The Kenya Revenue Authority (KRA) is a key national institution mandated with revenue collection, facilitation of trade, and the enforcement of tax laws in Kenya. To effectively carry out this critical role, the Authority invests in advanced systems, infrastructure, and highly skilled personnel who contribute to ensuring operational efficiency and the security of its platforms.
As part of its continued commitment to maintaining strong ICT security frameworks, KRA is seeking to recruit competent professionals for the position of Officer – Security Operations Tools. This role is essential in enhancing the Authority’s cybersecurity posture by ensuring that its infrastructure and endpoint systems are secured and that any threats are proactively managed.
The position offers an opportunity to join a professional environment that emphasizes innovation, operational integrity, and continuous improvement. The successful candidate will serve on a fixed three-year contract, renewable based on performance and organizational needs, and will be remunerated according to KRA’s established salary structure.
This article outlines the job summary, duties, responsibilities, and application procedure for the advertised position. Interested individuals are encouraged to carefully read through the details to understand the expectations associated with the role and how to submit their applications.
Position Details
Job Title: Officer – Security Operations Tools
Terms of Service: Three (3) years, Fixed Term Contract
Remuneration: As per KRA salary structure
Job Summary
The Officer – Security Operations Tools will be responsible for the design, implementation, daily management, and maintenance of infrastructure and endpoint security solutions across the Authority. The officer will support projects and operations aimed at strengthening the ICT security environment, ensuring compliance with international standards and best practices, and providing technical support to end-users and enterprise systems.
This role requires a hands-on approach in managing security tools, monitoring systems, and ensuring that ICT security policies are embedded during the design and rollout of new IT systems. The position contributes significantly to ensuring the integrity, confidentiality, and availability of KRA’s information assets.
Duties and Responsibilities
The successful candidate will be expected to undertake the following key responsibilities:
- Implementation and Maintenance of ICT Security Operations Solutions
- Carry out the implementation of security operations solutions across the Authority’s ICT infrastructure.
- Provide support and ensure continuous functionality of deployed security tools such as firewalls, SIEM, SOAR, intrusion prevention systems (IPS), and related platforms.
- Regularly update and maintain endpoint security tools to safeguard against emerging cyber threats.
- Support and Maintenance of Information Security Projects
- Participate in the planning, execution, and management of security-related projects within the Authority.
- Ensure that all ICT security projects adhere to the set scope, timeframes, budgets, and quality standards.
- Provide technical input during project development to align with organizational security objectives.
- Provision of Enterprise and End-User Support
- Offer day-to-day enterprise support for information security solutions.
- Assist end-users with security-related issues, ensuring timely resolution within the agreed service level agreements (SLAs).
- Provide training or guidance to staff on the use of security tools and solutions when necessary.
- Implementation of ICT Security Controls in IT Systems
- Ensure that security measures and controls are integrated into the design and deployment of new IT systems.
- Collaborate with system developers and IT teams to embed robust security protocols during system development and rollout.
- Monitor and evaluate the performance of implemented controls to ensure they remain effective.
- Maintenance of the Information Security Management System (ISMS)
- Support the implementation and continuous improvement of the ISMS in line with ISO 27001 and international best practices.
- Ensure that documented procedures, standards, and policies relating to ICT security are effectively followed across the Authority.
- Conduct periodic reviews and propose updates to ISMS processes when required.
- Compliance with ISO Standards and Data Security Requirements
- Work towards ensuring conformity to ISO 9001:2015 and ISO 27001:2013 standards.
- Promote compliance with data protection and security requirements across ICT operations.
- Assist in internal and external audits relating to ICT security compliance.
Functional Competencies
In order to successfully execute the duties of this role, the officer is expected to demonstrate the following functional competencies:
- Technical Skills in Security Tools: Practical working experience with tools such as Python, firewalls, intrusion prevention systems (IPS), SIEM, SOAR, SQL, relational database management systems (RDBMS), and Linux-based environments.
- Knowledge of Relevant Legislation: Understanding of laws and regulations governing ICT security, data protection, and privacy in Kenya.
- Analytical Skills: Ability to analyze security incidents, identify vulnerabilities, and propose effective solutions.
- Attention to Detail: Commitment to accuracy and thoroughness in the management of security tools, data monitoring, and incident reporting.
- Problem-Solving Orientation: Capacity to resolve technical issues in a timely and efficient manner while minimizing disruption to Authority operations.
Application Guidelines
KRA has provided an online application process for interested candidates. Applicants are required to register, create a profile, and submit their applications through the e-recruitment system. The step-by-step guidelines are as follows:
Registration
- Visit the KRA recruitment portal at: https://erecruitment.kra.go.ke/login
- Click on the “Register” button to begin the registration process.
- Provide the required details to create an account.
- Upon registration, an email confirmation will be sent to verify your email address. Follow the instructions in the email to complete the process.
Logging In
- After confirming registration, return to the portal at: https://erecruitment.kra.go.ke/login
- Enter your username and password to log in.
- Once logged in, you will be directed to the “Applicant Cockpit” page.
Creating or Updating Your Candidate Profile
- On the Applicant Cockpit, click on the “Candidate Profile” tab.
- Select “My Profile” to create or update your personal details, qualifications, and experience.
- Complete all required fields as instructed.
- Finalize the process by selecting the “Overview and Release” tab.
- Ensure you tick the confirmation check box to complete your profile update.
Application Process
- On the Applicant Cockpit, click on the “Employment Opportunities” tab.
- Under the “Job Search” section, click on “Start” to view all open vacancies.
- Select the relevant job posting to view the full details.
- To apply, click the “Apply” button at the top of the page.
- Follow the prompts to fill in the required details and attach any necessary documents.
- Review your application carefully, ensuring that all mandatory fields have been completed.
- Conclude the application by clicking the “Send Application Now” button after reviewing and accepting the Data Privacy Statement.
Support and Enquiries
If you encounter any challenges during the registration or application process, you may send your query to the following email: [email protected]. Applicants are encouraged to refresh their email inbox in case of delays in receiving confirmation emails.
Important Notes
- The Kenya Revenue Authority does not charge any fee at any stage of the recruitment process. This includes application, shortlisting, interview, and final appointment.
- Applicants are advised to provide accurate and truthful information throughout the process. Any falsification of details may lead to disqualification.
- Only shortlisted candidates will be contacted for the next stages of the selection process.
Closing Statement
This position presents an opportunity for qualified candidates to contribute to safeguarding KRA’s digital infrastructure and ensuring compliance with international security standards. The Authority seeks individuals who are dedicated, detail-oriented, and capable of managing critical ICT security tools and operations.
