DevSecOps / Azure Architect

ATS Client

Johannesburg

On-site

ZAR 1,000,000 - 1,800,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

ATS Client is seeking a DevSecOps / Azure Architect to lead secure, cloud-native architectures on Microsoft Azure, focusing on API management (APIM), security-by-design principles, and scalable automation. The role is based onsite in Johannesburg and will drive enterprise‑grade security architectures for modern cloud workloads.

You will design robust Azure solutions, implement CI/CD pipelines, and enforce governance across multi-region deployments, with emphasis on API security and compliance

Qualifications

Experience designing secure, cloud-native architectures on Azure.
Proven DevSecOps implementation across CI/CD pipelines.
Strong knowledge of API security and Azure API Management.
Experience with cloud migration, governance, and security controls.

Responsibilities

Design secure, scalable Azure architectures and governing models.
Lead cloud migrations from on-premises to Azure.
Architect solutions using APIM, App Services, Functions, AKS, Service Bus.
Implement multi-region, high-availability, and DR strategies.
Define landing zones and governance aligned with security standards.
Implement CI/CD pipelines with Azure DevOps or GitHub Actions.
Embed security tooling (SAST/DAST) and policy validation in pipelines.
Operate monitoring with Azure Monitor and Application Insights.
Manage certificates, mTLS, and Key Vault integration.

Skills

Azure API Management

Azure AD / Entra ID

Azure Kubernetes Service (AKS)

Azure Functions

Azure App Services

Azure Key Vault

Infrastructure as Code (Bicep, ARM, TF

CI/CD & DevSecOps

Security by design

Zero Trust security

Tools

Terraform

Bicep

ARM templates

GitHub Actions

Azure DevOps

Docker

Job description

Job Description

We are seeking a highly skilled DevSecOps / Azure Architect to lead the design, implementation, and governance of secure, cloud‑native architectures on Microsoft Azure. This role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise‑grade API platform modernization, with a strong focus on Azure API Management (APIM).

The ideal candidate combines deep Azure architecture expertise with strong DevSecOps capabilities, ensuring security by design, scalability, resilience, and operational excellence across enterprise environments.

Key Responsibilities

Azure Architecture & Cloud Design

Design secure, scalable, and highly available Azure architectures.
Lead cloud migration initiatives from on‑premise and legacy platforms to Azure.
Architect solutions using Azure API Management, App Services, Azure Functions, AKS, Service Bus, and related Azure services.
Implement multi‑region architectures, high availability, and disaster recovery strategies.
Define Azure landing zones and governance models aligned with enterprise and security standards.

DevSecOps Implementation

Implement DevSecOps practices across CI/CD pipelines.
Integrate security controls throughout build, test, and deployment workflows.
Automate infrastructure provisioning using Infrastructure as Code (Bicep, ARM, Terraform).
Embed security tooling including SAST, DAST, container scanning, and dependency vulnerability checks.
Implement secure release management and controlled environment promotion strategies.

Security Architecture & Compliance

Design and implement zero‑trust security architecture patterns.
Configure and manage secure API gateway policies using Azure API Management.
Implement OAuth 2.0, OpenID Connect, and Azure AD (Entra ID) authentication and authorization models.
Ensure compliance with OWASP API Security Top 10 standards.
Manage certificate lifecycle, mTLS configurations, and Azure Key Vault integration.
Define and maintain cloud security posture management practices.

Automation & CI/CD

Architect and manage CI/CD pipelines using Azure DevOps and/or GitHub Actions.
Implement blue‑green and canary deployment strategies.
Enable automated policy validation and governance for APIs.
Design pipeline governance models, approval gates, and compliance controls.

Monitoring & Observe

Implement monitoring and observe solutions using Azure Monitor, Log Analytics, and Application Insights.
Define enterprise logging, tracing, and alerting strategies.
Enable proactive anomaly detection, performance monitoring, and SLA tracking.

Requirements

Technical Skills - Mandatory

Azure Expertise