We are seeking a highly skilled
DevSecOps / Azure Architect
to lead the design, implementation, and governance of secure, cloud-native architectures on Microsoft Azure. This role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization, with a strong focus on
Azure API Management (APIM)
.

The ideal candidate combines deep Azure architecture expertise with strong DevSecOps capabilities, ensuring
security by design
, scalability, resilience, and operational excellence across enterprise environments.

Key Responsibilities

Azure Architecture & Cloud Design

• 
  Design secure, scalable, and highly available Azure architectures.

• 
  Lead cloud migration initiatives from on-premise and legacy platforms to Azure.

• 
  Architect solutions using Azure API Management, App Services, Azure Functions, AKS, Service Bus, and related Azure services.

• 
  Implement multi-region architectures, high availability, and disaster recovery strategies.

• 
  Define Azure landing zones and governance models aligned with enterprise and security standards.

DevSecOps Implementation

• 
  Implement DevSecOps practices across CI/CD pipelines.

• 
  Integrate security controls throughout build, test, and deployment workflows.

• 
  Automate infrastructure provisioning using Infrastructure as Code (Bicep, ARM, Terraform).

• 
  Embed security tooling including SAST, DAST, container scanning, and dependency vulnerability checks.

• 
  Implement secure release management and controlled environment promotion strategies.

Security Architecture & Compliance

• 
  Design and implement zero-trust security architecture patterns.

• 
  Configure and manage secure API gateway policies using Azure API Management.

• 
  Implement OAuth 2.0, OpenID Connect, and Azure AD (Entra ID) authentication and authorization models.

• 
  Ensure compliance with OWASP API Security Top 10 standards.

• 
  Manage certificate lifecycle, mTLS configurations, and Azure Key Vault integration.

• 
  Define and maintain cloud security posture management practices.

Automation & CI/CD

• 
  Architect and manage CI/CD pipelines using Azure DevOps and/or GitHub Actions.

• 
  Implement blue-green and canary deployment strategies.

• 
  Enable automated policy validation and governance for APIs.

• 
  Design pipeline governance models, approval gates, and compliance controls.

• 
  Implement monitoring and observe solutions using Azure Monitor, Log Analytics, and Application Insights.

• 
  Define enterprise logging, tracing, and alerting strategies.

• 
  Enable proactive anomaly detection, performance monitoring, and SLA tracking.

Requirements

Technical Skills – Mandatory

Azure Expertise

• 
  Azure API Management (architecture and policy configuration)

• 
  Azure AD / Entra ID

• 
  Azure App Services and Azure Functions

• 
  Azure Kubernetes Service (AKS) – preferred

• 
  Azure Key Vault

• 
  Azure Networking (VNet, NSG, Private Endpoints)

Security & DevSecOps

• 
  Proven DevSecOps implementation experience

• 
  CI/CD pipeline security and governance

• 
  SAST and DAST tool integration

• 
  Identity and access management

• 
  Secure coding and API security best practices

• 
  API security frameworks and standards

Automation & Platform Engineering

• 
  Azure DevOps and/or GitHub Actions

• 
  Infrastructure as Code (Bicep, ARM, Terraform)

• 
  YAML-based pipeline configuration

• 
  Containerisation using Docker (Kubernetes preferred)

• 
  Contract Period:
  10 March 2026 – 31 December 2026

• 
  Work Model:
  Onsite

• 
  Location:
  Johannesburg

• 
  Industry:
  Telecommunications