Job Description

Reporting to the Manager – Enterprise IoT & Managed Security Deployment, the Engineer - Managed Security Solutions serves as a pivotal technical subject matter expert and strategic business champion for Safaricom’s Managed Security Solutions portfolio.

This role drives the technical, operational, commercial, and regulatory success of enterprise and government cybersecurity offerings. The role holder is responsible for end-to-end service delivery excellence, technical architecture, GRC framework alignment, partner ecosystems, and supporting revenue growth across enterprise security domains.

• Uphold the company code of conduct, policies and procedures, ensuring integrity and accountability in every aspect of your work.
• All employees have a responsibility to adhere to safety, health, and wellbeing policies, guidelines and procedures in all actions and decisions.
• Provide strategic technical leadership for Safaricom's Managed Security Services (MSS) portfolio, ensuring alignment with global cybersecurity standards, Zero Trust principles, and evolving threat landscapes.
• Lead the architecture, deployment, optimization, and continuous improvement of core security services, including SOC/MDR, NGFW, SASE, ZTNA, EDR/XDR, Cloud Security, and Vulnerability Management.
• Drive continuous service improvement (CSI) initiatives to strengthen customers' security posture, operational resilience, and service performance.
• Oversee Cybersecurity Governance, Risk, and Compliance (GRC), ensuring adherence to frameworks such as ISO 27001, NIST CSF, PCI-DSS, GDPR, and applicable data protection regulations.
• Lead enterprise security risk assessments, audit readiness, compliance reporting, and the implementation of automated risk and third-party governance processes.
• Partner with Product, Sales, and Enterprise teams to develop customer-centric managed security solutions and provide technical leadership for strategic bids, RFPs, and enterprise engagements.
• Translate complex cybersecurity risks, technologies, and compliance requirements into clear business value for executive stakeholders and customers.
• Build and manage strategic relationships with cybersecurity vendors, cloud providers, and technology partners while overseeing vendor governance, SLAs, and technology roadmaps.
• Serve as a trusted cybersecurity advisor by leading executive security reviews, incident debriefs, threat intelligence sharing, and stakeholder engagement across enterprise customers.
• Ensure operational excellence by enforcing Safaricom's governance, information security, health, safety, and wellbeing standards across all managed security operations.
  

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications, Software Engineering, or a related field.
• Minimum 5–7 years of hands-on experience in cybersecurity engineering, MSSP delivery, or enterprise security architecture.
• Must hold at least two or more recognized industry certifications across the following tracks:
• CISSP, CISM, CISA, or CRISC (Strongly Preferred)
• CCSP, AWS/Azure Security Specialty, Fortinet NSE/FCP/FCX, Palo Alto PCNSE
• Offensive/Defensive Operations: CEH, CySA+, or CompTIA Security+
• Methodology: ITIL v4, PMP, or PRINCE2 (Added advantage)
• Deep understanding of ISO 27001, NIST CSF, Data Protection Acts, risk management, and regulatory compliance auditing.
• Hands-on domain mastery over SOC/MDR architectures, SASE, Cloud Security, Threat Intelligence, and Endpoint Protection.
• Proven track record in managing OEM relationships (e.g., Fortinet, Palo Alto, Microsoft, CrowdStrike, Cisco) and vendor SLAs.

Safaricom is the leading technology company in East Africa. Our purpose is to transform lives by connecting people to people, people to opportunities and people to information. We keep over 60 million customers connected across Kenya and Ethiopia, and play a critical role in the society, supporting over 1.13 million jobs both directly and indirectly while our total economic value was estimated at KES 1.1 trillion ($ 8.5 billion) for the 12 months through March 2025.

Listed on the Nairobi Securities Exchange and with annual revenues of close to KES 388 billion as at March 2025, Safaricom provides connectivity through wide range of technology. Our 2G, 3G, 4G and 5G network in aggregate covers over 99% of Kenya’s population.

We run the world’s largest mobile payment system and Africa’s largest Fintech, M-PESA, the world’s first mobile money transfer system. By empowering millions of customers to transact, save or borrow money through their mobile phone, M-PESA has driven financial inclusion in Kenya to 84.8% of the adult population in 2024, from a low of 26.7% in 2006, and generated over KES 161 billion in revenue as at FY25.

Our subsidiary, Safaricom Telecommunications Ethiopia, has deployed world class network and services to contribute to Ethiopia’s digital transformation.

Safaricom is an equal opportunity employer, actively recruiting staff from different backgrounds reflecting the communities that we serve. We are committed to equal gender representation at all levels.

As part of our ongoing commitment to the Sustainable Development Goals (SDGs), we continue to work towards improving energy and resource efficiency in our network and facilities to reduce carbon emissions and our fuel consumption. We remain committed to becoming a Net Zero carbon-emitting company by 2050.