Application Developer - DevOps

Blue Pearl HQ; Johannesburg; Hybrid; ZAR 1,200,000 - 1,800,000; Full time

Job summary

Blue Pearl HQ in Johannesburg invites an experienced DevOps/Azure Architect to lead design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. You will drive secure DevOps practices, infrastructure automation, and API platform modernization (including Azure API Management).

Ideal candidates blend deep Azure architecture expertise with DevSecOps, ensuring scalability, resilience, and security by design across enterprise-grade environments in a hybrid-work

Qualifications

• Extensive experience designing secure, scalable Azure architectures.
• Strong DevSecOps and API management expertise.
• Proven ability to implement multi-region DR and landing zones.

Responsibilities

• Design secure, scalable, and high-availability Azure architectures.
• Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and related services.
• Implement multi-region and disaster recovery strategies.
• Define landing zones and governance models aligned with enterprise standards.

Skills

Azure APIM

Azure AD

App Services

Functions

AKS

Key Vault

Networking

DevSecOps

CI/CD

Tools

Terraform

Bicep

ARM templates

Docker

Kubernetes

Azure DevOps

GitHub Actions

Job description

We are seeking a highly skilled DevOps / Azure Architect to lead the design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. The role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization (including Azure API Management).

The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design.

Key Responsibilities

• Design secure, scalable, and high-availability Azure architectures.
• Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and related services.
• Implement multi-region and disaster recovery strategies.
• Define landing zones and governance models aligned with enterprise standards.

DevSecOps Implementation

• Implement DevSecOps practices across CI/CD pipelines.
• Integrate security controls into build and deployment workflows.
• Automate infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
• Embed security scanning tools (SAST, DAST, container scanning, dependency checks).
• Implement secure release management and environment promotion strategies.

Security Architecture & Compliance

• Design zero-trust architecture patterns.
• Implement secure API gateway configurations (Azure APIM policies).
• Ensure compliance with OWASP API Security Top 10.
• Manage certificate lifecycle, mTLS, and key vault integration.
• Define cloud security posture management practices.

Automation & CI/CD

• Architect CI/CD pipelines using Azure DevOps or GitHub Actions.
• Implement blue-green / canary deployment strategies.
• Enable automated policy validation for APIs.
• Design pipeline governance and approval gates.

Monitoring & Observability

• Implement Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana
• Define logging, tracing, and alerting strategies.
• Enable proactive anomaly detection and SLA monitoring.

Technical Skills – Mandatory

• Azure APIM (architecture & policy configuration)

Azure Expertise

• Azure APIM (architecture & policy configuration)
• Azure AD / Entra ID
• Azure App Services / Functions
• AKS (preferred)
• Azure Key Vault
• Azure Networking (VNet, NSG, Private Endpoints)

Security & DevSecOps

• DevSecOps implementation experience
• CI/CD pipeline security
• SAST/DAST tools integration
• Identity & access management
• Secure coding practices
• API security frameworks

Automation

• Azure DevOps / GitHub Actions
• Infrastructure as Code (Bicep / ARM / Terraform)
• YAML pipelines
• Containerization (Docker, Kubernetes preferred)

Containerization (Docker, Kubernetes preferred)

We are seeking a highly skilled DevOps / Azure Architect to lead the design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. The role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization (including Azure API Management).

The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design.

Key Responsibilities

• Design secure, scalable, and high-availability Azure architectures.
• Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and related services.
• Implement multi-region and disaster recovery strategies.
• Define landing zones and governance models aligned with enterprise standards.

DevSecOps Implementation

• Implement DevSecOps practices across CI/CD pipelines.
• Integrate security controls into build and deployment workflows.
• Automate infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
• Embed security scanning tools (SAST, DAST, container scanning, dependency checks).
• Implement secure release management and environment promotion strategies.

Security Architecture & Compliance

• Design zero-trust architecture patterns.
• Implement secure API gateway configurations (Azure APIM policies).
• Ensure compliance with OWASP API Security Top 10.
• Manage certificate lifecycle, mTLS, and key vault integration.
• Define cloud security posture management practices.

Automation & CI/CD

• Architect CI/CD pipelines using Azure DevOps or GitHub Actions.
• Implement blue-green / canary deployment strategies.
• Enable automated policy validation for APIs.
• Design pipeline governance and approval gates.

Monitoring & Observability

• Implement Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana
• Define logging, tracing, and alerting strategies.
• Enable proactive anomaly detection and SLA monitoring.

Technical Skills – Mandatory

• Azure APIM (architecture & policy configuration)

Azure Expertise

• Azure APIM (architecture & policy configuration)
• Azure AD / Entra ID
• Azure App Services / Functions
• AKS (preferred)
• Azure Key Vault
• Azure Networking (VNet, NSG, Private Endpoints)

Security & DevSecOps

• DevSecOps implementation experience
• CI/CD pipeline security
• SAST/DAST tools integration
• Identity & access management
• Secure coding practices
• API security frameworks

Automation

• Azure DevOps / GitHub Actions
• Infrastructure as Code (Bicep / ARM / Terraform)
• YAML pipelines
• Containerization (Docker, Kubernetes preferred)

Containerization (Docker, Kubernetes preferred)

Requirements

Duration – 1 November 2026 – 31 October 2027

Work Model – hybrid

Location: Johannesburg Area (Sandton)

Travel: Not required