Lead DevSecOps / Azure Architect

Blue Pearl PTY; Johannesburg; On-site; ZAR 800,000 - 1,200,000; Full time

Job summary

Blue Pearl PTY in Johannesburg is looking for a skilled DevSecOps / Azure Architect to lead the design and governance of secure cloud-native architectures on Microsoft Azure. This role involves driving secure DevOps practices and automating infrastructure.

The successful candidate should have deep expertise in Azure and DevSecOps to ensure scalable, resilient, and secure solutions. Responsibilities include implementing CI/CD pipelines and ensuring compliance with industry security standards.

Qualifications

• Deep Azure architecture expertise with strong DevSecOps practices.
• Experience in designing secure cloud-native architectures on Microsoft Azure.
• Ability to implement multi-region and disaster recovery strategies.

Responsibilities

• Design secure, scalable Azure architectures.
• Integrate security controls into build and deployment workflows.
• Implement blue-green / canary deployment strategies.
• Define cloud security posture management practices.

Skills

Azure architecture expertise

DevSecOps practices

Infrastructure as Code (Bicep/ARM/Terraform)

API security frameworks

Tools

Azure APIM

Azure DevOps

GitHub Actions

Prometheus

Grafana

Job description

Johannesburg, South Africa | Posted on 07/06/2026

We are seeking a highly skilled DevSecOps / Azure Architect to lead the design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. The role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization (including Azure API Management).

The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design.

Key Responsibilities

• Design secure, scalable, and high-availability Azure architectures.
• Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and related services.
• Implement multi-region and disaster recovery strategies.
• Define landing zones and governance models aligned with enterprise standards.

DevSecOps Implementation

• Integrate security controls into build and deployment workflows.
• Automate infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
• Embed security scanning tools (SAST, DAST, container scanning, dependency checks).
• Implement secure release management and environment promotion strategies.

Security Architecture & Compliance

• Design zero-trust architecture patterns.
• Implement secure API gateway configurations (Azure APIM policies).
• Ensure compliance with OWASP API Security Top 10.
• Manage certificate lifecycle, mTLS, and key vault integration.
• Define cloud security posture management practices.

Automation & CI/CD

• Architect CI/CD pipelines using Azure DevOps or GitHub Actions.
• Implement blue-green / canary deployment strategies.
• Enable automated policy validation for APIs.
• Design pipeline governance and approval gates.

Monitoring & Observability

• Implement Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana.
• Define logging, tracing, and alerting strategies.
• Enable proactive anomaly detection and SLA monitoring.

Technical Skills – Mandatory

• AKS (preferred)

Security & DevSecOps

• SAST/DAST tools integration
• Identity & access management
• Secure coding practices
• API security frameworks

Automation

• Infrastructure as Code (Bicep / ARM / Terraform)