REQ-07
- required for ISO 27001 and internal audit.
6. Cost Management & Optimisation
- Track and report spend across all cloud providers and hosting by workload and department.
- Monitor consumption against budget and alert on variance before it becomes material.
- Implement optimisation, including rightsizing, reserved instances and committed-use discounts, storage tiering and decommissioning of unused resources.
- Compare the cost of running workloads in public cloud, with independent providers and in co-location, and recommend the most cost-effective placement.
7. Alignment, Reporting & Escalation
- Align work to, and execute, the direction and strategy set by the IT Executive.
- Communicate progress and escalate issues and risks to the IT Executive, through the Head of IT where appropriate, promptly and transparently.
REQ-07
Qualifications
- Bachelor’s degree or national diploma in Computer Science, Information Systems, Engineering or a related field.
- Microsoft Azure Administrator Associate (AZ-104) or Google Associate Cloud Engineer required; Azure Solutions Architect Expert (AZ-305) or Google Professional Cloud Architect advantageous.
Experience
Essential
- Minimum 5–7 years’ infrastructure experience, including at least 3 years engineering and operating public cloud environments.
- Hands-on experience with Microsoft Azure and working experience of Google Cloud Platform.
- Experience managing virtualised servers in data centres or co-location facilities alongside cloud environments.
- Experience implementing infrastructure as code (Terraform preferred for multi-cloud, or Bicep).
- Experience designing and testing backup and disaster recovery for business-critical systems.
- Scripting ability (PowerShell, Bash, Azure CLI or gcloud).
Preferred
- Experience operating a multi-cloud environment, including migrating workloads between providers.
- Experience with independent or regional cloud service providers and co-location facilities in South Africa.
- Experience with cloud cost management or FinOps practice.
- Experience in a regulated environment, or exposure to ISO 27001, CIS or NIST controls.
Technical Competencies
- Microsoft Azure — Compute, Storage, Networking & Entra ID
- Google Cloud Platform — Compute, Storage, Networking & IAM
- Independent Cloud Service Providers & Co-located Hosting
- Server Virtualisation (VMware, Hyper-V)
- Multi-Cloud Networking, Firewalls & Private Interconnects
- Infrastructure as Code (Terraform, Bicep)
- Workload Placement & Migration
- Backup, Disaster Recovery & Cross-Provider Recovery
- Monitoring & Logging across Providers
- Cloud Security Posture (Azure Policy, Defender for Cloud, Security Command Center)
- Multi-Provider Cost Management & FinOps
- Scripting (PowerShell, Bash, Azure CLI, gcloud)
Core Competencies
- Reliability Focus — designs for failure and proves recoverability rather than assuming it.
- Commercial Judgement — places workloads where cost, performance and risk are best balanced.
- Security Awareness — builds secure by default rather than remediating later.
- Problem Solving — diagnoses infrastructure issues methodically across providers and under pressure.
- Ownership & Accountability — owns the availability of the platforms the organisation depends upon.
Key Performance Indicators (KPIs)
- Availability of services hosted across all cloud providers and co-located data centres against agreed service levels.
- Backup success rate and successful restore test results.
- Disaster recovery test outcomes against defined recovery time and recovery point objectives.
- Spend across all providers against budget, and savings delivered through workload optimisation.
- Secure configuration and policy compliance across providers, and remediation of findings.
- Delivery of workload migrations against plan.
- Proportion of infrastructure provisioned through code rather than manual configuration.
Regulatory, Risk & Information Security Responsibilities
- Comply with POPIA in the handling of personal and special personal information, including member health information, and with the Cybercrimes Act, reporting any suspected unlawful access or compromise without delay.
- Adhere to Kaelo information security policies and the frameworks the organisation aligns to, including FSCA Joint Standard 2 of 2024, ISO/IEC 27001, the CIS Controls and the NIST Cybersecurity Framework.
- Maintain the evidence required to support the ISMS and internal, external and certification audits within the area of responsibility.
- Escalate security incidents, control weaknesses and operational risks promptly, and complete all mandatory compliance and awareness training.
Personal Attributes
- Accountability
- Action orientated
- Collaborative
- Communication
- Business writing skills
- Manage complexity
- Problem solving skills
- Decision thinking
- Encourages engagement
- Resilient and adaptive
- Resourceful
- Demonstrates self-awareness
- Purpose driven
- Significance and values orientated