Integration Engineer Cape Town

Juru Holdings is actively recruiting for a Integration Engineer position in Cape Town. This is an excellent opportunity for professionals in the Information Technology / Computer sector looking to advance their careers.

• Experience Level: Not Specified • Educational Background: Others or equivalent • Industry Focus: Information Technology / Computer • Location Preference: in Cape Town

The Integration Engineer position is an important role within the Information Technology / Computer sector, offering meaningful career development and professional growth opportunities.

This role in Information Technology / Computer offers valuable career progression opportunities aligned with your experience level and professional aspirations.

When applying for this Integration Engineer position, ensure your CV highlights: • Relevant experience matching the Not Specified requirement • Educational qualifications in line with Others • Specific achievements in the Information Technology / Computer field • Any certifications or specialized training

The Information Technology / Computer sector in South Africa continues to show strong demand for skilled professionals. This position represents a valuable opportunity in the current job market.

---

Salary: Market Related Job Type: Contract Sectors: IT Investment Reference: 204705 Job Type: Contract Sectors: IT Investment Reference: 204705 Sectors: IT Investment Reference: 204705 Reference: 204705

Employer: Juru Holdings

The Integration & API Platform team has completed the API Security Architecture Framework, a GTT architecture-forum-approved framework covering six canonical security patterns (P1–P6) and a clean-slate extended architecture (P7–P9). The extended architecture introduces SPIFFE/SPIRE workload identity, OAuth 2.1 / FAPI 2.0, Open Policy Agent (OPA) for policy enforcement. The framework's four-phase roadmap now moves from design into prototyping — proving the target architecture works in practice and understanding what it will take for existing API consumers, across the L&S, Group Functions and Bank clusters, to migrate onto it. This engagement is the next step in that roadmap: build a working prototype of the extended security architecture, and turn the abstract framework into a concrete, consumer-facing remediation plan. The initial target architecture the platform is aligning to fronts the API gateway with PingAccess for authentication enforcement: PingAccess authenticates inbound consumer traffic, and the gateway is configured to trust and accept traffic only from PingAccess, with the P7–P9 pattern set layered on top of that trust boundary. Purpose of the Engagement• Prototype the PingAccess-fronted gateway architecture as the initial target state — PingAccess enforcing authentication ahead of the gateway, and the gateway trusting only PingAccess-originated traffic — as the foundation for the fuller P7–P9 pattern set (SPIFFE/SPIRE identity issuance, OAuth 2.1 / FAPI 2.0 token flows, OPA policy decisions, and Vault-managed secrets/certificates).• Assess consumer impact — determine what changes the migration requires of existing API consumers, by cluster and by application, and classify the effort and risk involved.• Design remediation solutions — produce concrete, implementable remediation guidance mapped to the technology stacks consumers actually run, so consuming teams have a clear path to compliance rather than a framework document. Scope of WorkIn scope• Prototype build: stand up a working reference implementation with PingAccess fronting the platform's incumbent Gravitee API gateway for authentication enforcement, the gateway configured to trust and accept traffic only from PingAccess, and the P7–P9 pattern set layered on top — all in a non-production environment.• Consumer inventory & tech-stack discovery: working with cluster architects across L&S, Group Functions and the Bank cluster, inventory API consumers affected by the migration and identify each consumer's authentication method, language/runtime, and hosting model.• Gap and impact analysis: for each consumer (or consumer archetype), document the delta between current-state and target-state authentication/identity requirements, and classify remediation effort (low / medium / high) and risk.• Remediation playbooks: produce reusable, stack-specific remediation patterns (e.g. Java/Spring, . NET, Node.js, IBM ACE-based integration flows, and other stacks identified during discovery), each with sample configuration, code snippets, and a validation checklist.• Rollout recommendation: propose a phased consumer migration sequence, informed by the P3/P5.1.5 HIGH-severity gap priority and the BP2027 roadmap.• Documentation & knowledge transfer: prototype build notes and runbook, consumer impact report, remediation playbooks, and a walkthrough session with the platform team and cluster architects. Out of scope• Production rollout or execution of consumer remediation — this engagement produces the prototype, the impact assessment and the remediation designs, not the migration itself.• Procurement, licensing or contract negotiation for any tooling used in the prototype.• Security domains outside API authentication, identity and policy enforcement (e.g. network security, data loss prevention). Key Deliverables#DeliverableDescriptionD1Prototype environmentWorking non-production prototype: PingAccess fronting Gravitee with gateway trust restricted to PingAccess-originated traffic, plus P7–P9 (SPIFFE/SPIRE, OAuth 2.1/FAPI 2.0, OPA, Vault) covering P3 and P5.1.5 patternsD2Consumer impact reportConsumer/application inventory with tech-stack profile, gap analysis, and effort/risk classification per clusterD3Remediation playbooksStack-specific remediation guidance with sample configuration and validation checklistsD4Rollout recommendationProposed phased migration sequence aligned to BP2027 roadmap and gap severityD5Build runbook & handoverPrototype build/runbook documentation and knowledge-transfer session to the platform teamRequired Skills & Experience• Hands-on experience with PingAccess (or the broader Ping Identity suite) for gateway-fronting authentication enforcement and trust/network configuration.• Hands-on implementation experience with OAuth 2.0/2.1, OIDC and FAPI 2.0 flows.• Working knowledge of SPIFFE/SPIRE or equivalent workload-identity / mTLS frameworks.• Policy-as-code experience with Open Policy Agent (OPA) and Rego, or a comparable policy engine.• API gateway experience; familiarity with Gravitee is advantageous (Gravitee is the incumbent gateway).• Demonstrated ability to assess and remediate API consumers across heterogeneous technology stacks.• Experience in financial services or another regulated environment is advantageous.• Strong stakeholder communication — able to translate architecture and security requirements into guidance consuming teams can act on. Engagement Governance• Reports to the Architect / Platform Owner for the Integration & API Platform.• Works alongside the platform team and cluster architects (L&S, Group Functions, Bank) for consumer discovery and validation.• Progress reviewed on a regular cadence against the deliverables in Section 4.• All prototype artefacts, code and documentation are delivered as the client's property on completion or termination of the engagement. Acceptance Criteria• Prototype demonstrably enforces gateway trust restricted to PingAccess-originated traffic, plus the P3 and P5.1.5 target-state patterns, end to end in the non-production environment.• Consumer impact report covers all in-scope consumers identified during discovery, with no unclassified consumers outstanding.• At least one remediation playbook produced per distinct technology stack identified in the consumer inventory.• Deliverables reviewed and formally accepted by the Architect / Platform Owner.