Specialist: Devsecops Cloud and Identity

**Mission/ **Core purpose of the Job**

The Specialist: DevSecOps, Cloud and Identity will be responsible for planning, implementing and improving Security Controls and Capabilities in Cloud and DevSecops Architecture to support MTN’s new digital products and solutions strategy. The purpose is to ensure the efficient and effective delivery of DevSecOps, Cloud and Identity security capabilities and controls for MTN Group and its subsidiaries.

**Context**

MTN’s heightened focus on digitalization for adjacent revenue streams and enhancing efficiency poses a great growth opportunity for the organisation. This has introduced with it the deployment of various technologies including, amongst others, cloud, IoT, Software Engineering with Digital Projects (Fintech, Ayoba, Chenosis, etc.) increasing in number and complexity; and many of those projects adopt an agile methodology to create new products and solutions based on DevSecOps practices.

The introduction of these new technologies coupled with the increased focus of regulators on compliance to various regulatory requirements, including the protection of personal information and various data regulations (e.g. data sovereignty), necessitates the need for increased focus on ensuring proactive management of relevant security related compliance requirements, including support on configuration of technology deployments in line with security, risk, and regulatory requirements

The urgency for change has become more heightened amidst increased competitive intensity across all markets in which MTN operates. The Group’s Information Security function must therefore ensure the successful delivery in context of:

- Rapidly changing ICT environment
- The geographic complexity of MTN’s footprint across Africa and the Middle East
- Management of executive and local shareholder expectations across all 20 OpCos
- Achievement of top quartile operating efficiency and effectiveness through scale and common processes
- Driving growth through business intelligence and standardization to maximize business impact
- Management of customer and supplier expectations
- Enhance MTN position as a leading network and system provider
- Constant dynamics and local challenges in the economic, regulatory and legal environments

**Key Performance Areas**

The Specialist DevSecOps, Cloud and Identity will be responsible for the following:

- Provide technical DevOps, Cloud and Identity security expertise to Manco team in support of the Opcos.
- Perform architecture reviews, maintenance and management of the necessary security capabilities and controls.
- Planning, implementing and improving Security Controls and Capabilities in Cloud and Devops Architecture.
- Identify, integrate, monitor and improve infosec controls by understanding business processes in Digital & Fintech Software Engineering environments.
- Assist with complex projects and security capability enablement to support security operations.
- Conduct network and system tests to highlight and find any weaknesses that may be exploited.
- Assist in defining security requirements and review of system architecture to determine if they have been designed to comply with established security standards.
- Develop new information security standards as necessary.
- Plan, Design and support the Implementation of security Controls on Api’s, and Api Gateways.
- Implement strong access control and Authentication on Api’s and Api Gateways
- Assess and remediate security vulnerabilities and risks to Api’s and Api Gateways.
- Support the implementation of encryption and other data protection techniques on Api’s and Api Gateways.
- Support the implementation of security controls on containers, Virtual machines and other supporting cloud infrastructure.
- Design, implement, support and evaluate security-focused tools, vulnerably management tools and services.
- Support current CIAM; CASB ; CWPP ; DAST and SAST security capability rollouts and expansion.
- Participate in incident handling and other related duties to support the information security operations and governance functions
- Provide technical security support to OpCo IT operations ,security tool integration, automation, change management and development operations.
- Install, test and deploy DevSEcOps, Cloud and Identity solutions
- Evaluate, select, design and implement security infrastructure in a global environment.
- Support and conduct internal technical reviews and help mitigate security findings and implement improvement measures.

**Job Requirements**

**Education**:

- Three-year tertiary qualification in Computer Engineering or similar preferred
- Software Development Formal qualification advantageous
- CCSP; CCSK, CISM or related cloud security certification is preferred.
- Cloud Security Certifications like Azure/GCP/AWS Certified Security Specialty is preferred.
- Industry recognized certification (CEH) is preferred

**Experience**:

- 3 years of relevant work expe