Sappi

Location

Mpumalanga, south-africa

Employment

Full Time

Experience

Valid until

Not specified

Created

September 12, 2026

More opportunities

Similar roles you might like

Senior Site Reliability Engineer

FutureFit AI

Remote, south-africa

Full Time

Position Specifications Attribute Details Position Title Senior Site Reliability Engineer (RHEL Specialist) Primary Location Remote Minimum Experience 5+ Years in Systems Engineering, DevOps, or SRE roles Reporting Structure Reports to the Head of Infrastructure & Platform Engineering Language Requirements Portuguese and English 1.3 Role Summary The Senior Site Reliability Engineer (RHEL Specialist) is a critical technical leadership role responsible for ensuring that our production environments are resilient, performant, and highly automated. Unlike traditional systems administration, this role treats infrastructure as a software problem. You will be the primary custodian of our Red Hat Enterprise Linux (RHEL) ecosystem, applying advanced engineering practices to manage thousands of nodes across on-premise virtualization and public cloud platforms. Your mission is to bridge the gap between software development and systems operations by designing self-healing systems and robust Ansible-based automation frameworks. You will be expected to proactively identify system inefficiencies, optimize kernel performance, and architect CI/CD pipelines that empower development teams while maintaining strict production stability. Core Mission Statement: To engineer a world-class RHEL environment where manual intervention is the exception, not the rule. Through advanced automation and deep observability, you will ensure our services achieve 99.99% availability while enabling rapid, low-risk software delivery. 1.4 Ideal Candidate Profile The ideal candidate is a proactive problem-solver with a "software-first" approach to infrastructure. We are looking for an individual who: Possesses a deep-seated expertise in the RHEL kernel, system internals, and performance tuning. Views Ansible and Python as their primary tools for managing complexity at scale. Demonstrates a proven track record of managing Docker and Kubernetes workloads in high-traffic production settings. Is naturally curious and proactive, often identifying and resolving system bottlenecks before they trigger an alert. Thrives in a collaborative DevOps culture and is comfortable navigating the complexities of hybrid-cloud environments (AWS, Azure, or GCP). 2. Key Responsibilities The Senior Site Reliability Engineer (RHEL Specialist) is responsible for the availability, latency, performance, efficiency, change management, monitoring, emergency response, and capacity planning of our enterprise Linux services. This role demands a unique blend of systems engineering expertise and software development skills to build and run large-scale, distributed, fault-tolerant systems. 2.1 Automation & Infrastructure Orchestration Ansible Framework Design: Architect, implement, and maintain enterprise-grade automation solutions using Ansible for our Red Hat Enterprise Linux (RHEL) fleet. This includes developing custom Ansible roles, modules, and playbooks to automate system provisioning, configuration management, and patching. Standard Operating Environment (SOE): Maintain and evolve the RHEL SOE across hybrid-cloud environments, ensuring consistency between on-premise virtualization (VMware/KVM) and public cloud instances. Infrastructure as Code (IaC): Transform manual infrastructure workflows into automated code-based processes, ensuring that every component of the RHEL environment is version-controlled and reproducible. 2.2 Development & Toil Reduction Scripting & Tooling: Develop advanced scripts in Python and Bash to automate repetitive operational tasks (toil). You will be expected to build internal tools that enhance the productivity of the entire engineering organization. System Integration: Write code to integrate infrastructure components with internal APIs, monitoring tools, and service management platforms to create seamless, end-to-end automated workflows. Kernel & OS Optimization: Leverage deep Linux knowledge to tune system parameters and develop automated checks for system health and performance bottlenecks. 2.3 CI/CD & Release Engineering Pipeline Construction: Build and optimize robust CI/CD pipelines using Jenkins or GitLab CI to automate the testing and deployment of infrastructure code and application workloads. Deployment Strategies: Implement modern deployment methodologies such as Blue-Green or Canary releases to minimize downtime and risk during system updates. Artifact Management: Oversee the lifecycle of container images and software packages, ensuring they are securely built, scanned, and distributed across the RHEL landscape. Focus on Proactive Optimization: A primary accountability of this role is the continuous identification of system inefficiencies. You will not just react to failures; you will actively hunt for potential failure modes, performance regressions, and architectural weaknesses, proposing and implementing automated fixes before they impact the business. 2.4 Service Level Management & Observability Defining SLOs/SLIs: Collaborate with product and development teams to define meaningful Service Level Indicators (SLIs) and Service Level Objectives (SLOs) that accurately represent the user experience. Monitoring & Alerting: Design and implement comprehensive monitoring frameworks that provide deep visibility into RHEL system health and application performance, ensuring alerts are actionable and signal-rich. Capacity Planning: Utilize performance data to forecast future resource requirements and automate scaling actions across the hybrid-cloud estate. 2.5 Incident Response & Reliability Leadership Incident Management: Participate in a tiered on-call rotation and lead the response for critical production incidents. You will be responsible for stabilizing systems under pressure while maintaining clear communication with stakeholders. Post-Mortem Analysis: Conduct blameless post-mortems to identify the root causes of incidents and drive the implementation of automated preventative measures. SRE Evangelism: Act as a champion for reliability engineering. Mentor other engineers on SRE best practices, RHEL optimization, and the cultural shift toward "everything-as-code." 3. Required Technical Skills & Qualifications The Senior Site Reliability Engineer (RHEL Specialist) must possess a deep technical foundation in enterprise Linux systems and modern DevOps methodologies. We are seeking a candidate who has transitioned from traditional systems administration to an automation-first engineering mindset, capable of managing complex, distributed environments. Mandatory Requirement: A minimum of 5 years of professional experience in Site Reliability Engineering, DevOps, or Senior Linux Systems Administration is required. Candidates must demonstrate high-level proficiency in managing production RHEL environments at scale. 3.1 Enterprise Linux Mastery (RHEL Focus) As our primary operating system environment, deep expertise in Red Hat Enterprise Linux is non-negotiable. Requirements include: System Administration: Expert knowledge of RHEL 7, 8, and 9 internals, including LVM, systemd, GRUB, and advanced storage management. Performance Tuning: Proficiency in kernel-level tuning, using tools such as tuned, top, iostat, vmstat, and perf to optimize workloads. Security Hardening: Advanced implementation of SELinux (policy management, context troubleshooting) and system security protocols (Firewalld, IPTables, OpenSCAP). Lifecycle Management: Proven experience with Red Hat Satellite, including Capsule management, Content Views, and automated patch scheduling via Subscription Manager. 