Engineering

Site Reliability Engineer

Sun International·Gauteng, south-africa·Full Time·Internship
EngineeringFull TimeInternship
-

Job Description

  • The Site Reliability Engineer (SRE) is a technical contributor responsible for improving the reliability, resilience and operational performance of Sun International's technology services, platforms and infrastructure.
  • The role focuses on observability, monitoring, alerting, event management, reliability analytics, automation and auto-remediation, proactively identifying potential issues before they impact the business.
  • Working across software engineering, infrastructure, enterprise applications and service management teams, the SRE implements monitoring and automation solutions that strengthen service reliability and reduce operational.

Core behavioural & Technical / proficiency competencies:

  • Cloud platform management across Azure, AWS and/or GCP.
  • Containerisation technologies, including Docker and Kubernetes.
  • Monitoring, observability and alerting tools such as Prometheus, Grafana and ELK.
  • Scripting and operational automation using Python, Bash and/or PowerShell.
  • Development of automation, auto-remediation capabilities and operational runbooks.
  • Incident management and proactive identification of service reliability risks.
  • Root Cause Analysis (RCA) and analysis of recurring operational failures.
  • Linux and Windows system administration.
  • Networking fundamentals.
  • Git version control.
  • Troubleshooting and problem-solving across technology services and infrastructure.
  • Analysis of operational telemetry, event data and service performance trends.
  • Application of reliability standards, security requirements, operational controls and governance practices.
  • Cross-functional collaboration with software engineering, infrastructure, enterprise applications and service management teams.
  • Analytical thinking and evidence-based decision-making.
  • Continuous improvement and operational excellence.
  • Collaboration and knowledge sharing.
  • Operational excellence and accountability.

Job Requirements

Qualifications:

  • Degree in Computer Science, Engineering, Information Technology or a related discipline (required)
  • Cloud platform certification, e.g. Azure Administrator Associate or AWS Certified SysOps Administrator (preferred)
  • ITIL Foundation Certification (preferred)

Experience:

  • 2 - 5 years' experience in infrastructure operations, technology operations, monitoring platforms, cloud operations, Site Reliability Engineering, observability tooling or a related technology discipline.
  • Practical experience with monitoring and observability, cloud platforms, automation/scripting, incident management and troubleshooting aligned to an SRE or technology operations environment

Key skills

Bachelors

At a glance

Company

Sun International

Location

Gauteng, south-africa

Employment

Full Time

Experience

Valid until

Not specified

Created

November 2, 2026

More opportunities

Similar roles you might like

Platform Tech Lead

Yellow Card

Remote, south-africa

Full Time

Who We Are Yellow Card is the largest licensed Stablecoin-based infrastructure provider operating across over 60 countries. From Stablecoin payment infrastructure to fiat settlement rails, wallet services, and custom local Stablecoin issuance, Yellow Card provides the complete infrastructure businesses need to manage Stablecoins, payments, and operations across 50 emerging markets. Yellow Card operates with a substantial global team spanning 24 countries. This workforce is characterized by its linguistic diversity, with collective speaking of over 25 languages, underscoring the company’s extensive international reach. As the Platform Tech Lead, you will serve as the technical anchor for the Platform Engineering team. You will lead critical production implementations and take full ownership of the technical roadmap to ensure our services maintain 99.99% availability for the institutional partners and global financial networks that rely on us. Success in this role requires a critical ability to adapt and learn; you will stay ahead of the curve as we integrate new technologies and evolve our platform to meet the high-stakes demands of a rapidly expanding global B2B landscape. What You’ll Do Technical Leadership: Act as the final technical reviewer for complex setups, including global traffic routing and EKS scaling.Act as the final technical reviewer for complex implementations, such as networking setups (e.g., VPNs, certificate rotation for mTLS). Architectural Excellence: Architect robust solutions to ensure strict adherence to our 99.99% System Uptime Executive OKR. Incident Management: Identify underlying root causes for critical production incidents and provide permanent fixes, ensuring severity incidents remain at 0–1 per month. Performance & Scaling: Lead service capacity planning, demand forecasting, and system tuning to ensure scalability is designed into our products from the start. Monitoring & Reliability: Establish end-to-end monitoring and alerting on all critical systems to ensure SLAs are met, and proactive notifications are in place. Stakeholder Alignment: Establish trust with senior leaders by aligning technical priorities with business goals and providing accurate status updates. Security & Compliance: Partner with SecOps to ensure our global infrastructure meets rigorous security standards and maintains a minimal vulnerability window. What You Bring Experience: 7+ years of hands-on technical experience with large-scale production environments and infrastructure. Leadership: 2+ years of experience leading site reliability engineers or software developers building customer-facing applications. Cloud Expertise: In-depth knowledge of AWS architecture (Serverless, Lambda, API Gateway, DynamoDB, EKS, and S3). Modern Tooling: Strong grasp of Kubernetes, microservices, and CI/CD principles (GitHub Actions). Technical Adaptability: You possess a proven ability to learn and master new technologies on the fly, recognizing that the tools we use today (like AI-driven infrastructure and emerging FinTech protocols) will evolve tomorrow. Growth Mindset: You don't just manage existing systems; you proactively identify opportunities to upskill the team and integrate cutting-edge solutions that improve our B2B performance. Agile Evolution: You thrive in an environment where pivoting is a strength, adapting your technical strategy as we scale our institutional partnerships and global network footprint. Operational Excellence: Solid understanding of performance monitoring tools and Linux operating systems. Kubernetes Expertise: Proven, deep experience managing and securing Kubernetes (EKS) at scale is a significant advantage. Advanced Networking: Strong grasp of complex networking concepts required for global multi-region deployments and secure B2B integrations. Ready to Join Us? Are you up for the challenge? Apply today and be part of shaping the future of FinTech. Let's innovate, disrupt, and lead together! Originally posted on Himalayas

