About this role

As a Tech Lead, you’ll solve complex architecture and business problems. You’ll have the opportunity to lead and contribute to a number of IT projects and systems developments. The suite of internal business systems spans a number of different integrated applications, so experience in end-to-end systems thinking across different integrated components is critical for this role.

This role will be based at our Kenya headquarters in Nairobi.

What you’ll do

• Create a technical strategy and systems roadmap, and deliver it with limited guidance. Manage and own technical architecture decisions that affect different business units and lead in designing, implementing, and rolling out integrated business systems.
• Provide technical leadership through collaboration with other business units, users, and stakeholders. You’ll develop new systems and enhance existing systems.
• Manage the end-to-end software release process (CI/CD), including moving from source code check-ins to building changes, testing changes, deploying those changes, and tracking issues.
• Solve complex data architecture issues creatively by simplifying systems, optimizing processes, and removing bottlenecks. You will also support decisions as Komaza’s technical subject matter expert by balancing technical trade-offs between short-term team needs and long-term business needs.
• Provide recommendations for continuous improvement in key technical and process areas, championing innovations within our business systems.
• Support the migration of legacy systems and data integration and ensure technology adoption through proper change management practices and communications.
• Partner with other stakeholders and security engineers to strengthen our security landscape by reviewing and implementing improvements conformant to secure coding standards that adhere to different regulatory requirements.
• Support the execution of the Business Continuity Management (BCM) framework.

What you have

• Bachelor’s degree in Computer Science, Information Systems, Information Technology, or any other related field.
• 5+ years of professional software development experience in leading the design and development of integrated systems, building and delivering complex software systems to customers.
• 4+ years of programming experience with at least one modern object-oriented programming language such as Python, C++, Java, or C#, preferably Python.
• 3+ years of experience contributing to the architecture and design (architecture, design patterns, reliability, and scaling) of new and current systems.
• Experience in the design of web API services across multiple applications with real-time data visibility and integration to SaaS applications.
• Experience working with SQL databases and ORM (Object Relational Mapping) to design a multi-tier system architecture comprising an application layer, logic layer, and data layer.
• Extensive experience with Cloud/ SaaS architectures on either AWS (Preferred), MS Azure, or Google Cloud Compute, and knowledge on how to build secure, maintainable, scalable, high-availability services. Experience in microservices preferred.
• Experience with source control and continuous integration tools. Preferably, GIT for source control and Jenkins/Ansible for continuous integration, and Jira for issue tracking.

You are also

• Excellent at communicating with stakeholders across the different business levels
• Positive, energetic self-starter with a high level of personal drive and resilience
• A people person and a great team leader
• Able to adapt to fluid, rapidly changing environments
• A meticulous individual with excellent analytical and critical thinking skills

About this Role

As a Systems Security Engineer, you’ll work cross-functionally to assess risk and help deliver countermeasures that protect company data and systems. You’ll play a critical role in advising peers, managers, senior leaders, and different stakeholders to help influence and drive compliance in data governance, systems compliance, regulatory obligations, and other information security goals.

This role will be based at our Kenya headquarters in Nairobi.

What you’ll do

• Assess the security of Komaza’s systems, applications, and services, discovering and addressing security issues, building security automation, and promptly reacting to new threat scenarios by developing simple solutions to complex business problems, while following security engineering best practices.
• Architect and implement enterprise-level security solutions for our cloud environments in  AWS and other third-party SaaS services.
• Implement continuous monitoring, intrusion detection and prevention systems, and other security monitoring for our critical data systems and recommend actions to remedy security concerns.
• Support and champion the implementation of Komaza’s Cybersecurity framework to support system controls, threat monitoring and detection, vulnerability assessment, and detection of cyber attacks across applications, data systems, and network services.
• Implement protocols and procedures around third-party systems integration to avoid data loss and cyber-attacks through misconfigured and publicly exposed systems.
• Develop information security guidelines, policies, and regular training sessions and support the execution of the Business Continuity Management (BCM) framework.
• Design, implement and centrally manage an Identity and Access Management (IAM) platform to ensure all Komaza systems and allow effective onboarding and offboarding of system users.
• Support external data systems audit process and promptly resolve identified areas of concern with all stakeholders.

What you have

• Bachelor’s degree in Computer Science, Information Systems, Information Technology, or any other related field.
• Security Certification in either CEH, CISSP, or CISM is a must.
• 4+ years of hands-on experience in system security management across different IT domains including network services, operating systems, databases, and web applications.
• Deep understanding of network and web-related protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS, and routing protocols) and security processes, framework cyber risk remediation analysis.
• Experience with scripting programming languages (e.g., Python, Golang) is strongly preferred.
• An understanding of the software development lifecycle and web services, and how they interact with security protocols and application access.
• Strong understanding of NIST, Critical Security Controls, and Zero Trust Architecture.
• Extensive experience and understanding of security operations and automation tools and appliances including UTM (unified threat management) devices, firewalls, proxy servers, and endpoint protection at an organizational level.
• Experience working with Cloud/ SaaS architectures on either AWS, MS Azure, or Google Cloud Compute.

You are also

• Great at stakeholder management 
• Positive, energetic self-starter with a high level of personal drive and resilience
• A people person and a great team leader
• Able to adapt to fluid, rapidly changing environments
• A meticulous individual, and an analytical and critical thinker
• Great written and spoken communication skills