3.2 Automation & Configuration Management Ansible Expertise: Expert-level proficiency with Ansible Core and Ansible Automation Platform (Tower). This includes architecting complex roles, utilizing Jinja2 templating, managing dynamic inventories, and developing custom Ansible modules to meet specific infrastructure needs. Infrastructure as Code (IaC): Strong familiarity with managing stateful infrastructure via code, focusing on idempotency and drift detection. 3.3 Programming & Scripting The ability to read, write, and debug code is essential for eliminating toil and integrating systems. Python: Strong proficiency for developing automation tools, API integrations, and monitoring scripts. Bash: Expert shell scripting skills for system-level automation, boot-time scripts, and complex command-line tasks. 3.4 Cloud, Containers & Virtualization Category Technical Requirements Containerization Hands-on experience with Docker/Podman and enterprise orchestration via Kubernetes or Red Hat OpenShift. Virtualization Experience managing RHEL workloads on VMware vSphere and/or KVM (libvirt/QEMU) environments. Cloud Platforms Practical experience managing Linux infrastructure in at least one major cloud provider: AWS, Azure, or GCP. CI/CD Tooling Proficiency in building and managing deployment pipelines using Jenkins or GitLab CI. 3.5 Certifications & Education Education: Bachelors degree in Computer Science, Information Technology, or a related field (or equivalent professional experience). Preferred Certifications: Red Hat Certified Engineer (RHCE), Red Hat Certified Architect (RHCA), or Certified Kubernetes Administrator (CKA) are highly desirable and will be given preference. Professional Knowledge: Familiarity with SRE principles (based on the Google SRE workbook) and ITIL frameworks. 4. Desired Soft Skills While technical proficiency in RHEL and automation is paramount, the effectiveness of a Site Reliability Engineer is heavily dependent on their ability to navigate complex organizational dynamics and maintain a calm, analytical mindset during system failures. We are seeking a candidate who embodies the cultural tenets of SRE: a blend of high empathy, radical transparency, and a relentless drive for efficiency. 4.1 Proactive Problem-Solving & Strategic Thinking The ideal candidate does not wait for an alert to trigger before acting. You should possess the ability to look at complex systems holistically and identify latent defects or architectural weaknesses. We value engineers who think strategically about "toil" and can justify automation efforts based on long-term reliability gains rather than short-term fixes. 4.2 Radical Ownership & Accountability Sense of Ownership: You treat the production environment as your own, taking personal pride in its uptime and performance. Accountability: When systems fail, you focus on remediation and long-term prevention. You are comfortable standing by your technical decisions while remaining open to constructive feedback during blameless post-mortems. 4.3 Communication & Cross-Functional Collaboration SREs sit at the intersection of Development and Operations. Success in this role requires: Bridging the Gap: The ability to translate deep technical RHEL issues into business impact for stakeholders and actionable requirements for developers. Active Listening: Working closely with software engineers to understand their deployment pain points and designing automation that solves real-world development hurdles. Documentation: A commitment to maintaining clear, concise, and accurate runbooks and architectural diagrams to ensure knowledge is shared across the team. The SRE Mindset: We are looking for an individual who remains "calm under fire." The ability to maintain focus and lead a technical team through a high-pressure P1 incident is just as important as the code you write. 4.4 Methodical Troubleshooting & Crisis Management When faced with an "unknown-unknown" error, you employ a scientific and methodical approach. You should be able to: Isolate variables systematically to identify root causes in distributed systems. Utilize observability data (logs, metrics, traces) to build a narrative of system failure. Prioritize restoration of service over finding the "perfect" fix during an active outage. 4.5 Passion for Continuous Improvement & Learning The technology landscapeespecially within the Red Hat and Cloud Native ecosystemsis constantly evolving. We value candidates who: Are self-driven learners who keep pace with new Ansible modules, RHEL features, and SRE methodologies. Actively seek out ways to improve not just the systems, but also the team's internal processes and culture. Enjoy mentoring junior engineers and fostering an environment of technical excellence. 5. Reporting Structure The Senior Site Reliability Engineer (RHEL Specialist) occupies a pivotal position within the technology organization, serving as a bridge between core infrastructure management and modern software delivery. This role is designed for a technical leader who can influence architectural decisions while remaining deeply embedded in daily operational excellence. 5.1 Direct Reporting Line This position reports directly to the Head of Site Reliability Engineering (or the Director of Cloud & Platform Infrastructure). This reporting line is structured to provide the SRE team with the necessary mandate to prioritize reliability, automation, and performance tuning over feature velocity when system stability is at risk. Regular engagements with leadership will involve: Weekly strategic updates on infrastructure health and Error Budget consumption. Participation in quarterly planning sessions to align automation roadmaps with business objectives. Direct involvement in "Post-Mortem" reviews with executive stakeholders for high-priority incidents. 5.2 Team Environment & The Squad Model While reporting into the centralized SRE leadership, the candidate will function within a cross-functional "Squad" or "Chapter" environment. This model emphasizes high-touch collaboration across various technical disciplines: Software Development Teams: Collaborating as a "Reliability Consultant" to help developers architect RHEL-friendly applications, optimize container workloads, and refine deployment strategies. Quality Assurance (QA): Working together to integrate automated reliability testing and performance benchmarking into the CI/CD pipeline. Cybersecurity: Partnering with the SecOps team to automate RHEL hardening, manage SELinux policies, and ensure rapid, automated vulnerability patching. Cloud Architects: Assisting in the design of hybrid-cloud solutions that ensure RHEL workloads move seamlessly between on-premise virtualization and public cloud platforms. Collaboration Philosophy: Our organization operates on a "You Build It, You Run It" (with SRE support) philosophy. As a Senior SRE, you are not a siloed gatekeeper; you are an enabler who empowers other teams through the creation of self-service automation and reliable platform abstractions. 5.3 Internal & External Stakeholders Stakeholder Group Nature of Interaction Junior/Mid-level SREs Mentorship, code review of Ansible playbooks, and guiding technical troubleshooting. Product Owners Negotiating SLOs and providing data-driven insights on how system reliability impacts user experience. External Partners (e.g., Red Hat) Managing technical support escalations and staying informed on upcoming RHEL roadmap features. Originally posted on Himalayas