9 days ago

Senior Ui & Ux Designer

lemon.io

Remote, south-africa

Contractor

helps companies in the US and Europe hire experienced engineers & designers, from funded startups to teams like Klarna, Retool, and Pinterest. We’ve been doing this since 2015, and more than 1,500 companies have hired engineers through us. New roles for Senior Designers come in all the time, and several are open right now. Two ways to work with clients Contract: most roles are contract-based. You join the client’s team and work as part of it. Direct hire: some clients hire designers full-time, and we support you through the process. Because companies trust our vetting, applying through is often a shortcut. You get to the client faster than going through their full hiring process on your own. What you get Competitive rate, based on your seniority and skills We find the projects. No client hunting or rate negotiations. We match you manually based on your skills and preferences. Flexible schedule. Work async or with a small overlap with the team’s hours. No micromanagement, no screen trackers Direct work with clients, most of them with technical backgrounds Ongoing support from your application through every project, plus a community of engineers from 75+ countries Who we’re looking for Senior UI & UX Designers: 5+ years of experience in UI & UX Design 3+ years of commercial experience with Figma & 5+ years with Prototyping, OR 5+ years of commercial experience with Figma & 3+ years with Prototyping Experience with Adobe is required Experience in Product design is a must Senior Graphic Designers: 5+ years of experience in Graphic Design 5+ years of commercial experience with Adobe Creative Suite & Adobe Illustrator Strong design craft as a Senior Designer, you're expected to build polished, production-ready work from scratch, with a solid grasp of design systems, component architecture, and how your decisions translate into real product or brand outcomes. Clear and confident communication in English advanced ability to discuss creative briefs, defend design decisions, and flag blockers early. Strong self-presentation is essential, particularly on client calls. High ownership, zero hand-holding you thrive working full-time remotely, manage your own time, and consistently hit deadlines without being chased. Reliability we need to trust you completely. If you commit to something, you deliver it. If something changes, you communicate early. Fast ramp-up you can absorb project context quickly, align with existing style guides or brand directions, and start producing valuable work within the first days, not weeks. How it works Apply and complete your profile Verify your role Once approved, we match you with a project. Typical time to first project: 3 weeks Ready? Apply and join the community. NOT YOUR TECH STACK? We're placing Senior Developers (4+ yrs commercial experience) across AI Agent Architecture, AI Automation Architecture, AI Engineering, Site Reliability Engineering, Platform Engineering, Enterprise Software Engineering, React & Python, React & Golang, Golang, React & Java, React & Ruby, Ruby, PHP & Vue, Vue & Node.js, React & .NET, Android & iOS, iOS & Swift, Flutter & Firebase, Solutions Engineer, Blockchain (Ethereum/Ethers.js/Wagmi/Viem/Solana), Angular & Node.js, Vue & .NET, Python & Vue, DevOps, MLOps, Data Science, Angular & PHP, Angular & .NET, Symfony & React, Symfony & Vue, Symfony & An gular, Python, Symfony & JavaScript & Next.js & TypeScript, Data Analysis, React & PHP, Data Engineering, Project Management, Product Management, QA Automation, QA Manual, Embedded Software Engineering, React Native & Node, React Native & React, React Native & Ruby, React Native & Python, WordPress, Android, Angular, Python & Node, React & Node.js, Node & TypeScript, Java & Spring, Svelte & Python, Svelte & Node.js, Svelte & TypeScript, Rust, Shopify & JavaScript, Vue & Nuxt, PHP & Laravel, Animation, React & Node & React Native, .NET & C#, Electron, Scala, C++, Unreal Engine & C++, Python & LLM, Unity, or Machine Learning Engineering and more. Reach out and we'll match you. We do not provide visa assistance, and our cooperation model does not include the benefits typically offered with direct hire. We work with developers from 75+ countries across Europe, Latin America, North America (the U.S. and Canada), selected countries in Asia (Japan, Singapore, South Korea, the Philippines, Indonesia, Malaysia, Vietnam, Thailand, and Israel), Oceania (Australia, New Zealand, and Papua New Guinea), and Africa (including Morocco and South Africa). Originally posted on Himalayas

