Job Description

Our client is seeking an expert infrastructure security engineer who pioneers Zero Trust Architecture implementation to ensure stable, secure operations of enterprise Windows client environments!
Design and deploy sophisticated Zero Trust solutions using SASE/SSE architectures, ZTNA, conditional access policies, and endpoint protection platforms across global infrastructure!
The ideal candidate is a security-focused infrastructure expert with 10+ years of IT experience who brings deep knowledge of Zero Trust principles (NIST, Forrester, BeyondCorp), holds Microsoft and endpoint management certifications, excels at implementing micro-segmentation and least-privilege access controls, and demonstrates strong analytical thinking with proven ability to adapt complex security concepts into successful implementations!
Expert infrastructure engineering with Zero Trust Architecture
Hybrid and remote working flexibility with 1960 flexible annual hours
Enterprise security role with SASE/SSE and identity management
POSITION: Contract: 01 February 2026 31 December 2028
EXPERIENCE: Minimum 10 years practical experience in technologies within IT
COMMENCEMENT: 01 February 2026
LOCATION: Hybrid: Midrand/Menlyn/Rosslyn/Home Office rotation
TEAM: Workspace OS and App Platform
Qualifications / Experience

• BSc Degree or BCom Degree or BTech Diploma
• Minimum 10 years practical experience in technologies within IT
• Microsoft Certified: Microsoft 365 Administrator and/or Azure Administrator Associate and/or Azure Solutions Architect Expert
• Endpoint Management Certification (Workspace One, Intune)
• ITIL V3/V4 Foundation
• Ability of working in teams that consist of several nationalities and cultures
• Interest in technology stacks
• Analytical thinking
• Strong Documentation skills
• Strong ability to adapt concepts and bring them to successful implementation
• Good communication skills

Essential Skills Requirements

• Basic Understanding of Network Architecture: Familiarity with network design principles and concepts
• Awareness of Zero Trust Concepts: Basic knowledge of Zero Trust principles and an eagerness to explore related technologies
• Interest in SASE/SSE Architectures: Willingness to learn about the design and implementation of SASE and SSE solutions. Basic knowledge of components such as SD-WAN, CASB, ZTNA, SWG, etc., with a willingness to learn more
• Familiarity with Identity and Access Management: Understanding of identity management and security practices, with a willingness to learn more
• Strong knowledge of Zero Trust principles: NIST, Forrester, Google BeyondCorp, etc.
• Experience with endpoint protection platforms: e.g., Microsoft Defender, CrowdStrike
• Experience with IAM: Okta, Azure AD / ENTRA, Ping Identity, Conditional Access and ZTNA
• Familiarity with SIEM tools: e.g. Splunk, Sentinel
• Familiarity with: PKI, encryption, and secure remote access (SDP)
• Certifications like: CISSP, CCSP, CISM, Microsoft SC-100 or SANS Zero Trust
• Willingness to Learn Integration Skills: Openness to developing skills in network integration and access management for various operating systems
• Ability to Communicate Technical Concepts: Capability to explain technical issues clearly and a desire to improve communication skills
• Organizational Skills: Ability to manage tasks effectively and prioritize work in a dynamic environment
• Language Proficiency: Good communication skills in English, spoken and written

Advantageous Skills Requirements

• Independence: Ability to work autonomously and take initiative in problem-solving
• Responsibility: Strong sense of accountability for tasks and projects
• Communication Skills: Excellent verbal and written communication skills, capable of conveying complex technical concepts clearly
• Flexibility: Adaptability to changing requirements and environments, with a willingness to learn and grow
• Team Collaboration: Ability to work effectively within a team, fostering a collaborative environment
• Analytical Thinking: Strong analytical skills to assess problems and develop effective solutions
• Attention to Detail: Meticulous attention to detail to ensure high-quality deliverables and compliance with standards
• Time Management: Effective time management skills to prioritize tasks and meet deadlines
• Proactive Mindset: A proactive approach to identifying potential issues and implementing preventive measures
• Customer Focus: Commitment to understanding and meeting the needs of internal and external stakeholders

Role Requirements

• Design and implement Zero Trust Architecture (ZTA) for client environments within a team
• Collaborate with identity and access management teams to enforce least privilege access
• Define conditional access policies: following basic rules like, "Never Trust, Always Verify"
• Implement micro-segmentation and least-privilege access controls
• Integrate SIEM, XDR, and continuous monitoring for real-time threat detection
• Work with ZTNA (Zero Trust Network Access) solutions (e.g., Cloudflare, Zscaler)
• Conduct risk assessments and ensure compliance with frameworks (NIST SP 800-207, ISO 27001, CISA ZT Maturity Model)

NB:
South African citizens/residents preferred. Valid work permit holders will be considered. By applying, you consent to be added to the database and to receive updates until you unsubscribe. If you do not receive a response within 2 weeks, please consider your application unsuccessful.
#isanqa #InfrastructureEngineer #Expert #ZeroTrust #CyberSecurity #SASE #ZTNA #Azure #EndpointSecurity #IAM #CloudSecurity #ITHub #NowHiring #fuelledbypassionintegrityexcellence
iSanqa is your trusted Level 2 BEE recruitment partner, dedicated to continuous improvement in delivering exceptional service. Specializing in seamless placements for permanent staff, temporary resources, and efficient contract management and billing facilitation, iSanqa Resourcing is powered by a team of professionals with an outstanding track record. With over 100 years of combined experience, we are committed to evolving our practices to ensure ongoing excellence.

Skills Required