DevSecOps / Azure Architect

Blue Pearl HQ; Johannesburg; On-site; ZAR 2,000,000 - 3,500,000; Full time

Job summary

A leading telecommunications company is seeking a highly skilled DevSecOps / Azure Architect to lead the design and implementation of secure cloud-native architectures on Microsoft Azure. You will drive DevSecOps practices, infrastructure automation, and API platform modernization. The ideal candidate should have deep Azure architecture expertise and strong DevSecOps capabilities. The contract period is from March 10, 2026, to December 31, 2026, and the work model is onsite in Johannesburg.

Qualifications

• Proven DevSecOps implementation experience.
• Strong expertise in Azure architecture.
• Experience with Kubernetes is preferred.
• Security by design and API security practices.
• Ability to design zero-trust architectures and governance.

Responsibilities

• Design secure, scalable Azure architectures.
• Implement DevSecOps practices across CI/CD pipelines.
• Architect solutions using Azure services.
• Automate provisioning with IaC (Bicep, ARM, Terraform).
• Integrate SAST/DAST and container security into pipelines.
• Define governance, controls, and compliance across platforms.
• Monitor and optimize performance with Azure Monitor and App Insights.

Skills

Azure API Management

Azure AD / Entra ID

Azure App Services

DevSecOps implementation experience

CI/CD pipeline security

Infrastructure as Code

Containerisation using Docker

Tools

Azure DevOps

GitHub Actions

Terraform

Bicep

ARM templates

Kubernetes (AKS)

Azure Key Vault

Azure Monitor

Azure API Management

Job description

We are seeking a highly skilled DevSecOps / Azure Architect to lead the design, implementation, and governance of secure, cloud‑native architectures on Microsoft Azure. This role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise‑grade API platform modernization, with a strong focus on Azure API Management (APIM). The ideal candidate combines deep Azure architecture expertise with strong DevSecOps capabilities, ensuring security by design, scalability, resilience, and operational excellence across enterprise environments.

Key Responsibilities

• Azure Architecture & Cloud Design
  • Design secure, scalable, and highly available Azure architectures.
  • Lead cloud migration initiatives from on‑premise and legacy platforms to Azure.
  • Architect solutions using Azure API Management, App Services, Azure Functions, AKS, Service Bus, and related Azure services.
  • Implement multi‑region architectures, high availability, and disaster recovery strategies.
  • Define Azure landing zones and governance models aligned with enterprise and security standards.
• DevSecOps Implementation
  • Implement DevSecOps practices across CI/CD pipelines.
  • Integrate security controls throughout build, test, and deployment workflows.
  • Automate infrastructure provisioning using Infrastructure as Code (Bicep, ARM, Terraform).
  • Embed security tooling including SAST, DAST, container scanning, and dependency vulnerability checks.
  • Implement secure release management and controlled environment promotion strategies.
• Security Architecture & Compliance
  • Design and implement zero‑trust security architecture patterns.
  • Configure and manage secure API gateway policies using Azure API Management.
  • Implement OAuth 2.0, OpenID Connect, and Azure AD (Entra ID) authentication and authorization models.
  • Ensure compliance with OWASP API Security Top 10 standards.
  • Manage certificate lifecycle, mTLS configurations, and Azure Key Vault integration.
  • Define and maintain cloud security posture management practices.
• Automation & CI/CD
  • Architect and manage CI/CD pipelines using Azure DevOps and/or GitHub Actions.
  • Implement blue‑green and canary deployment strategies.
  • Enable automated policy validation and governance for APIs.
  • Design pipeline governance models, approval gates, and compliance controls.
• Monitoring & Observe
  • Implement monitoring and observe solutions using Azure Monitor, Log Analytics, and Application Insights.
  • Define enterprise logging, tracing, and alerting strategies.
  • Enable proactive anomaly detection, performance monitoring, and SLA tracking.

Requirements

• Technical Skills – Mandatory
  • Azure API Management (architecture and policy configuration)
  • Azure AD / Entra ID
  • Azure App Services and Azure Functions
  • Azure Kubernetes Service (AKS) – preferred
  • Azure Key Vault
  • Azure Networking (VNet, NSG, Private Endpoints)
• Security & DevSecOps
  • Proven DevSecOps implementation experience
  • CI/CD pipeline security and governance
  • SAST and DAST tool integration
  • Identity and access management
  • Secure coding and API security best practices
  • API security frameworks and standards
• Automation & Platform Engineering
  • Azure DevOps and/or GitHub Actions
  • Infrastructure as Code (Bicep, ARM, Terraform)
  • YAML‑based pipeline configuration
  • Containerisation using Docker (Kubernetes preferred)

Engagement Details

• Contract Period: 10 March 2026 – 31 December 2026
• Work Model: Onsite
• Location: Johannesburg
• Industry: Telecommunications