11 days ago

Senior Platform Engineer

DeARX Services (Pty) Ltd

Western Cape, south-africa

full-time

Our client in the financial services industry is looking for a highly technical Senior Platform Engineer to help transform how software is built, secured, tested and deployed across a large-scale engineering environment. You will contribute to the evolution of an Internal Developer Platform supporting more than 1,000 engineers, enabling faster, safer and more consistent software delivery through automation, cloud-native technologies and AI-enabled engineering practices. The focus is on removing engineering bottlenecks, enabling developer self-service and introducing the automation, security guardrails and governance required to accelerate delivery within a complex, business-critical environment. Working across AWS, Amazon EKS, Kubernetes, GitHub, Terraform, GitOps and CI/CD, you will design and implement scalable platform capabilities that improve developer productivity while supporting enterprise security, operational resilience and reliability. This is an opportunity for a hands-on engineer who enjoys solving complex technical challenges, building innovative solutions and taking ideas from concept and proof of concept through to production. Key responsibilities Design, implement and optimise scalable cloud infrastructure using Infrastructure as Code (IaC), ensuring consistency, security and repeatability across environments. Build and enhance automated CI/CD pipelines to support reliable, efficient and controlled software releases. Develop and evolve the Internal Developer Platform, enabling engineering teams to provision infrastructure and deploy applications through self-service capabilities. Engineer and optimise Kubernetes-based platforms and containerised workloads, particularly within AWS and Amazon EKS environments. Implement GitOps practices and deployment automation to improve release consistency, traceability and operational control. Establish automated security controls, governance mechanisms and platform guardrails across the software delivery lifecycle. Explore and implement AI-enabled engineering capabilities, including workflows that support the safe and efficient delivery of AI-generated software. Troubleshoot complex infrastructure, platform and distributed-system issues, leading root-cause investigations and driving permanent resolutions. Contribute to technical architecture and engineering standards across cloud-native platforms, microservices and event-driven systems. Improve platform observability, performance, scalability, availability and operational resilience. Identify opportunities to eliminate manual processes, simplify developer workflows and improve engineering productivity. Provide technical guidance and mentorship, influencing platform engineering practices across multiple teams. Minimum requirements At least 8 years of hands-on experience in Platform Engineering, DevOps, Site Reliability Engineering (SRE) or a related technical discipline. Strong experience designing, implementing and operating cloud infrastructure, preferably using AWS. Hands-on experience with Kubernetes and container orchestration, ideally Amazon EKS. Proven experience with Infrastructure as Code tools such as Terraform, AWS CloudFormation or equivalent. Strong experience building and maintaining CI/CD pipelines using GitHub Actions, Jenkins or similar technologies. Practical experience with Git, GitHub, GitOps and automated software delivery practices. Strong scripting or programming capabilities using Python, Go, Bash, PowerShell or similar languages. Experience with cloud-native architectures, microservices, APIs and distributed systems. A solid understanding of cloud networking, identity and access management, security controls, observability and production support. Experience troubleshooting complex technical issues and improving the reliability and performance of production platforms. The ability to communicate technical decisions clearly and collaborate effectively with software engineering, architecture, security and infrastructure teams. Advantageous experience Experience building or enhancing an Internal Developer Platform (IDP) or developer self-service tooling. Exposure to enterprise financial services, banking or other highly regulated environments. Experience implementing security guardrails, governance and compliance controls within CI/CD pipelines. Experience with AI-assisted software development or integrating AI capabilities into engineering workflows. Relevant AWS, Kubernetes or cloud engineering certifications. A relevant degree in Information Technology, Computer Science, Software Engineering or a related discipline. Why consider this opportunity? Influence platform engineering capabilities used by more than 1,000 engineers. Work with modern cloud-native technologies in a large-scale financial services environment. Contribute to the evolution of secure, automated and AI-enabled software delivery. Solve complex engineering challenges with a focus on scalability, reliability and developer experience. Make a meaningful technical impact without the requirement for formal line management.

