IT Security Platform Engineer

SUMMARY:
Join the team at Barefoot Cyber!

Barefoot Cyber is a partner at IT Naledi Solutions. 

If you're ready to take the next step in your career, we'd love to hear from you: employment@itnaledi.co.za

See below for details on this exciting opportunity: 

We’re looking for a hands-on Platform Engineer to own the reliability, security, and continuous improvement of our production SIEM/SOC/IR/observability platform. You’ll be responsible for keeping customer tenants stable and meeting strict SLA-backed uptime targets through strong Linux and AWS operations, disciplined incident management, and proactive capacity and lifecycle management.

You’ll modernise and secure our delivery pipeline by maintaining IaC and building CI/CD automation (including container vulnerability scanning and safe, interruption-free deployments), while planning and documenting a migration path to EKS (or similar). This role also owns DR readiness and works closely with the team to uplift platform security controls and mentor junior engineers.

POSITION INFO:
Key responsibilities:

• Ensure uptime, stability, and incident resolution of our current production SIEM/SOC/IR/Observability systems
  • This includes sysadmin functions like resource and capacity management
  • Our customer SIEM tenants are backed by an SLA with punitive measures, ensuring the uptime SLA is met is critical to our business
• Use your AWS & Linux experience to improve architecture
• Manage the lifecycle of SIEM infrastructure and applications, including provisioning, scaling, patching, and upgrading.
• Provide L1 and L2 support relating to SIEM Infrastructure and Applications.
  • Perform after-hours break fix support for the platform should a production instance be affected
  • Ensure that these occurrences are an absolute fringe-case
• Maintain our current IaC and deployment code
• Develop and implement new CICD pipelines to:
  • Scan all containers for vulnerabilities
  • Securely and reliably deploy code with no interruption
  • Improve automation across the board to make sure you are spending less time fixing broken things or deploying, but rather building new features/rules/enhancements for our customers security posture
• Document, plan and migrate our current SIEM & SOC applications to EKS or similar
• Document, plan and implement new SIEM/SOC tools (or improve existing ones) and architect new automations
• Own the current DR plan, review and ensure we can commit to the SLA uptime we have promised our customers, identifying risks or proposing new architecture to suit the environment
• Apply your industry knowledge to improve our service offering and mentor junior resources
• Increase/improve the security controls of our platform

• Proven experience running and supporting production SIEM/SOC/IR/observability platforms with strict uptime/SLA requirements
• Strong Linux systems administration: performance/capacity management, patching/upgrades, troubleshooting, incident response
• Strong AWS experience with a track record of improving architecture for reliability, scale, and cost efficiency
• Infrastructure lifecycle management: provisioning, scaling, hardening, maintenance, and upgrade planning
• Hands-on L1/L2 operational support capability, including after-hours break-fix for production incidents
• IaC and deployment automation experience (e.g., Terraform/CloudFormation) and maintaining existing codebases
• CI/CD engineering to enable secure, reliable, low/no-downtime deployments
• Container and platform security practices: vulnerability scanning, remediation workflows, and security control improvements
• Kubernetes/EKS experience (or proven migration planning) including documentation, planning, and execution
• DR ownership: DR planning/testing, risk identification, and ensuring SLA commitments are achievable
• Ability to mentor junior engineers and drive continuous improvement through automation and best practice

• Degree or Diploma in Computer Science, Information Systems, Engineering, or a related technical field (or equivalent practical experience)
• AWS certification (one or more): Cloud Practitioner / Solutions Architect (Associate/Professional) / SysOps Administrator / DevOps Engineer
• Kubernetes certification (preferred): CKA/CKAD and/or AWS EKS–focused certification/training
• Linux certification (advantage): RHCSA/RHCE, LPIC, or equivalent
• DevOps/SRE or security-related certifications (advantage): Terraform, Docker, ITIL, Security+ (or similar)

NB! This job is now closed. You can apply for other jobs by uploading your CV.