Azure DevSecOps Architect — Secure Cloud & API Platform

Blue Pearl PTY LTD; Johannesburg; On-site; ZAR 1,000,000 - 2,000,000; Full time

Job summary

Blue Pearl PTY LTD is seeking a highly skilled DevSecOps / Azure Architect to lead secure cloud-native design and governance on Microsoft Azure. The role centers on secure DevOps, infrastructure automation, and enterprise API platform modernization (Azure API Management).

You will combine Azure architecture depth with DevSecOps to ensure scalable, resilient, and security-by-design cloud solutions from Johannesburg.

Qualifications

• Experience designing secure Azure architectures with governance.
• Proven DevSecOps experience across CI/CD pipelines.
• Expertise in zero-trust, API security, OAuth2/OpenID Connect.

Responsibilities

• Design secure, scalable, high-availability Azure architectures.
• Lead cloud migration initiatives to Azure (on-prem/legacy).
• Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus.
• Implement multi-region and disaster recovery strategies.
• Define landing zones and governance models aligned with enterprise standards.
• Implement DevSecOps practices across CI/CD pipelines.
• Integrate security controls into build and deployment workflows.
• Automate infrastructure using IaC (Bicep/ARM/Terraform).
• Embed security scanning tools (SAST, DAST, container scanning, dependency checks).
• Implement secure release management and environment promotion strategies.
• Design zero-trust architecture patterns.
• Implement secure API gateway configurations (Azure APIM policies).
• Configure OAuth2, OpenID Connect, Azure AD (Entra ID).
• Ensure compliance with OWASP API Security Top 10.
• Manage certificate lifecycle, mTLS, and key vault integration.
• Define cloud security posture management practices.
• Architect CI/CD pipelines using Azure DevOps or GitHub Actions.
• Implement blue-green / canary deployment strategies.
• Enable automated policy validation for APIs.
• Design pipeline governance and approval gates.
• Implement Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana.
• Define logging, tracing, and alerting strategies.
• Enable proactive anomaly detection and SLA monitoring.

Skills

DevSecOps practices

Identity & access management

Secure coding practices

API security frameworks

Zero-trust architecture

Security governance

Cloud migration planning

Tools

Azure APIM

Azure AD / Entra ID

Azure App Services / Functions

AKS

Azure Key Vault

Azure Networking (VNet, NSG, Private Endpoints)

SAST/DAST tools

Terraform

Bicep / ARM

Docker

Kubernetes

Azure DevOps / GitHub Actions

YAML pipelines

Prometheus

Grafana

ELK

Job description

Blue Pearl PTY LTD is seeking a highly skilled DevSecOps / Azure Architect to lead secure cloud-native design and governance on Microsoft Azure. The role centers on secure DevOps, infrastructure automation, and enterprise API platform modernization (Azure API Management).

You will combine Azure architecture depth with DevSecOps to ensure scalable, resilient, and security-by-design cloud solutions from Johannesburg.