18 days ago

Product Security Engineer

FutureFit AI

Remote, south-africa

Full Time

1. Job Summary and Overview At our organization, we believe that security is the bedrock of innovation. Our mission is to provide world-class digital services that empower our users while maintaining the highest standards of digital trust and data integrity. We foster a culture of technical excellence, where engineers are encouraged to be proactive, inquisitive, and dedicated to the craft of building resilient systems. As we continue to expand our footprint in the tech ecosystem, we are looking for a specialist who shares our passion for open-source technology and robust security architectures. 1.1 Position Specifications Category Details Position Title Product Security Engineer (RHEL Specialist) Location Remote Experience Level Senior (Minimum 5+ Years Professional Experience) Language Requirements Portuguese and English Employment Type Permanent / Full-Time 1.2 Role Summary The Product Security Engineer (RHEL Specialist) is a critical technical position focused on the intersection of infrastructure stability and proactive security posture. The core purpose of this role is to embed automated security controls, hardening standards, and DevSecOps best practices throughout the entire product lifecycle, with a specialized focus on the Red Hat Enterprise Linux (RHEL) ecosystem. You will be the primary architect of security automation, ensuring that our RHEL-based infrastructure is resilient against modern threats while maintaining high availability and operational efficiency. Role Mission: To transform traditional security "gates" into automated security "guardrails" within our Linux environment. You will be tasked with identifying system inefficiencies, automating vulnerability remediation, and ensuring that security is a seamless component of our CI/CD pipelines and virtualization stacks. The ideal candidate is not just a security enthusiast but a seasoned Linux practitioner who understands the nuances of system internals. You will move beyond manual checklists, leveraging Ansible for configuration management and Python/Bash for custom security tooling. Whether managing workloads on-premise through VMware/KVM or across AWS, Azure, or GCP, your objective remains consistent: to provide a secure, standardized, and self-healing platform that serves as the backbone for our product offerings. 1.3 Core Objectives and Expectations Infrastructure Hardening: Design and enforce automated RHEL hardening standards across all environments using CIS benchmarks or similar frameworks. Security Automation: Implement "Security as Code" principles to reduce manual toil and human error in security configurations. Proactive System Optimization: Actively hunt for system inefficiencies and performance bottlenecks, providing automated resolutions before they impact product delivery. Cloud and Container Security: Secure our transition to cloud-native architectures by ensuring Docker and Kubernetes environments meet enterprise security requirements. Continuous Integration: Integrate security scanning and compliance auditing directly into our Jenkins and GitLab CI pipelines. As a senior member of the technical staff, you will be expected to work with a high degree of autonomy, collaborating with both DevOps and Software Development teams to foster a culture of shared responsibility for security outcomes. 2. Key Responsibilities The Product Security Engineer (RHEL Specialist) is tasked with safeguarding the integrity, availability, and confidentiality of our product ecosystem. This role functions at the critical intersection of system engineering and cybersecurity, requiring a hands-on approach to building resilient infrastructure. The incumbent is expected to move beyond reactive security measures, instead architecting automated, self-healing systems that adhere to global security standards. 2.1 Security Automation & Hardening The primary accountability in this area is the conversion of complex security requirements into executable, version-controlled code. This ensures a consistent security posture across all environments, from development to production. Ansible Orchestration: Design, develop, and maintain a library of Ansible playbooks and roles specifically focused on Red Hat Enterprise Linux (RHEL) security compliance (e.g., CIS Benchmarks, STIGs). Automated Patch Management: Implement and manage automated patching lifecycles for RHEL systems to ensure timely remediation of Critical and High-severity vulnerabilities with minimal service disruption. Configuration as Code: Enforce system state consistency by automating the deployment of security configurations, including SELinux policies, SSH hardening, and kernel parameter tuning (sysctl). Identity & Access Management (IAM): Automate the provisioning and auditing of privileged access, ensuring the Principle of Least Privilege is enforced across all Linux-based product components. Compliance Drift Detection: Develop automated monitoring solutions to detect and remediate configuration drift from established security baselines in real-time. 2.2 Secure CI/CD Pipeline Integration This role serves as a key architect in our DevSecOps transformation, ensuring that security is not a final checkpoint but a continuous process embedded within our software delivery pipelines. Security Tooling Integration: Embed and configure Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) tools within Jenkins and GitLab CI pipelines. Automated Gatekeeping: Define and implement "fail-build" criteria based on security risk thresholds to prevent vulnerable code or insecure configurations from reaching production. Secrets Management: Architect and maintain secure workflows for managing API keys, certificates, and credentials within the CI/CD environment using HashiCorp Vault or native cloud secrets managers. Pipeline Auditing: Maintain comprehensive logging and auditing of pipeline activities to ensure the integrity of the build and deployment process. Developer Collaboration: Work closely with software engineering teams to interpret security scan results and provide actionable, automated remediation guidance. Proactive Efficiency Focus: Beyond standard security tasks, the Engineer must actively identify operational inefficienciessuch as slow build times due to security scans or excessive manual intervention in configurationand engineer automated solutions to streamline these processes without compromising the security posture. 2.3 Cloud & Container Security As we leverage hybrid and multi-cloud architectures, the Product Security Engineer is responsible for the security of our virtualized and containerized workloads. Cloud Governance: Implement and automate security best practices for public cloud platforms (AWS, Azure, or GCP), focusing on VPC security, IAM roles, and encrypted storage. Kubernetes Hardening: Design and maintain security policies for Kubernetes clusters, including Network Policies, Pod Security Admissions, and RBAC configurations. Container Image Security: Establish automated container image scanning and signing processes to ensure only trusted and verified images are deployed via Docker. Runtime Protection: Implement monitoring and protection tools for containerized environments to detect and respond to anomalous behavior or runtime threats. Virtualization Security: Ensure the underlying virtualization layer (KVM, VMware) is secured and isolated according to industry best practices. 