a day ago

Product Security Engineer

FutureFit AI

Remote, south-africa

Full Time

1. Job Summary and Overview At our organization, we believe that security is the bedrock of innovation. Our mission is to provide world-class digital services that empower our users while maintaining the highest standards of digital trust and data integrity. We foster a culture of technical excellence, where engineers are encouraged to be proactive, inquisitive, and dedicated to the craft of building resilient systems. As we continue to expand our footprint in the tech ecosystem, we are looking for a specialist who shares our passion for open-source technology and robust security architectures. 1.1 Position Specifications Category Details Position Title Product Security Engineer (RHEL Specialist) Location Remote Experience Level Senior (Minimum 5+ Years Professional Experience) Language Requirements Portuguese and English Employment Type Permanent / Full-Time 1.2 Role Summary The Product Security Engineer (RHEL Specialist) is a critical technical position focused on the intersection of infrastructure stability and proactive security posture. The core purpose of this role is to embed automated security controls, hardening standards, and DevSecOps best practices throughout the entire product lifecycle, with a specialized focus on the Red Hat Enterprise Linux (RHEL) ecosystem. You will be the primary architect of security automation, ensuring that our RHEL-based infrastructure is resilient against modern threats while maintaining high availability and operational efficiency. Role Mission: To transform traditional security "gates" into automated security "guardrails" within our Linux environment. You will be tasked with identifying system inefficiencies, automating vulnerability remediation, and ensuring that security is a seamless component of our CI/CD pipelines and virtualization stacks. The ideal candidate is not just a security enthusiast but a seasoned Linux practitioner who understands the nuances of system internals. You will move beyond manual checklists, leveraging Ansible for configuration management and Python/Bash for custom security tooling. Whether managing workloads on-premise through VMware/KVM or across AWS, Azure, or GCP, your objective remains consistent: to provide a secure, standardized, and self-healing platform that serves as the backbone for our product offerings. 1.3 Core Objectives and Expectations Infrastructure Hardening: Design and enforce automated RHEL hardening standards across all environments using CIS benchmarks or similar frameworks. Security Automation: Implement "Security as Code" principles to reduce manual toil and human error in security configurations. Proactive System Optimization: Actively hunt for system inefficiencies and performance bottlenecks, providing automated resolutions before they impact product delivery. Cloud and Container Security: Secure our transition to cloud-native architectures by ensuring Docker and Kubernetes environments meet enterprise security requirements. Continuous Integration: Integrate security scanning and compliance auditing directly into our Jenkins and GitLab CI pipelines. As a senior member of the technical staff, you will be expected to work with a high degree of autonomy, collaborating with both DevOps and Software Development teams to foster a culture of shared responsibility for security outcomes. 2. Key Responsibilities The Product Security Engineer (RHEL Specialist) is tasked with safeguarding the integrity, availability, and confidentiality of our product ecosystem. This role functions at the critical intersection of system engineering and cybersecurity, requiring a hands-on approach to building resilient infrastructure. The incumbent is expected to move beyond reactive security measures, instead architecting automated, self-healing systems that adhere to global security standards. 2.1 Security Automation & Hardening The primary accountability in this area is the conversion of complex security requirements into executable, version-controlled code. This ensures a consistent security posture across all environments, from development to production. Ansible Orchestration: Design, develop, and maintain a library of Ansible playbooks and roles specifically focused on Red Hat Enterprise Linux (RHEL) security compliance (e.g., CIS Benchmarks, STIGs). Automated Patch Management: Implement and manage automated patching lifecycles for RHEL systems to ensure timely remediation of Critical and High-severity vulnerabilities with minimal service disruption. Configuration as Code: Enforce system state consistency by automating the deployment of security configurations, including SELinux policies, SSH hardening, and kernel parameter tuning (sysctl). Identity & Access Management (IAM): Automate the provisioning and auditing of privileged access, ensuring the Principle of Least Privilege is enforced across all Linux-based product components. Compliance Drift Detection: Develop automated monitoring solutions to detect and remediate configuration drift from established security baselines in real-time. 2.2 Secure CI/CD Pipeline Integration This role serves as a key architect in our DevSecOps transformation, ensuring that security is not a final checkpoint but a continuous process embedded within our software delivery pipelines. Security Tooling Integration: Embed and