Cloud Security Engineer

About the company

Moniepoint is a Nigerian financial platform providing business banking, payments, credit, and management tools to MSMEs and their customers across Africa.

About this role

<p><strong>Who we are</strong></p> <p><a href="https://moniepoint.com/careers" target="_blank">Moniepoint</a>&nbsp;is an all-in-one financial services platform for emerging markets and the second-fastest growing company in Africa.<br>Since 2019, Moniepoint’s technology has powered over 3 million people, offering personal and business banking, payment, credit and business management tools to help them succeed. Moniepoint processed $182 billion in 2023, and currently processes the majority of the POS transactions in Nigeria</p> <p><em>Curious about what makes Moniepoint an incredible place to work?</em><a href="https://moniepoint.com/blog"><em>&nbsp;</em><em>Check out posts on how we cultivate a culture of innovation, teamwork, and growth.</em></a></p> <p><strong>About the role</strong></p> <p class="p1">You will engineer secure, automated, and scalable cloud environments across GCP, AWS and Azure. You will embed security into Terraform-based provisioning workflows, enforce hardened baselines through golden images and guardrails, and drive technical enforcement of best practices across infrastructure layers, from identity to workloads</p> <p class="p1"><span class="s1"><strong>Responsibilities:</strong></span></p> <ul> <li>Design and implement security controls across cloud environments such as GCP, AWS, and Azure.</li> <li>Develop and maintain IaC modules and Ansible playbooks for secure infrastructure automation.</li> <li>Leverage CSPM and CNAPP platforms to manage cloud security posture, identity risks, and vulnerability remediation.</li> <li>Configure and optimize CASB, ZTNA, SaaS visibility, and data protection controls.</li> <li>Build automated guardrails, policy enforcement, and detection logic using cloud-native tools.</li> <li>Improve and maintain IAM governance, least privilege access, and identity lifecycle workflows.</li> <li>Enhance network security, workload protection, logging, monitoring, and encryption/KMS configurations.</li> <li>Deploy and manage Kubernetes security initiatives across clusters and workloads.</li> <li>Contribute to cloud incident response, threat investigations, and detection engineering efforts.</li> <li>Drive continuous improvement of cloud security tooling, automation, and operational processes.</li> <li>Ensure cloud environments align with CIS, NIST, and internal governance requirements.&nbsp;</li> <li>Keeping cloud infrastructure current, making recommendations,&nbsp; and continually improving cloud security technologies.&nbsp;</li> <li>Working with analysts, engineers, and data scientists across the&nbsp; organization to continually improve cyber resilience.</li> <li>Take part in post-incident reviews and propose engineering&nbsp; resolutions to improve results in any future recurrence.</li> </ul> <p class="p1"><span class="s1"><strong>Requirements:</strong></span></p> <ul> <li>3+ years of experience in DevSecOps, or Cloud Security roles.</li> <li>Bachelor’s degree in Computer Science, Information Security, or related fields</li> <li>Hands-on experience securing cloud environments (GCP, AWS, Azure), including implementing IAM, network, workload, logging, monitoring, and encryption controls.</li> <li>Hands-on experience with Terraform and Ansible for provisioning and automating secure infrastructure.</li> <li>Familiarity with cloud security tools such as Wiz (for CSPM, CNAPP, and identity/security posture management) and Netskope (for CASB, ZTNA, and SaaS/cloud access security).</li> <li>Proficient in container security and Kubernetes (RBAC, secrets management, cluster hardening) and hardened Linux baselines.</li> <li>Working knowledge of image-building tools (e.g., Packer, AWS Image Builder) and cloud-native security tooling.</li> <li>Comfortable working in GitOps environments and integrating security into GitLab CI/CD pipelines.</li> <li>Ability to implement automated security guardrails, detection logic, and CI/CD security integrations.</li> <li>Understanding of cloud security standards and frameworks such as CIS, NIST, or ISO 27001.</li> <li>Strong collaboration, communication, and problem-solving skills; able to guide teams on secure practices.</li> </ul> <p><strong>Nice-to-have:</strong> Python or Go scripting for automation</p> <p class="p1"><strong>Certifications:</strong></p> <p>Relevant cloud certifications include:&nbsp;</p> <ul> <li>CCSP – Certified Cloud Security Professional</li> <li>CCSK – Certificate of Cloud Security Knowledge</li> <li>AWS Certified Security – Specialty</li> <li>Google Professional Cloud Security Engineer</li> <li>Azure Security Engineer Associate (AZ-500)</li> </ul> <p><strong>What we can offer you</strong></p> <ul> <li><strong>Culture -</strong>We put our people first and prioritize the well-being of every team member. We’ve built a company where all opinions carry weight and where all voices are heard. We value and respect each other and always look out for one another. Above all, we are human.</li> <li><strong>Learning - </strong>We have a learning and development-focused environment with an emphasis on knowledge sharing, training, and regular internal technical talks.</li> <li><strong>Compensation - </strong>You’ll receive an attractive salary, pension, health insurance, annual bonus, plus other benefits.</li> </ul> <p><strong>What to expect in the hiring process</strong></p> <ul> <li>A take home assessment</li> <li>A technical panel interview&nbsp;</li> <li>A behavioural and technical interview with the Hiring Manager</li> </ul> <p>&nbsp;</p>