2.4 Vulnerability Management & Threat Modeling The Engineer must act as a proactive "hunter," identifying weaknesses before they can be exploited and designing systems that are inherently resilient. Threat Modeling: Lead threat modeling exercises (e.g., STRIDE or PASTA) for new product features and infrastructure changes to identify potential attack vectors early in the design phase. Vulnerability Assessment: Perform regular automated vulnerability scans of the RHEL infrastructure and cloud resources, prioritizing findings based on business impact and exploitability. Automated Remediation: Develop "auto-remediation" workflows using Python or Ansible to fix common vulnerabilities and misconfigurations without manual intervention. Incident Response Support: Provide technical expertise and forensic support to the Incident Response team during security events, particularly those involving Linux systems or cloud infrastructure. Security Research: Stay abreast of emerging threats, zero-day vulnerabilities, and new RHEL security features to proactively adapt our security architecture. Accountability Metric Expected Outcome Compliance Coverage 95%+ of RHEL fleet adhering to automated security baselines. Mean Time to Remediate (MTTR) Reduction in remediation time for critical patches through automated deployment. Pipeline Security 100% of production builds subjected to automated security gating. 3. Required Technical Skills & Qualifications To be successful in the role of Product Security Engineer (RHEL Specialist), candidates must demonstrate a profound technical foundation in Linux systems engineering and a modern, automation-first approach to cybersecurity. We require a professional who has moved beyond basic administration into the realm of infrastructure-as-code and proactive threat mitigation. Mandatory Experience: A minimum of five (5) years of demonstrable professional experience in Systems Engineering, DevSecOps, or Product Security roles is required. Candidates must have spent a significant portion of this time managing enterprise-scale Red Hat Enterprise Linux environments. 3.1 Red Hat Enterprise Linux (RHEL) Mastery As the core focus of this role, we require "expert-level" knowledge of the RHEL ecosystem (versions 7, 8, and 9). This includes: Advanced Administration: Deep understanding of system internals, kernel tuning, LVM/storage management, and performance troubleshooting. Security Hardening: Proven ability to implement and manage SELinuxpolicies (writing custom modules and troubleshooting denials) and system auditing (auditd). Identity & Lifecycle: Experience with Red Hat Satellite or Foreman for lifecycle management, content views, and automated errata/patching workflows. Compliance Frameworks: Implementation of OpenSCAP and automated compliance scanning against CIS Benchmarks or STIG requirements. 3.2 Automation, Orchestration & Scripting The candidate must be able to treat infrastructure as a software project, leveraging code to eliminate manual toil and configuration drift. Ansible: Expert-level proficiency in Ansible. Must be capable of designing modular roles, maintaining complex playbooks, and utilizing Ansible Automation Platform (or Tower/AWX) for scheduled security workflows. Python: Strong proficiency in Python for developing custom security tooling, API integrations, and complex automation logic. Bash: Mastery of Bash scripting for rapid system-level automation and diagnostic utilities. 3.3 Infrastructure & Cloud Platforms Category Requirement Detail Cloud Platforms Hands-on security engineering experience in at least one major provider: AWS, Azure, or GCP. Knowledge of native security services (e.g., AWS GuardDuty, Azure Security Center) is essential. Virtualization Proficiency in managing and securing KVM (Kernel-based Virtual Machine) and VMware vSphere environments. Containers Solid understanding of Docker image security and Kubernetes (or OpenShift) cluster hardening, including RBAC, Network Policies, and Pod Security Standards. 3.4 DevSecOps Tooling & Pipelines CI/CD: Proven experience embedding security scans and gates within Jenkins or GitLab CI pipelines. Version Control: Expert knowledge of Git (branching strategies, merge requests, and GitOps workflows). Security Scanning: Experience with SAST/DAST/SCA tools (e.g., SonarQube, Snyk, Trivy, or Checkmarx). 3.5 Education & Certifications While we prioritize practical experience and technical aptitude, the following formal qualifications are highly regarded: Academic: A Bachelors degree in Computer Science, Information Security, or a related Engineering field. Linux Certifications: Red Hat Certified Engineer (RHCE) or Red Hat Certified Specialist in Security (Linux or Containers). Security Certifications: Industry-standard certifications such as CISSP(Certified Information Systems Security Professional), OSCP (Offensive Security Certified Professional), or CISM. Cloud Certifications: AWS Certified Security - Specialty, or equivalent professional-level cloud certifications. 4. Desired Soft Skills & Attributes Technical mastery of Red Hat Enterprise Linux and automation frameworks is a baseline requirement; however, the true effectiveness of a Product Security Engineer is defined by their professional character and interpersonal aptitude. In a modern DevSecOps environment, security is no longer a siloed function but a shared responsibility. We are seeking a candidate who can navigate the complexities of organizational dynamics with diplomacy, precision, and a relentless focus on the mission. 4.1 Proactive & Analytical Mindset The ideal candidate does not wait for an alert to trigger before taking action. You possess an innate ability to dissect complex system architectures and identify subtle inefficiencies or potential threat vectors before they materialize into operational risks. Ability to perform deep root-cause analysis rather than applying superficial fixes. Proactively hunting for "security technical debt" and proposing scalable automation to resolve it. Anticipating how infrastructure changes will impact the overall security posture. 4.2 Strong Sense of Ownership We value engineers who take radical accountability for the security posture of the products they support. You treat the infrastructure as your own, ensuring that every deployment meets the highest standards of integrity. A "stop-the-line" mentality when critical security flaws are detected in the product lifecycle. Demonstrating persistence in seeing complex security remediations through to completion. Taking pride in maintaining clean, well-documented, and highly secure codebases and configurations. The "Security as an Enabler" Philosophy: Success in this role requires a shift from being a "gatekeeper" to being a "guardrail provider." We are looking for a professional who empowers development teams to move fast securely, rather than slowing them down with manual processes and bureaucracy. 4.3 Excellent Communication & Influence Security risks are often abstract; your job is to make them tangible and actionable. You must be able to translate complex technical vulnerabilities into business-impact terms for non-technical stakeholders, while providing specific, code-level guidance to developers. Strong written communication for creating clear runbooks, security advisories, and architectural documentation. Ability to remain calm and provide clear instructions during high-pressure security incidents. Influence without authority: Persuading cross-functional teams to prioritize security enhancements. 4.4 Collaborative Spirit & Professional Empathy The Product Security Engineer works at the nexus of DevOps, Site Reliability Engineering (SRE), and Development. You must be a team player who values diverse perspectives and understands the operational pressures faced by other teams. Willingness to mentor junior engineers and share RHEL/Security knowledge across the organization. Actively participating in peer code reviews and architectural design sessions. Building relationships across departments to foster a healthy, security-first culture. 4.5 Continuous Learner & Tech Visionary The cybersecurity landscape changes weekly. We need a candidate with a genuine passion for the field who treats learning as a core part of their daily routine. Staying abreast of the latest Red Hat releases, CVEs, and open-source security tooling. Actively participating in the security community (e.g., attending conferences, contributing to open-source projects, or following threat intelligence feeds). An experimentation-focused mindsetwilling to pilot new tools and technologies to improve the organizational security posture. Originally posted on Himalayas

