Sanlam Group Technology is seeking a highly skilled Senior Infrastructure Security Engineer to join our team. In this role, you will play a critical part in securing and managing the infrastructure and systems that form the backbone of Sanlam’s operations. This position requires deep expertise in Active Directory security, cloud security, identity and access management, as well as network and operating system security. You will work closely with various teams to ensure the highest levels of security resilience across our technology platforms.

Key Responsibilities:

Active Directory Security Management:

• Design and manage security configurations for multi-domain Active Directory environments.
• Perform regular security assessments and audits of AD infrastructure to ensure a secure environment.
• Develop and enforce security policies related to AD, including password, account lockout, and privileged access management.

Identity and Access Management (IAM):

• Oversee the lifecycle of AD accounts, groups, and organizational units (OUs).
• Implement and manage Role-Based Access Control (RBAC) and least-privilege access models.

Incident Response and Threat Mitigation:

• Serve as the primary point of contact for the Cyber Security Incident Response Team (CSIRT) during investigations of security incidents.
• Develop and maintain incident response playbooks related to AD, firewalls, and VPN.
• Collaborate with the Security Operations Center (SOC) to detect and respond to threats.
• Implement security measures to protect AD against common threats like Pass-the-Hash, Golden Ticket attacks, and Kerberoasting.

Infrastructure Management:

• Implement disaster recovery solutions for AD, including backup and restore processes.
• Plan and manage the lifecycle of SIEM services, ensuring upgrades and migrations are carried out efficiently.
• Ensure compliance with regulatory standards and industry best practices for infrastructure security.

Collaboration and Communication:

• Work closely with cybersecurity, compliance, architecture, and operations teams to align infrastructure security with organizational goals.
• Provide technical leadership and mentorship to junior engineers and IT staff.
• Prepare reports on AD security posture for senior management and stakeholders.
• Represent the team as a senior technical expert in project meetings and contribute to strategic planning for the Cyber Security team.

Third-Party and Service Provider Management:

• Manage 3rd party consultants and service providers to support specific security initiatives.
• Coordinate technical efforts to improve cyber resilience across the organization.

Qualifications & Certification:

• Education: Matric, Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• Certifications: CISSP, CISM, Microsoft Certified: Identity and Access Administrator Associate, or similar credentials are preferred.

Experience & Skills:

• Experience: Minimum 7 years in IT security, with at least 5 years focused on Active Directory and infrastructure security.
• Technical Skills:
  • Expertise in securing multi-domain AD environments.
  • Experience with AD integration in hybrid cloud environments.
  • Proficiency in networking, firewalls (Checkpoint or FortiGate), SIEM tools, and operating systems (Windows and Unix/Linux).
  • Experience in AD migrations, mergers, and restructures.
  • Strong understanding of threat detection, response, and mitigation.

Personal Attributes:

• Strong decision-making skills and ability to optimize work processes.
• Effective communication and interpersonal skills.
• Ability to build effective teams and mentor junior staff.
• Resilient and adaptable in a fast-paced, dynamic environment.

Build a Successful Career with Us

At Sanlam, we are committed to providing opportunities for growth and development. Join us and build a fulfilling career with access to various business clusters and resources designed to support your personal and professional development.

Core Competencies:

• Resilience and adaptability
• Collaboration and innovation
• Customer focus and results-driven approach