configure Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) tools within Jenkins and GitLab CI pipelines. Automated Gatekeeping: Define and implement "fail-build" criteria based on security risk thresholds to prevent vulnerable code or insecure configurations from reaching production. Secrets Management: Architect and maintain secure workflows for managing API keys, certificates, and credentials within the CI/CD environment using HashiCorp Vault or native cloud secrets managers. Pipeline Auditing: Maintain comprehensive logging and auditing of pipeline activities to ensure the integrity of the build and deployment process. Developer Collaboration: Work closely with software engineering teams to interpret security scan results and provide actionable, automated remediation guidance. Proactive Efficiency Focus: Beyond standard security tasks, the Engineer must actively identify operational inefficienciessuch as slow build times due to security scans or excessive manual intervention in configurationand engineer automated solutions to streamline these processes without compromising the security posture. 2.3 Cloud & Container Security As we leverage hybrid and multi-cloud architectures, the Product Security Engineer is responsible for the security of our virtualized and containerized workloads. Cloud Governance: Implement and automate security best practices for public cloud platforms (AWS, Azure, or GCP), focusing on VPC security, IAM roles, and encrypted storage. Kubernetes Hardening: Design and maintain security policies for Kubernetes clusters, including Network Policies, Pod Security Admissions, and RBAC configurations. Container Image Security: Establish automated container image scanning and signing processes to ensure only trusted and verified images are deployed via Docker. Runtime Protection: Implement monitoring and protection tools for containerized environments to detect and respond to anomalous behavior or runtime threats. Virtualization Security: Ensure the underlying virtualization layer (KVM, VMware) is secured and isolated according to industry best practices. 2.4 Vulnerability Management & Threat Modeling The Engineer must act as a proactive "hunter," identifying weaknesses before they can be exploited and designing systems that are inherently resilient. Threat Modeling: Lead threat modeling exercises (e.g., STRIDE or PASTA) for new product features and infrastructure changes to identify potential attack vectors early in the design phase. Vulnerability Assessment: Perform regular automated vulnerability scans of the RHEL infrastructure and cloud resources, prioritizing findings based on business impact and exploitability. Automated Remediation: Develop "auto-remediation" workflows using Python or Ansible to fix common vulnerabilities and misconfigurations without manual intervention. Incident Response Support: Provide technical expertise and forensic support to the Incident Response team during security events, particularly those involving Linux systems or cloud infrastructure. Security Research: Stay abreast of emerging threats, zero-day vulnerabilities, and new RHEL security features to proactively adapt our security architecture. Accountability Metric Expected Outcome Compliance Coverage 95%+ of RHEL fleet adhering to automated security baselines. Mean Time to Remediate (MTTR) Reduction in remediation time for critical patches through automated deployment. Pipeline Security 100% of production builds subjected to automated security gating. 3. Required Technical Skills & Qualifications To be successful in the role of Product Security Engineer (RHEL Specialist), candidates must demonstrate a profound technical foundation in Linux systems engineering and a modern, automation-first approach to cybersecurity. We require a professional who has moved beyond basic administration into the realm of infrastructure-as-code and proactive threat mitigation. Mandatory Experience: A minimum of five (5) years of demonstrable professional experience in Systems Engineering, DevSecOps, or Product Security roles is required. Candidates must have spent a significant portion of this time managing enterprise-scale Red Hat Enterprise Linux environments. 3.1 Red Hat Enterprise Linux (RHEL) Mastery As the core focus of this role, we require "expert-level" knowledge of the RHEL ecosystem (versions 7, 8, and 9). This includes: Advanced Administration: Deep understanding of system internals, kernel tuning, LVM/storage management, and performance troubleshooting. Security Hardening: Proven ability to implement and manage SELinuxpolicies (writing custom modules and troubleshooting denials) and system auditing (auditd). Identity & Lifecycle: Experience with Red Hat Satellite or Foreman for lifecycle management, content views, and automated errata/patching workflows. Compliance Frameworks: Implementation of OpenSCAP and automated compliance scanning against CIS Benchmarks or STIG requirements. 3.2 Automation, Orchestration & Scripting The candidate must be able to treat infrastructure as a software project, leveraging code to eliminate manual toil and configuration drift. Ansible: Expert-level proficiency in Ansible. Must be capable of designing modular roles, maintaining complex playbooks, and utilizing Ansible Automation Platform (or Tower/AWX) for scheduled security workflows. Python: Strong proficiency in Python for developing custom security tooling, API integrations, and complex automation logic. Bash: Mastery of Bash scripting for rapid system-level automation and diagnostic utilities. 