19 days ago

Cloud Architect

FutureFit AI

Remote, south-africa

Full Time

The Cloud Architect (RHEL & Hybrid Cloud Specialist)is a senior-level technical leadership role designed for a visionary engineer who excels at the intersection of enterprise Linux stability and modern cloud agility. As organizations in 2026 increasingly move toward sophisticated hybrid-cloud models to balance performance, cost, and data sovereignty, this role serves as the primary architect and governor of our foundational technology stacks. 1.1 Position Specifications Attribute Details Official Job Title Cloud Architect (RHEL & Hybrid Cloud Specialist) Location Remote Required Experience Minimum 5+ years in Cloud Architecture or Senior Systems Engineering Language Requirements Portuguese and English Key Technology Focus RHEL, Ansible, Kubernetes, Hybrid Cloud (AWS/Azure/GCP) 1.2 Strategic Role Mission The core mission of the Cloud Architect is to design, implement, and govern a world-class hybrid-cloud infrastructure that prioritizes the Red Hat Enterprise Linux (RHEL)ecosystem as its operational backbone. In the current landscape, where financial and technological sectors demand extreme reliability and automated scalability, this role is responsible for ensuring that our infrastructure is not just a collection of servers, but a cohesive, self-healing platform. By treating infrastructure as code (IaC) and leveraging high-level automation via Ansible, the Cloud Architect will bridge the gap between legacy virtualization (KVM/VMware) and public cloud hyperscalers. The incumbent is expected to move the organization away from manual interventions toward an autonomous, policy-driven environment that supports rapid product iterations without compromising security or performance. Strategic Importance: In 2026, Cloud Architecture is defined by the ability to manage complexity through automation. This role is pivotal in reducing "Toil" across engineering teams, optimizing cloud spend through intelligent resource orchestration, and maintaining compliance with data privacy regulations through strict RHEL-based security hardening. 1.3 Key Objectives The successful candidate will be evaluated on their ability to achieve the following high-level objectives: Architectural Governance: Establish and enforce best practices for RHEL deployments across hybrid-cloud environments (AWS, Azure, and GCP). Automation Leadership: Drive the 100% automation goal for server provisioning, configuration management, and patching using Ansible. Modernization Orchestration: Lead the transition of legacy workloads into containerized environments (Docker/Kubernetes) while maintaining deep-level OS integrity. Efficiency Optimization: Proactively identify and resolve system inefficiencies, performance bottlenecks, and resource waste to drive a lean infrastructure culture. DevOps Integration: Seamlessly integrate infrastructure pipelines with application CI/CD workflows (Jenkins/GitLab) to facilitate a true DevSecOps model. 1.4 Candidate Profile We are seeking a proactive technologist who refuses to accept manual work as the status quo. The ideal candidate possesses the analytical depth to troubleshoot a kernel panic on a RHEL instance and the architectural breadth to design a multi-region failover strategy. As a senior member of the team, you will act as a mentor to engineers and a strategic advisor to leadership, ensuring our technology choices align with the long-term scalability requirements of the target markets. 2. Key Responsibilities The Cloud Architect (RHEL & Hybrid Cloud Specialist) is tasked with the strategic design and technical oversight of the organization's infrastructure. This role requires a blend of high-level architectural vision and deep-dive technical implementation to ensure that our cloud ecosystems are resilient, automated, and high-performing. The responsibilities are categorized into the following strategic domains: 2.1 Hybrid-Cloud Infrastructure Design & Strategy The Architect is responsible for the end-to-end design of scalable and secure hybrid-cloud solutions across major hyperscalers (AWS, Azure, or GCP). Architectural Blueprints: Develop and document robust high-level and low-level designs (HLD/LLD) that integrate on-premise data centers with public cloud environments. Security by Design: Implement rigorous security architectures, including VPC/VNet segmentation, IAM policy governance, and encryption standards, ensuring compliance with global and local (POPIA) security frameworks. Multi-Cloud Orchestration: Evaluate business requirements to determine the optimal placement of workloads, facilitating seamless portability between different cloud providers and on-premise virtualization stacks. Disaster Recovery: Design high-availability and disaster recovery (DR) strategies that leverage cloud-native services to ensure business continuity for mission-critical RHEL workloads. 2.2 Enterprise Automation & RHEL Orchestration A primary focus of this role is the elimination of manual configuration through enterprise-grade automation solutions, specifically optimized for Red Hat Enterprise Linux. Ansible Framework Development: Architect and maintain a scalable Ansible automation framework to handle provisioning, configuration management, and application deployment across the RHEL estate. RHEL Lifecycle Management: Design automated workflows for OS patching, kernel tuning, and security hardening (STIG/CIS benchmarks) to ensure all RHEL instances remain performant and compliant. Self-Healing Infrastructure: Implement automated remediation scripts using Python and Ansible to detect and fix common system issues without manual intervention. Standardization: Establish "Golden Image" pipelines for RHEL, ensuring consistency across development, staging, and production environments. 2.3 Systems Optimization & Proactive Problem Resolution: Beyond standard maintenance, the Cloud Architect is expected to be a proactive agent of change. You must continuously monitor the ecosystem to identify systemic inefficiencies and performance bottlenecks. This involves designing architectural interventionssuch as right-sizing cloud resources, optimizing network latency, or re-architecting underperforming componentsbefore they impact business operations. 2.4 CI/CD Strategy & Pipeline Governance The Architect bridges the gap between infrastructure and application development by designing robust delivery pipelines. Pipeline Architecture: Design end-to-end CI/CD strategies using Jenkins or GitLab CI, focusing on Infrastructure as Code (IaC) deployment workflows. Deployment Guardrails: Integrate automated security scanning, unit testing, and compliance checks into the deployment pipelines to "shift-left" security and quality. Release Orchestration: Architect advanced deployment patterns such as Blue-Green, Canary, and Rolling updates to minimize downtime during application releases. 2.5 Technical Governance & Organizational Leadership As a senior leader, the Cloud Architect provides the necessary governance to ensure all technology initiatives align with the broader organizational strategy. Mentorship: Provide technical leadership and hands-on guidance to DevOps and Infrastructure teams, uplifting the organization's overall RHEL and cloud competency. Architectural Standards: Define and enforce the organization's cloud and automation standards, participating in Architectural Review Boards (ARB) to vet new technologies. Vendor Management: Collaborate with partners like Red Hat and public cloud providers to stay ahead of technical roadmaps and leverage new features for competitive advantage. Cost Governance: Monitor cloud consumption metrics and architect cost-optimization strategies to ensure efficient utilization of the organizations technology budget. Strategic Objective Expected Outcome Cloud Adoption maturity Transition from siloed infrastructure to a unified hybrid-cloud model. Automation coverage Reduction of manual deployment errors by >90% through Ansible. System Resiliency Achieving 99.99% uptime for RHEL-based core services. 3. Required Technical Skills & Qualifications The successful candidate must possess a deep and diverse technical background, combining traditional systems engineering excellence with modern cloud-native architectural patterns. This role requires the ability to navigate the entire stack, from low-level kernel tuning to high-level cloud service orchestration. 3.1 Red Hat Enterprise Linux (RHEL) Mastery As the foundational operating system for our hybrid-cloud strategy, expert-level knowledge of the RHEL ecosystem is mandatory. The architect must demonstrate: Advanced Administration: Expert proficiency in RHEL 7, 8, and 9, including lifecycle management, software packaging (RPM/DNF), and systemd orchestration. Enterprise Security & Compliance:In-depth experience with SELinux (policy management, troubleshooting, and enforcement), firewalld, and implementing OpenSCAP for automated compliance auditing. Performance Analysis & Tuning:Ability to diagnose and resolve complex system bottlenecks using tools such as top, iostat, vmstat, sar, and perf, alongside managing tunedprofiles for specific workloads. Infrastructure Services: Strong experience with Red Hat Satellite for content management and Red Hat Identity Management (IdM) / FreeIPA for centralized authentication. 