About this role
We are seeking a highly skilled DevOps / Azure Architect to lead the design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. The role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization (including Azure API Management).
The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design.
Key Responsibilities
-
Azure Architecture & Cloud Design
-
· Design secure,
-
scalable, and high-availability Azure architectures.
-
· Lead cloud migration
-
initiatives (on-prem / legacy platform → Azure).
-
· Architect solutions
-
using Azure APIM, App Services, Functions, AKS, Service Bus, and related
-
services.
-
· Implement multi-region
-
and disaster recovery strategies.
-
· Define landing zones
-
and governance models aligned with enterprise standards.
-
DevSecOps Implementation
-
· Implement DevSecOps
-
practices across CI/CD pipelines.
-
· Integrate security
-
controls into build and deployment workflows.
-
· Automate
-
infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
-
· Embed security
-
scanning tools (SAST, DAST, container scanning, dependency checks).
-
· Implement secure
-
release management and environment promotion strategies.
-
Security Architecture
-
& Compliance
-
· Design zero-trust
-
architecture patterns.
-
· Implement secure API
-
gateway configurations (Azure APIM policies).
-
· Configure OAuth2,
-
OpenID Connect, Azure AD (Entra ID).
-
· Ensure compliance with
-
OWASP API Security Top 10.
-
· Manage certificate
-
lifecycle, mTLS, and key vault integration.
-
· Define cloud security
-
posture management practices.
-
Automation & CI/CD
-
· Architect CI/CD
-
pipelines using Azure DevOps or GitHub Actions.
-
· Implement blue-green /
-
canary deployment strategies.
-
· Enable automated
-
policy validation for APIs.
-
· Design pipeline
-
governance and approval gates.
-
Monitoring & Observability
-
· Implement Azure
-
Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana
-
· Define logging,
-
tracing, and alerting strategies.
-
· Enable proactive
-
anomaly detection and SLA monitoring.
-
Technical Skills – Mandatory
-
Azure Expertise
-
· Azure APIM
-
(architecture & policy configuration)
-
· Azure AD / Entra ID
-
· Azure App Services /
-
Functions
-
· AKS (preferred)
-
· Azure Key Vault
-
· Azure Networking
-
(VNet, NSG, Private Endpoints)
-
Security & DevSecOps
-
· DevSecOps
-
implementation experience
-
· CI/CD pipeline
-
security
-
· SAST/DAST tools
-
integration
-
· Identity & access
-
management
-
· Secure coding
-
practices
-
· API security
-
frameworks
-
Automation
-
· Azure DevOps / GitHub
-
Actions
-
· Infrastructure as Code
-
(Bicep / ARM / Terraform)
-
· YAML pipelines
-
Containerization (Docker, Kubernetes preferred)
Requirements
-
Key
-
Responsibilities
-
Azure
-
Architecture & Cloud Design
-
Design secure,
-
scalable, and high-availability Azure architectures.
-
Lead cloud
-
migration initiatives (on-prem / legacy platform → Azure).
-
Architect
-
solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and
-
related services.
-
Implement
-
multi-region and disaster recovery strategies.
-
Define landing
-
zones and governance models aligned with enterprise standards.
-
DevSecOps
-
Implementation
-
Implement
-
DevSecOps practices across CI/CD pipelines.
-
Integrate
-
security controls into build and deployment workflows.
-
Automate
-
infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
-
Embed security
-
scanning tools (SAST, DAST, container scanning, dependency checks).
-
Implement
-
secure release management and environment promotion strategies.
-
Security
-
Architecture & Compliance
-
Design
-
zero-trust architecture patterns.
-
Implement
-
secure API gateway configurations (Azure APIM policies).
-
Configure
-
OAuth2, OpenID Connect, Azure AD (Entra ID).
-
Ensure
-
compliance with OWASP API Security Top 10.
-
Manage
-
certificate lifecycle, mTLS, and key vault integration.
-
Define cloud
-
security posture management practices.
-
Automation
-
& CI/CD
-
Architect
-
CI/CD pipelines using Azure DevOps or GitHub Actions.
-
Implement
-
blue-green / canary deployment strategies.
-
Enable
-
automated policy validation for APIs.
-
Design
-
pipeline governance and approval gates.
-
Monitoring
-
& Observability
-
Implement
-
Azure Monitor, Log Analytics, Application Insights.
-
Define
-
logging, tracing, and alerting strategies.
-
Enable
-
proactive anomaly detection and SLA monitoring.
-
Technical
-
Skills – Mandatory
-
Azure
-
Expertise
-
Azure APIM
-
(architecture & policy configuration)
-
Azure AD /
-
Entra ID
-
Azure App
-
Services / Functions
-
AKS
-
(preferred)
-
Azure Key
-
Vault
-
Azure
-
Networking (VNet, NSG, Private Endpoints)
-
Security
-
& DevSecOps
-
DevSecOps
-
implementation experience
-
CI/CD pipeline
-
security
-
SAST/DAST
-
tools integration
-
Identity &
-
access management
-
Secure coding
-
practices
-
API security
-
frameworks
-
Automation
-
Azure DevOps /
-
GitHub Actions
-
Infrastructure
-
as Code (Bicep / ARM / Terraform)
-
YAML pipelines
-
Containerization (Docker,
-
Kubernetes preferred)
Requirements
- Duration – 1 November 2026 – 31 October 2027
- Work Model – hybrid
- Location: Johannesburg Area (Sandton)
- Travel: Not required**