DevSecOps / Azure Architect

We are seeking a highly skilled DevSecOps / Azure Architect to lead the design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. The role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization (including Azure API Management). The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design.

Key Responsibilities

• Azure Architecture & Cloud Design

• Design secure, scalable, and

• high-availability Azure architectures.

• Lead cloud migration initiatives

• (on-prem / legacy platform → Azure).

• Architect solutions using Azure APIM,

• App Services, Functions, AKS, Service Bus, and related services.

• Implement multi-region and disaster

• recovery strategies.

• Define landing zones and governance

• models aligned with enterprise standards.

• DevSecOps Implementation

• Implement DevSecOps practices across

• CI/CD pipelines.

• Integrate security controls into

• build and deployment workflows.

• Automate infrastructure using

• Infrastructure as Code (Bicep / ARM / Terraform).

• Embed security scanning tools (SAST,

• DAST, container scanning, dependency checks).

• Implement secure release management

• and environment promotion strategies.

• Security Architecture & Compliance

• Design zero-trust architecture

• patterns.

• Implement secure API gateway

• configurations (Azure APIM policies).

• Configure OAuth2, OpenID Connect,

• Azure AD (Entra ID).

• Ensure compliance with OWASP API

• Security Top 10.

• Manage certificate lifecycle, mTLS,

• and key vault integration.

• Define cloud security posture

• management practices.

• Automation & CI/CD

• Architect CI/CD pipelines using Azure

• DevOps or GitHub Actions.

• Implement blue-green / canary

• deployment strategies.

• Enable automated policy validation

• for APIs.

• Design pipeline governance and

• approval gates.

• Monitoring & Observability

• Implement Azure Monitor, Log

• Analytics, Application Insights, ELK, Prometheus and Grafana

• Define logging, tracing, and alerting

• strategies.

• Enable proactive anomaly detection

• and SLA monitoring.

Requirements

• Technical Skills – Mandatory

• Azure Expertise

• Azure APIM (architecture & policy

• configuration)

• Azure AD / Entra ID

• Azure App Services / Functions

• AKS (preferred)

• Azure Key Vault

• Azure Networking (VNet, NSG, Private

• Endpoints)

• Security & DevSecOps

• DevSecOps implementation experience

• CI/CD pipeline security

• SAST/DAST tools integration

• Identity & access management

• Secure coding practices

• API security frameworks

• Automation

• Azure DevOps / GitHub Actions

• Infrastructure as Code (Bicep / ARM /

• Terraform)

• YAML pipelines

• Containerization (Docker, Kubernetes

• preferred)

• Key Responsibilities

• Azure Architecture & Cloud Design

• Design secure, scalable, and

• high-availability Azure architectures.

• Lead cloud migration initiatives

• (on-prem / legacy platform → Azure).

• Architect solutions using Azure APIM,

• App Services, Functions, AKS, Service Bus, and related services.

• Implement multi-region and disaster

• recovery strategies.

• Define landing zones and governance

• models aligned with enterprise standards.

• DevSecOps Implementation

• Implement DevSecOps practices across

• CI/CD pipelines.

• Integrate security controls into

• build and deployment workflows.

• Automate infrastructure using

• Infrastructure as Code (Bicep / ARM / Terraform).

• Embed security scanning tools (SAST,

• DAST, container scanning, dependency checks).

• Implement secure release management

• and environment promotion strategies.

• Security Architecture &

• Compliance

• Design zero-trust architecture

• patterns.

• Implement secure API gateway

• configurations (Azure APIM policies).

• Configure OAuth2, OpenID Connect,

• Azure AD (Entra ID).

• Ensure compliance with OWASP API

• Security Top 10.

• Manage certificate lifecycle, mTLS,

• and key vault integration.

• Define cloud security posture

• management practices.

• Automation & CI/CD

• Architect CI/CD pipelines using Azure

• DevOps or GitHub Actions.

• Implement blue-green / canary

• deployment strategies.

• Enable automated policy validation

• for APIs.

• Design pipeline governance and

• approval gates.

• Monitoring & Observability

• Implement Azure Monitor, Log

• Analytics, Application Insights.

• Define logging, tracing, and alerting

• strategies.

• Enable proactive anomaly detection

• and SLA monitoring.

• Technical Skills – Mandatory

• Azure Expertise

• Azure APIM (architecture & policy

• configuration)

• Azure AD / Entra ID

• Azure App Services / Functions

• AKS (preferred)

• Azure Key Vault

• Azure Networking (VNet, NSG, Private

• Endpoints)

• Security & DevSecOps

• DevSecOps implementation experience

• CI/CD pipeline security

• SAST/DAST tools integration

• Identity & access management

• Secure coding practices

• API security frameworks

• Automation

• Azure DevOps / GitHub Actions

• Infrastructure as Code (Bicep / ARM /

• Terraform)

• YAML pipelines

• Containerization (Docker, Kubernetes

• preferred)

Requirement:

• Duration: 6 months

• Working model: Onsite

• Location: Johannesburg

• Industry: Telecommunication