3.2 Automation, Scripting & Infrastructure as Code (IaC) The architect must be an automation-first professional, capable of abstracting complex manual tasks into repeatable, version-controlled code. Ansible Expertise: Expert-level capability in developing modular Ansible Playbooks, Roles, and Collections. Experience with Ansible Automation Platform (AAP) or AWX is highly desired. Advanced Scripting: Mastery of Python(3.x) for custom tooling and API integrations, and Bash for rapid system-level automation and diagnostic scripts. Terraform: Practical experience using Terraform for multi-cloud resource provisioning and managing state files across distributed teams. 3.3 Cloud Platforms & Virtualization Architecture Domain Mandatory Technical Proficiency Public Cloud Architectural experience with AWS (VPC, EC2, Transit Gateway, IAM), Azure (VNets, ExpressRoute, Entra ID), or GCP (Shared VPC, Cloud IAM). Must understand cloud-native networking and security primitives. Virtualization Hands-on experience with KVM/Libvirt for open-source virtualization and VMware vSphere (ESXi/vCenter) for enterprise-grade on-premise infrastructure. Containerization Deep understanding of Docker/Podman container runtimes and Kubernetes (K8s) architecture. Specific experience with Red Hat OpenShift is a significant advantage. 3.4 CI/CD & DevOps Tooling Experience in designing and maintaining enterprise-scale CI/CD pipelines is critical for modern delivery cycles: Jenkins: Experience with Pipeline-as-Code (Groovy), shared libraries, and managing distributed build agents. GitLab CI: Proficiency in designing YAML-based pipelines, utilizing runners, and managing container registries. Version Control: Advanced knowledge of Git (branching strategies, merge requests, and hook management). 3.5 Education and Professional Certifications While we value hands-on experience and a proven track record, the following qualifications are considered highly advantageous in our evaluation process: Bachelors degree in Computer Science, Information Technology, or a related field. Red Hat Certified Architect (RHCA) or Red Hat Certified Engineer (RHCE). Cloud Provider Professional Certifications: AWS Certified Solutions Architect – Professional, Microsoft Certified: Azure Solutions Architect Expert, or Google Professional Cloud Architect. Certified Kubernetes Administrator (CKA) or Red Hat Certified Specialist in OpenShift Administration. 3.6 Minimum Years of Experience Candidates must have a minimum of five (5) years of demonstrable experience in a Cloud Architect, Solutions Architect, or Senior Systems Engineering role, with a clear focus on enterprise Linux and multi-cloud environments. 4. Desired Soft Skills Technical prowess in RHEL and automation is only one half of the requirement for a Cloud Architect. To be successful in this role, the candidate must possess the professional maturity and interpersonal acumen required to navigate complex organizational structures, mentor diverse engineering teams, and translate high-level business goals into actionable technical roadmaps. 4.1 Strategic Thinking & Visionary Leadership The Cloud Architect must look beyond immediate technical "firefighting" to anticipate the long-term needs of the organization. This involves: Developing and maintaining a three-year hybrid-cloud roadmap that aligns with the rapid evolution of the technology landscape. Assessing the long-term implications of choosing specific tools or architectural patterns over others (e.g., proprietary vs. open-source RHEL-based solutions). Balancing the desire for technical perfection with the pragmatic need for timely business delivery. 4.2 Exceptional Communication & Stakeholder Engagement A significant portion of this role involves acting as a bridge between the engineering trenches and the executive suite. Mandatory communication skills include: Verbal: Ability to articulate complex architectural concepts clearly during stand-ups, town halls, and executive briefings. Written: Proficiency in drafting comprehensive architectural decision records (ADRs), technical whitepapers, and operational runbooks that are accessible to various skill levels. Presentation: Skilled at creating visual representations of cloud topologies and automation workflows to gain "buy-in" from stakeholders during review boards. 4.3 Influencing Without Direct Authority In our matrixed organization, the Cloud Architect often leads cross-functional DevOps and Infrastructure squads. You must demonstrate the ability to drive technical adoption, enforce RHEL standards, and steer teams toward best practices using technical credibility, empathy, and negotiation skills rather than formal management power. 4.4 Advanced Analytical Problem-Solving We are looking for an architect who is not content with simply fixing a symptom but is driven to find the root cause of systemic inefficiencies. Ability to synthesize data from multiple sources (logs, cloud metrics, financial reports) to identify performance or cost bottlenecks. A proactive "detective" mindset that seeks out technical debt and designs structured plans to pay it down before it impacts stability. Resilience and methodical thinking during high-pressure troubleshooting scenarios. 4.5 Business Acumen & Value Alignment Technology at this scale is a significant investment. The Cloud Architect must understand the business behind the bytes: Understanding Total Cost of Ownership (TCO) when comparing RHEL on-premise vs. public cloud services. Aligning infrastructure scaling policies with business growth cycles and seasonal peaks. Identifying opportunities for technology to provide a competitive advantage, such as faster time-to-market through automated CI/CD pipelines. Soft Skill Pillar Expected Behavioral Indicator Conflict Resolution Mediates technical disagreements between Dev and Ops teams to reach a stable consensus. Mentorship Actively uplifts junior and mid-level engineers through code reviews and design feedback. Adaptability Remains open to new methodologies and shifts in cloud provider strategies without rigid adherence to legacy patterns. 5. Reporting Structure & Collaboration The Cloud Architect (RHEL & Hybrid Cloud Specialist) occupies a high-impact, senior-level position within the global technology organization. This role is designed to transcend siloed technical functions, acting as a strategic pivot point between executive leadership, architectural governance, and hands-on engineering execution. 5.1 Organizational Hierarchy The Cloud Architect operates within the Group Enterprise Architecture division. This positioning ensures that infrastructure decisions are made with a holistic view of the company's long-term digital transformation goals. Direct Reporting Line: This position reports directly to the Head of Cloud Architecture or the Chief Enterprise Architect. Functional Oversight: While this is an individual contributor role in terms of direct HR reports, the Architect maintains dotted-line functional authorityover technical leads within specific project squads to ensure architectural compliance. Executive Interaction: The incumbent will periodically present infrastructure roadmaps and cost-optimization strategies to the CTO (Chief Technology Officer) and CISO (Chief Information Security Officer). Architectural Governance: The Cloud Architect serves as a permanent member of the Architectural Review Board (ARB) , responsible for vetting all major infrastructure changes, RHEL configuration standards, and cloud service adoption across the business units. 5.2 Key Collaborative Relationships Successful delivery in this role is contingent upon high-frequency, high-quality collaboration across multiple technical and business domains. The Architect does not operate in isolation but serves as a facilitator of technical excellence. Stakeholder Group Nature of Collaboration DevOps & Platform Engineering Partnering to implement automated RHEL provisioning workflows and Ansible-based configuration management. Ensuring Infrastructure-as-Code (IaC) standards are strictly followed. Site Reliability Engineering (SRE) Collaborating on system observability, defining Service Level Objectives (SLOs), and architecting self-healing mechanisms within the RHEL environment to minimize manual intervention. Cybersecurity & Risk Teams Working closely to ensure SELinux policies, kernel hardening, and cloud IAM frameworks meet enterprise security standards and local POPIA regulatory requirements. Product Managers Translating product feature requirements into infrastructure capacity plans. Advising on the feasibility and cost-implications of new technical initiatives. External Vendors (Red Hat/Cloud Providers) Managing technical relationships with Red Hat and hyperscalers (AWS/Azure/GCP) to escalate complex issues and influence product roadmaps in favor of the organizations needs. 5.3 Team Integration and Mentorship While the Cloud Architect focuses on high-level strategy, they are expected to remain "plugged into" the engineering squads. This is achieved through: Participation in Agile Ceremonies: Attending sprint planning and retrospectives for core infrastructure squads to provide real-time architectural guidance. Cross-Skilling Initiatives: Leading internal "Communities of Practice" focused on Linux excellence and automation to uplift the skills of junior and mid-level administrators. Incident Escalation: Acting as the Level 4 architectural escalation point for complex, systemic outages that require deep-level RHEL or cloud networking expertise. 5.4 Geographical & Working Model Synergy Given the remote nature of the role in the 2026 global market, the Architect must be proficient in asynchronous collaboration. This includes leveraging digital whiteboarding tools, Slack/Teams for rapid coordination, and robust documentation in Confluence or similar knowledge-sharing platforms to ensure that architectural alignment is maintained across distributed time zones and regions. Originally posted on Himalayas