3.3 Infrastructure & Cloud Platforms Category Requirement Detail Cloud Platforms Hands-on security engineering experience in at least one major provider: AWS, Azure, or GCP. Knowledge of native security services (e.g., AWS GuardDuty, Azure Security Center) is essential. Virtualization Proficiency in managing and securing KVM (Kernel-based Virtual Machine) and VMware vSphere environments. Containers Solid understanding of Docker image security and Kubernetes (or OpenShift) cluster hardening, including RBAC, Network Policies, and Pod Security Standards. 3.4 DevSecOps Tooling & Pipelines CI/CD: Proven experience embedding security scans and gates within Jenkins or GitLab CI pipelines. Version Control: Expert knowledge of Git (branching strategies, merge requests, and GitOps workflows). Security Scanning: Experience with SAST/DAST/SCA tools (e.g., SonarQube, Snyk, Trivy, or Checkmarx). 3.5 Education & Certifications While we prioritize practical experience and technical aptitude, the following formal qualifications are highly regarded: Academic: A Bachelors degree in Computer Science, Information Security, or a related Engineering field. Linux Certifications: Red Hat Certified Engineer (RHCE) or Red Hat Certified Specialist in Security (Linux or Containers). Security Certifications: Industry-standard certifications such as CISSP(Certified Information Systems Security Professional), OSCP (Offensive Security Certified Professional), or CISM. Cloud Certifications: AWS Certified Security - Specialty, or equivalent professional-level cloud certifications. 4. Desired Soft Skills & Attributes Technical mastery of Red Hat Enterprise Linux and automation frameworks is a baseline requirement; however, the true effectiveness of a Product Security Engineer is defined by their professional character and interpersonal aptitude. In a modern DevSecOps environment, security is no longer a siloed function but a shared responsibility. We are seeking a candidate who can navigate the complexities of organizational dynamics with diplomacy, precision, and a relentless focus on the mission. 4.1 Proactive & Analytical Mindset The ideal candidate does not wait for an alert to trigger before taking action. You possess an innate ability to dissect complex system architectures and identify subtle inefficiencies or potential threat vectors before they materialize into operational risks. Ability to perform deep root-cause analysis rather than applying superficial fixes. Proactively hunting for "security technical debt" and proposing scalable automation to resolve it. Anticipating how infrastructure changes will impact the overall security posture. 4.2 Strong Sense of Ownership We value engineers who take radical accountability for the security posture of the products they support. You treat the infrastructure as your own, ensuring that every deployment meets the highest standards of integrity. A "stop-the-line" mentality when critical security flaws are detected in the product lifecycle. Demonstrating persistence in seeing complex security remediations through to completion. Taking pride in maintaining clean, well-documented, and highly secure codebases and configurations. The "Security as an Enabler" Philosophy: Success in this role requires a shift from being a "gatekeeper" to being a "guardrail provider." We are looking for a professional who empowers development teams to move fast securely, rather than slowing them down with manual processes and bureaucracy. 4.3 Excellent Communication & Influence Security risks are often abstract; your job is to make them tangible and actionable. You must be able to translate complex technical vulnerabilities into business-impact terms for non-technical stakeholders, while providing specific, code-level guidance to developers. Strong written communication for creating clear runbooks, security advisories, and architectural documentation. Ability to remain calm and provide clear instructions during high-pressure security incidents. Influence without authority: Persuading cross-functional teams to prioritize security enhancements. 4.4 Collaborative Spirit & Professional Empathy The Product Security Engineer works at the nexus of DevOps, Site Reliability Engineering (SRE), and Development. You must be a team player who values diverse perspectives and understands the operational pressures faced by other teams. Willingness to mentor junior engineers and share RHEL/Security knowledge across the organization. Actively participating in peer code reviews and architectural design sessions. Building relationships across departments to foster a healthy, security-first culture. 4.5 Continuous Learner & Tech Visionary The cybersecurity landscape changes weekly. We need a candidate with a genuine passion for the field who treats learning as a core part of their daily routine. Staying abreast of the latest Red Hat releases, CVEs, and open-source security tooling. Actively participating in the security community (e.g., attending conferences, contributing to open-source projects, or following threat intelligence feeds). An experimentation-focused mindsetwilling to pilot new tools and technologies to improve the organizational security posture. Originally posted on Himalayas

