Overview
Blue Pearl is seeking a highly skilled DevSecOps / Azure Architect. This role involves leading the design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. The position is instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization, including Azure API Management. The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design.
What you will do
* **Azure Architecture & Cloud Design:**
* Design secure, scalable, and high-availability Azure architectures.
* Lead cloud migration initiatives (on-prem / legacy platform → Azure).
* Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and related services.
* Implement multi-region and disaster recovery strategies.
* Define landing zones and governance models aligned with enterprise standards.
* **DevSecOps Implementation:**
* Implement DevSecOps practices across CI/CD pipelines.
* Integrate security controls into build and deployment workflows.
* Automate infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
* Embed security scanning tools (SAST, DAST, container scanning, dependency checks).
* Implement secure release management and environment promotion strategies.
* **Security Architecture & Compliance:**
* Design zero-trust architecture patterns.
* Implement secure API gateway configurations (Azure APIM policies).
* Configure OAuth2, OpenID Connect, Azure AD (Entra ID).
* Ensure compliance with OWASP API Security Top 10.
* Manage certificate lifecycle, mTLS, and key vault integration.
* Define cloud security posture management practices.
* **Automation & CI/CD:**
* Architect CI/CD pipelines using Azure DevOps or GitHub Actions.
* Implement blue-green / canary deployment strategies.
* Enable automated policy validation for APIs.
* Design pipeline governance and approval gates.
* **Monitoring & Observability:**
* Implement Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana.
* Define logging, tracing, and alerting strategies.
* Enable proactive anomaly detection and SLA monitoring.
Requirements (from the original advert)
* **Technical Skills – Mandatory**
* **Azure Expertise:**
* Azure APIM (architecture & policy configuration)
* Azure AD / Entra ID
* Azure App Services / Functions
* AKS (preferred)
* Azure Key Vault
* Azure Networking (VNet, NSG, Private Endpoints)
* **Security & DevSecOps:**
* DevSecOps implementation experience
* CI/CD pipeline security
* SAST/DAST tools integration
* Identity & access management
* Secure coding practices
* API security frameworks
* **Automation:**
* Azure DevOps / GitHub Actions
* Infrastructure as Code (Bicep / ARM / Terraform)
* YAML pipelines
* Containerization (Docker, Kubernetes preferred)
* **Additional Requirements:**
* Duration: 6 months
* Working model: Onsite
* Location: Johannesburg
* Industry: Telecommunication
Who should apply
The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design.
Deadline
Not specified
Reference
Original posting: https://www.jobmail.co.za/jobs/it-computer/other-it-computer/johannesburg/devsecops-azure-architect-id-7608462
Source: jobmail
Summary drafted with AI assistance from the original advert. The advert itself is the authority — how we use AI.
At a glance
Azure
Docker
Kubernetes
Git
Extracted automatically from the advert; confirm requirements on the original listing.
Job description
| |
| --- |
| We are seeking a highly skilled DevSecOps / Azure Architect to lead the design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. The role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization (including Azure API Management). The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design. |
| |
| |
| |
| Key Responsibilities |
| Azure Architecture & Cloud Design |
| |
| Design secure, scalable, and high-availability Azure architectures. |
| Lead cloud migration initiatives (on-prem / legacy platform → Azure). |
| Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and related services. |
| Implement multi-region and disaster recovery strategies. |
| Define landing zones and governance models aligned with enterprise standards. |
| |
| |
| DevSecOps Implementation |
| |
| Implement DevSecOps practices across CI/CD pipelines. |
| Integrate security controls into build and deployment workflows. |
| Automate infrastructure using Infrastructure as Code (Bicep / ARM / Terraform). |
| Embed security scanning tools (SAST, DAST, container scanning, dependency checks). |
| Implement secure release management and environment promotion strategies. |
| |
| |
| Security Architecture & Compliance |
| |
| Design zero-trust architecture patterns. |
| Implement secure API gateway configurations (Azure APIM policies). |
| Configure OAuth2, OpenID Connect, Azure AD (Entra ID). |
| Ensure compliance with OWASP API Security Top 10. |
| Manage certificate lifecycle, mTLS, and key vault integration. |
