DevSecOps / Azure Architect

Blue Pearl PTY; Johannesburg; On-site; ZAR 900,000 - 1,200,000; Full time

Job summary

A leading cloud solutions firm in Johannesburg is seeking a highly skilled DevSecOps / Azure Architect to lead the design and implementation of secure Azure architectures. The role involves integrating security throughout CI/CD processes, automating infrastructure, and ensuring compliance with established security standards. The ideal candidate will have expertise in Azure API Management and infrastructure automation, fostering secure DevOps practices while successfully managing cloud migrations. This role is contracted from 10 March 2026 to 31 December 2026.

Qualifications

• Extensive experience with Azure architecture and DevSecOps practices.
• Proven ability to design secure, scalable cloud-native architectures.
• Skilled in implementing CI/CD pipelines and security controls.

Responsibilities

• Design secure, scalable Azure architectures.
• Lead cloud migration initiatives from legacy platforms to Azure.
• Integrate security into build, test, and deployment workflows.

Skills

Azure API Management

DevSecOps practices

Infrastructure as Code

CI/CD pipeline management

API security best practices

Azure Functions

Azure App Services

Identity and access management

Tools

Azure DevOps

GitHub Actions

Bicep

ARM

Terraform

Job description

Johannesburg, South Africa | Posted on 02/19/2026

We are seeking a highly skilled DevSecOps / Azure Architect to lead the design, implementation, and governance of secure, cloud-native architectures on Microsoft Azure. This role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization, with a strong focus on Azure API Management (APIM).

The ideal candidate combines deep Azure architecture expertise with strong DevSecOps capabilities, ensuring security by design, scalability, resilience, and operational excellence across enterprise environments.

Key Responsibilities

• Design secure, scalable, and highly available Azure architectures.
• Lead cloud migration initiatives from on-premise and legacy platforms to Azure.
• Architect solutions using Azure API Management, App Services, Azure Functions, AKS, Service Bus, and related Azure services.
• Implement multi-region architectures, high availability, and disaster recovery strategies.
• Define Azure landing zones and governance models aligned with enterprise and security standards.

DevSecOps Implementation

• Integrate security controls throughout build, test, and deployment workflows.
• Automate infrastructure provisioning using Infrastructure as Code (Bicep, ARM, Terraform).
• Embed security tooling including SAST, DAST, container scanning, and dependency vulnerability checks.
• Implement secure release management and controlled environment promotion strategies.

Security Architecture & Compliance

• Design and implement zero-trust security architecture patterns.
• Configure and manage secure API gateway policies using Azure API Management.
• Implement OAuth 2.0, OpenID Connect, and Azure AD (Entra ID) authentication and authorization models.
• Ensure compliance with OWASP API Security Top 10 standards.
• Manage certificate lifecycle, mTLS configurations, and Azure Key Vault integration.
• Define and maintain cloud security posture management practices.

Automation & CI/CD

• Architect and manage CI/CD pipelines using Azure DevOps and/or GitHub Actions.
• Implement blue-green and canary deployment strategies.
• Enable automated policy validation and governance for APIs.
• Design pipeline governance models, approval gates, and compliance controls.

Monitoring & Observe

• Implement monitoring and observe solutions using Azure Monitor, Log Analytics, and Application Insights.
• Define enterprise logging, tracing, and alerting strategies.
• Enable proactive anomaly detection, performance monitoring, and SLA tracking.

Requirements

• Azure API Management (architecture and policy configuration)
• Azure App Services and Azure Functions
• CI/CD pipeline security and governance
• SAST and DAST tool integration
• Identity and access management
• Secure coding and API security best practices
• API security frameworks and standards
• Azure DevOps and/or GitHub Actions
• Infrastructure as Code (Bicep, ARM, Terraform)
• YAML-based pipeline configuration

Contract Period: 10 March 2026 – 31 December 2026