a day ago

Head: Decision Intelligence

Santam Insurance

Western Cape, south-africa

full-time

PURPOSE OF THE ROLE Traditional insurers make product decisions. Digital businesses make customer decisions. NMSIS must do both. Every day we determine which customers should receive which offer, which products create the greatest long-term value, which channels should engage them, how to prevent lapses, optimise pricing, improve claims outcomes and maximise profitability. The Head: Decision Intelligence will build the capability that turns data into commercial decisions improving growth, customer outcomes and profitability across the business. As NMSIS evolves into a platform orchestrator within the MultiChoice ecosystem, this role is being created to give the business dedicated, accountable ownership of enterprise-wide decision intelligence, lead optimisation, predictive analytics and customer lifetime value management. This is not a reporting role, a traditional analytics role or a pure data science role. It sits where business strategy, insurance, customer behaviour, artificial intelligence and advanced analytics intersect. You will build the commercial operating system powering Insurance, Customer Intelligence, Lead Optimisation, Pricing Feedback Loops, Behavioural Decisioning, Next Best Action, Customer Lifetime Value Optimisation, Growth Intelligence, Portfolio Performance and Executive Decision Support acting as the central integration point between NMSIS, MultiChoice CII, Sanlam BI & Data Engineering, Santam and TrueSouth Actuaries QUALIFICATIONS Degree in Data Science, Computer Science, Engineering, Statistics, Mathematics, Actuarial Science or a related quantitative discipline (essential). Postgraduate qualification in a quantitative or technical discipline (advantageous). EXPERIENCE REQUIRED 5 - 8 years' experience in analytics, data science or data engineering within a commercial or financial services environment. Hands-on proficiency in SQL and Python (or R), with demonstrated experience designing and deploying propensity or segmentation models in a production environment. Experience governing multi-partner data delivery relationships, including SLA management, data quality standards and governance frameworks. A track record of translating complex analytical outputs into commercially actionable decisions and senior-level intelligence reporting. Ability to operate fluently across both technical teams (data engineers, data scientists) and business stakeholders (EXCO, distribution, operations) simultaneously. Experience within financial services, insurance, banking, telecommunications, retail, digital platforms, consulting or customer intelligence; experience leading multidisciplinary business and technology teams is advantageous. Advantageous: Insurance or embedded financial services experience, with an understanding of underwriting, pricing and portfolio economics. Experience with Snowflake, Databricks, Power BI or equivalent cloud-based analytics and data warehousing platforms. Exposure to decisioning platforms, rules engines or campaign orchestration tooling. Familiarity with insurance economics: VNB, CLV, persistency, CAC payback and contribution margin. POPIA, FAIS or equivalent regulatory data compliance experience in a South African context. DUTIES AND RESPONSIBILITIES Key Responsibilities: Data Foundation & Engineering Own the integrated data model across all relevant domains DStv Subscriber ID, Insurance Policy ID, CRM Customer Number, Payments Account ID, and Identity Number linked via a unified customer identity layer that connects subscriber, lead, policy, claims, billing, rewards and behavioural signals. Govern MultiChoice/CII data delivery: SLA standards, field definitions, delivery frequency, quality thresholds and escalation paths, driving the roadmap from monthly batch delivery toward event-triggered data flows as infrastructure matures. Lead data engineering into Sanlam: governed, versioned, lineage-tracked analytical datasets that are fit for decisioning, not only fit for reporting. Maintain a structured data gap register with commercial impact quantification, identifying precisely where deficiencies are constraining model quality, automation or commercial optimisation. Ensure POPIA compliance and all data sharing agreement obligations with MultiChoice are embedded in every data flow and processing activity. Models & Advanced Analytics Direct and govern the full model suite in partnership with CII, Sanlam Data Science and TrueSouth, including: Lead Quality Index (LQI) multi-factor scoring incorporating economic proxies, lapse risk, claims probability and behavioural signals, moving beyond contactability-only scoring; cross-sell propensity models product-specific acquisition propensity per product house (e.g. Entertainment Plus, Funeral Plus, Life Plus, Home, Home Contents, Device upgrade loans), enriched with LQI to prevent volume-over-quality lead acceptance; NTU prediction identifying pre-sale signals that predict non-conversion, enabling intervention before commitment; lapse and persistency models early duration (M1 - M3) lapse prediction, affordability vulnerability scoring and behaviour-based retention triggers; CLV and CAC optimisation multi-product customer lifetime value accounting for cross-sell probability, claims experience, reward cost and contribution margin, with CAC payback modelling by channel and segment; and claims risk and pricing feedback frequency and severity prediction, fraud signal detection, repair-vs-replace optimisation, and variance monitoring against pricing assumptions. Govern model performance standards: documentation, drift monitoring, recalibration triggers, champion/challenger frameworks and model risk governance aligned to Sanlam Group standards. Ensure all models are grounded in insurance economics VNB, persistency, contribution margin, capital efficiency and remain aligned to customer fairness and FSCA conduct expectations. DUTIES AND RESPONSIBILITIES Decisioning & Lead Intelligence Design and operationalise the lead segmentation and routing framework: channelling each lead to the right product house, sales channel and offer configuration based on LQI score, propensity, channel economics and cross-sell potential not raw contactability or volume. Ensure lead allocation logic balances conversion probability, persistency probability, product margin, channel economics (CAC by channel) and cross-sell potential simultaneously, not any single metric in isolation. Build closed-loop feedback between lead outcomes (conversion, early lapse, NTU, claims) and upstream scoring, enabling continuous improvement in lead quality without requiring manual recalibration cycles. Design structured decisioning frameworks for acquisition, retention and cross-sell, translating model outputs into executable business rules, scoring logic and decision playbooks that BPO teams, campaign managers and distribution leads can act on directly. Drive the evolution from human-led toward rules-driven, model-assisted and AI-augmented execution, enabling the organisation to operate at scale despite constrained headcount. Support scenario and trade-off analysis: conversion vs persistency; CAC vs CLV thresholds; channel investment allocation; pricing adequacy vs growth rate. Execution, Governance & Commercial Intelligence Integrate model outputs into campaign targeting systems, BPO dialling and scripting logic, digital campaign tools and retention workflow engines, working in close partnership with the CGO and COO teams. Produce EXCO-grade commercial intelligence: CLV by segment, CAC payback by channel and product, channel economics scorecards, lapse cohort analysis, product contribution margin reports and VNB attribution by segment and channel. Establish and govern a test-and-learn architecture: control group methodology, A/B testing for decisioning variants, campaign uplift measurement and decision performance tracking against defined OKRs and enterprise scorecard metrics. Own DI decision governance, ensuring all production models and decisioning rules are transparent, explainable, documented and aligned to regulatory, conduct and risk appetite guardrails; identify and escalate where decisions are destroying economic value or weakening capital efficiency. Chair the NMSIS/MultiChoice (CII) DI operating rhythm, covering data foundation, engineering, model and advanced analytics, decisioning and lead intelligence, model performance reviews, data quality reviews and use case backlog management. Own the DI maturity roadmap a structured, phased progression from the current Level 2 (Siloed) toward Level 4 (Ecosystem Intelligence) across data foundation, integration, product reporting, growth analytics and AI-assisted decisioning. Maintain reusable decision assets that are version-controlled and actively used documented rules, scoring logic, prioritisation frameworks and performance feedback loops building decisioning as a repeatable organisational capability, not an individual dependency. WHAT YOU'LL NEED Strong commercial acumen and analytical thinking. Customer decisioning expertise and executive communication skills. Stakeholder management capability across technical and business audiences. Intellectual curiosity, technical confidence and a structured, outcomes-driven approach to problem-solving. A passion for building new capabilities from the ground up.

