Cloud Security And Devsecops Consultant
CurrentAs a Cloud Security Consultant, I provide consulting services to the broader group in terms of the security of Cloud deployed solutions. This includes ensuring the integration of the cloud environment with existing on-premises security operations tooling and environments, embedding Cloud processes into existing Incident Response capabilities, and assessing the risk of newly proposed Cloud-based solutions (be they developed within the Group or acquired externally).Sanlam uses AWS predominantly as it’s Cloud Service Provider of choice, however, due to the ubiquity of the Microsoft toolset across the business, further expansion into Microsoft Azure is currently in progress. As CSC I have provided consulting services in the development of the Azure Landing Zone, implementation of the initial components, and consulting on security in new Azure workloads.As a DevSecOps Consultant I drive the implementation of security capabilities within the DevOps environment across the Group. This includes creating a generalized, technology-agnostic model for DevSecOps which is used to guide the measurement of maturity of implementations, the creation of standards to be applied across the group, assisting with implementation of the designed security controls, and monitoring the DevSecOps environment for compliance and improvement.