| Define cloud security posture management practices. |
| |
| |
| Automation & CI/CD |
| |
| Architect CI/CD pipelines using Azure DevOps or GitHub Actions. |
| Implement blue-green / canary deployment strategies. |
| Enable automated policy validation for APIs. |
| Design pipeline governance and approval gates. |
| |
| |
| Monitoring & Observability |
| |
| Implement Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana |
| Define logging, tracing, and alerting strategies. |
| Enable proactive anomaly detection and SLA monitoring. |
Requirements
| |
| --- |
| Technical Skills – Mandatory |
| Azure Expertise |
| |
| Azure APIM (architecture & policy configuration) |
| Azure AD / Entra ID |
| Azure App Services / Functions |
| AKS (preferred) |
| Azure Key Vault |
| Azure Networking (VNet, NSG, Private Endpoints) |
| Security & DevSecOps |
| |
| DevSecOps implementation experience |
| CI/CD pipeline security |
| SAST/DAST tools integration |
| Identity & access management |
| Secure coding practices |
| API security frameworks |
| Automation |
| |
| Azure DevOps / GitHub Actions |
| Infrastructure as Code (Bicep / ARM / Terraform) |
| YAML pipelines |
| Containerization (Docker, Kubernetes preferred) |
| |
| Key Responsibilities |
| Azure Architecture & Cloud Design |
| Design secure, scalable, and high-availability Azure architectures. |
| Lead cloud migration initiatives (on-prem / legacy platform → Azure). |
| Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and related services. |
| Implement multi-region and disaster recovery strategies. |
| Define landing zones and governance models aligned with enterprise standards. |
| |
| DevSecOps Implementation |
| |
| Implement DevSecOps practices across CI/CD pipelines. |
| Integrate security controls into build and deployment workflows. |
| Automate infrastructure using Infrastructure as Code (Bicep / ARM / Terraform). |
| Embed security scanning tools (SAST, DAST, container scanning, dependency checks). |
| Implement secure release management and environment promotion strategies. |
| |
| Security Architecture & Compliance |
| Design zero-trust architecture patterns. |
| Implement secure API gateway configurations (Azure APIM policies). |
| Configure OAuth2, OpenID Connect, Azure AD (Entra ID). |
| Ensure compliance with OWASP API Security Top 10. |
| Manage certificate lifecycle, mTLS, and key vault integration. |
| Define cloud security posture management practices. |
| |
| Automation & CI/CD |
| Architect CI/CD pipelines using Azure DevOps or GitHub Actions. |
| Implement blue-green / canary deployment strategies. |
| Enable automated policy validation for APIs. |
| Design pipeline governance and approval gates. |
| |
| Monitoring & Observability |
| |
| Implement Azure Monitor, Log Analytics, Application Insights. |
| Define logging, tracing, and alerting strategies. |
| Enable proactive anomaly detection and SLA monitoring. |
| Technical Skills – Mandatory |
| Azure Expertise |
| Azure APIM (architecture & policy configuration) |
| Azure AD / Entra ID |
| Azure App Services / Functions |
| AKS (preferred) |
| Azure Key Vault |
| Azure Networking (VNet, NSG, Private Endpoints) |
| |
| Security & DevSecOps |
| DevSecOps implementation experience |
| CI/CD pipeline security |
| SAST/DAST tools integration |
| Identity & access management |
| Secure coding practices |
| API security frameworks |
| |
| Automation |
| |
| Azure DevOps / GitHub Actions |
| Infrastructure as Code (Bicep / ARM / Terraform) |
| YAML pipelines |
| Containerization (Docker, Kubernetes preferred) |
| Requirement: |
| |
| Duration: 6 months |
| |
| Working model: Onsite |
| Location: Johannesburg |
| Industry: Telecommunication |
Blue Pearl PTY LTD
Recruiter
Before you apply
Confirm the requirements and closing date on the original listing (jobmail). SPANi lists vacancies from other sites and may not reflect last-minute changes.
Legitimate employers do not charge application, registration or training fees.
Don't send your ID or bank details before you have confirmed the employer is real.
Reverside is an established it services provider focusing on delivering high-quality software development, it resourcing, digital transformation, and systems support solutions.
(This is a re-advertisement, applicants who applied previously are encouraged to re-apply if they are still interested in the post) : R487 197 per annum (Level 09), plus benefits as applicable in the Public Sector : Central Johannesburg TVET College, Central Office
: A relevant NQF level 6 qualification in Public Management / Administration / Facility Management field. One (1) relevant experience in facilities management. The disclosure of a valid unexpired driver’s license. Computer Literacy (Microsoft package). Batho Pele Principles, Regulations (e.g.