2 days ago

Software Implementation Engineer

Manpower SA (Pty) Ltd.

Cape Town, south-africa

Default

About the RoleWe are operating at the cutting edge of Artificial Intelligence and Enterprise Architectureshaping how modern businesses run through autonomous AI systems. As a Software Implementation Engineer, you will play a key role in building and deploying intelligent AI agents that function as a digital workforce for enterprise clients.This is not a traditional support or maintenance role. It is a high-impact, hands-on engineering and consultative position where you will design systems that don’t just respondbut act. From triggering workflows to integrating with core business platforms, your work will directly drive efficiency, automation, and measurable ROI.Agentic Workflow Design Design and build multi-step, autonomous AI workflows Enable AI agents to manage full customer journeys such as lead qualification, follow-ups, and complex query handling Lead integrations with critical platforms such as CRMs (e.g., Salesforce, HubSpot), payment gateways, and communication APIs Architect seamless connections between AI systems and enterprise tools Develop and orchestrate workflows using webhooks and triggers Ensure real-time data synchronisation across systems and AI agents Collaborate with stakeholders across all levels, from technical teams to executives Translate business needs into scalable technical solutions Build and execute testing frameworks to ensure stability and accuracy Design systems that handle edge cases and incorporate human-in-the-loop processes where required Monitor and optimise deployed solutions Use data-driven insights to demonstrate impact and continuously improve performance Bachelor’s degree in Computer Science, Engineering, or a related field Experience working with AI agents and LLM orchestration Understanding of Retrieval-Augmented Generation (RAG) and voice-based AI systems Strong proficiency in REST APIs and webhook-based architectures Ability to map, process, and transform data using tools such as Python and Excel Experience integrating with CRM and messaging platform APIs Strong communication skills with the ability to simplify complex technical concepts High attention to detail and structured problem-solving approach Self-driven with a strong focus on delivering measurable results A builder mindset with a passion for creating impactful solutions AI Models: OpenAI, Google Gemini, ElevenLabs Orchestration: n8n, serverless functions (GCP, Cloudflare) Infrastructure: Serverless cloud environments, vector databases, and event-driven systems Agent Platforms: Nineteen58 Agent Platform Join a fast-growing, high-impact team at the forefront of AI innovation Work in a collaborative, in-person environment that prioritises speed and creativity Gain exposure to enterprise-level projects and cutting-edge technologies Enjoy a merit-driven culture where growth is directly linked to performance and impact Limited hybrid flexibility available for high-performing team members Desired Skills: software engineer ballito