19 days ago

Kafka Specialist

Datonomy Solutions (Cape Town)

Sandton, south-africa

Default

We are seeking an experienced Technology Specialist – Kafka to design, administer, automate, secure, and optimise enterprise Kafka platforms supporting mission-critical banking applications.This role is responsible for ensuring the stability, scalability, resilience, and security of Kafka environments while driving automation, DevOps best practices, and cloud adoption.The successful candidate will combine deep Kafka platform engineering expertise with Linux administration, Infrastructure-as-Code, observability, and cloud engineering to deliver highly available event streaming infrastructure that supports modern banking systems and real-time data integration.Key ResponsibilitiesKafka Platform Administration Install, configure, upgrade, patch and maintain enterprise Kafka clusters. Administer Confluent Platform and/or Confluent Cloud environments. Manage brokers, topics, partitions, replication and consumer groups. Optimise Kafka cluster performance, throughput and latency. Perform capacity planning and scaling of Kafka infrastructure. Troubleshoot broker failures, replication issues and performance bottlenecks. Support production incidents and perform root cause analysis. Design highly available Kafka platforms across multiple environments. Implement resilient architectures for business-critical messaging workloads. Configure multi-broker clusters with appropriate replication and fault tolerance. Support disaster recovery and high availability strategies. Maintain platform documentation and operational runbooks. Infrastructure as Code Platform provisioning Automated deployments Configuration management CI/CD integration Environment standardisation Terraform Ansible Python Bash Azure DevOps Git Performance tuning Storage optimisation Network troubleshooting Service management Operating system maintenance Capacity management Log analysis TLS/SSL encryption SASL authentication ACL administration Certificate lifecycle management Identity integration Secure client connectivity Compliance with enterprise security standards Azure networking Virtual Machines Managed services Storage Identity integration Hybrid deployments Cloud security Platform optimisation Health monitoring Performance dashboards Alerting Capacity monitoring Log aggregation Distributed tracing Incident diagnostics Prometheus Grafana ELK Stack Splunk Azure Monitor Support production platforms within SLA. Lead technical investigations. Perform root cause analysis. Recommend permanent fixes. Participate in major incident resolution. Drive platform stability improvements. Platform Engineers DevOps Engineers Infrastructure Teams Cloud Engineers Security Teams Application Developers Architecture Teams Operations Teams 6+ years' experience in Systems Engineering, Platform Engineering or Infrastructure Engineering. 4+ years' hands-on Kafka administration. Enterprise production support experience. Experience supporting highly available distributed systems. Experience automating infrastructure and operational processes. Experience working within DevOps environments. Apache Kafka Confluent Platform Confluent Cloud Broker administration Topic management Consumer groups Partition management Replication Cluster upgrades Performance tuning Capacity planning Python Bash Terraform Ansible CI/CD Pipelines Azure DevOps Git Linux Administration Shell scripting Performance tuning System troubleshooting Microsoft Azure Azure networking Azure infrastructure Azure Monitor Hybrid cloud environments TLS/SSL SASL ACLs Certificates Encryption Authentication Authorisation Prometheus Grafana ELK Stack Splunk Azure Monitor Log analysis Alerting Performance monitoring Banking or Financial Services experience. Confluent Cloud implementation experience. Enterprise messaging platforms. Event-driven architecture. Kubernetes or container platforms. Docker. Site Reliability Engineering (SRE). Platform Engineering. Infrastructure as Code at enterprise scale. Confluent Certified Developer or Administrator Microsoft Azure Administrator Microsoft Azure Solutions Architect Azure DevOps Engineer Red Hat Certified System Administrator (RHCSA) Terraform Associate Kubernetes Certifications (CKA/CKAD) Desired Skills: Kafka Operations Kafka Platform Engineering Event Streaming

20 days ago