2 days ago

Chief Financial Officer

AJ Personnel

Johannesburg, south-africa

Default

Background:Excellent career opportunity for a CFO within a leading manufacturing company to ensure the financial health of the organisationMinimum Requirements: Professional qualification: CA(SA) 8-12 years’ experience in a financial management role; including experience in a senior finance leadership role A commercial track record beyond accounting or audit Demonstrated multi-entity consolidation and ownership of an external audit Demonstrated cash and working-capital management in a constrained, turnaround or high-growth-strain setting, including hands-on management of trade finance, letters of credit and Customer and Supplier terms Demonstrated financial modelling, budgeting, and reforecasting owned personally Experience managing inventory in a manufacturing, assembly, or distribution business, including BOM-based product costing, WIP and inventory valuation, and the associated financial controls and reporting Senior finance experience in a manufacturing, engineering, project-based or industrial-distribution environment Demonstrated pricing and margin management: owning or overseeing costing and quotation models, order- and customer-level profitability, and quoted-versus-actual margin reviews Practical experience of foreign-exchange risk management, trade finance, and cross-border operations, including import-heavy supply chains and USD-linked revenue Demonstrated hands-on leadership of Finance teams across multiple business units Lead the finance function across the Group and ensure efficient financial operations of all business units in the portfolio Oversee accounting, budgeting, cash flow management, audit, payroll, billing, and financial compliance in accordance with financial operational requirements Manage and oversee the financial consolidation process across all business units, including appropriate management of intercompany balances and transactions Present financial statements that are accurate, complete, and timely, in full compliance with IFRS and applicable South African regulatory requirements Ensure robust internal controls and risk management practices (including inventory, stores, BOM and master-data, procurement, and order-to-cash controls) are implemented and standardized across the Group Translate strategic initiatives into financial models and execution plans Support the CEO and business unit Managing Directors in: Growth and strategic planning / business unit expansion and new market opportunities / pricing and revenue strategies / capital allocation and investment decisions Develop financial models to support decision-making, expansion, and scenario planning Conduct ratio analysis to provide more comprehensive financial oversight and support informed decision-making Oversee and support product and project costing (BOMs, labor standards, landed cost including freight, duties and FX, and overhead absorption), applied consistently in the ERP, with Finance accountable for BOM and master-data integrity Produce a monthly gross-margin bridge that explains movements and shows a fully loaded margin, with financing costs such as trade finance and LC charges shown separately Oversee and support BOM-based pricing and quote approval with the CEO and commercial leads, including quoting FX rates and repricing triggers: no material quote without a verified BOM and a fully loaded order-level P&L, with escalation below approved margins Assess bulk, discounted and multi-year contracts on contribution and cash rather than revenue alone, and support negotiation of payment, LC, Incoterm, and currency terms Own the 13-week rolling cash forecast at Group and entity level, maintained weekly, built bottom-up from the order book, production plan, LC and shipment timing, Supplier payment runs and FX, and reconciled to actual bank balances Own banking relationships, bank mandates, and the payment authorization matrix Develop and assess appropriate funding solutions for the Group’s operations, projects, and growth initiatives Monitor debt and funding facilities, including facility limits, obligations and financial covenants Lead and support capital raising initiatives, including debt and equity funding, as required to support the Group’s growth and strategic objectives Own the cash-conversion cycle (debtor, inventory, and creditor days) against business-unit targets, with a single order-to-cash view from order book to collections Structure and manage trade and working-capital finance for a manufacturing and project business, including letters of credit, invoice and Supplier finance, guarantees, and development-finance or export-credit facilities, with LC terms reviewed before orders are accepted Set and apply customer credit and country-exposure limits, and manage Supplier terms and payments against the production plan Measure and manage net FX exposure across USD-linked pricing, imported components and foreign-currency receipts, under a Board-approved hedging policy (forward cover, natural hedging, and quoting rates) Ensure compliance with SARB exchange control, including repatriation of export proceeds, and manage currency-convertibility risk in customer countries Ensure compliance with environmental, social, and governance (ESG) standards across the Group Oversee HR operations by coordinating with external service providers (incl. payroll, benefits, recruitment) and internal staff responsible for other aspects of HR Assess the financial viability of new projects, investments, acquisitions, and strategic partnerships including financial due diligence where required Evaluate capex requirements, cost projections, expected margins and projected returns on new investments and growth initiatives Assess affordability and sustainability of expansion plans using long term financial modelling and recommend the most optimal financing options Ensure compliance with applicable regulatory, tax and governance requirements across the Group, including requirements arising from international operations (exchange control, customs, VAT, and cross-border tax) Manage annual audits and liaise with external Auditors Oversee the Group’s financial and governance of B-BBEE, including procurement-spend reporting Oversee the Group’s tax compliance and work with external Tax Advisers where required Implement processes to mitigate financial risk, including debt management, covenant monitoring, and insurance oversight Provide financial support and strategic insights to the Executive team and Board Communicate financial performance, outlook, and key risks in a clear, accessible manner to non-financial Stakeholders Support engagement with external Auditors, tax advisers, and other professional advisers as required Only if you meet the minimum job requirements and experience as mentioned above, you may submit a detailed updated CV. Please Apply Online and complete your registration via our website to enable and protect you as a candidate and to accept the new POPIA terms and conditions. This will then create your permanent profile with which you can apply for all jobs as advertised by AJ PERSONNEL. However, you may remove your profile from AJ PERSONNEL when you are no longer in the job market. Please take note that the applicants who do not adhere to the minimum requirements will not be considered for the respective position. Note our clients may expire jobs at their own discretion. AJ PERSONNEL will only respond to shortlisted candidates. If you have not received a response within two (2) weeks from applying, your application was then unsuccessful for that specific position, however your profile remains on our system for future opportunities. Desired Skills: Chief Financial Officer Leadership Skills Strategic Skills Reporting Skills Attention to Detail

2 days ago