Azure Architect, Randburg

The Role

Role Summary

We are seeking a highly skilled DevSecOps / Azure Architect to lead the design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. The role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization (including Azure API Management).

The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design.

Key Responsibilities

Azure Architecture & Cloud Design

Design secure, scalable, and high-availability Azure architectures. Lead cloud migration initiatives (on-prem / legacy platform → Azure). Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and related services. Implement multi-region and disaster recovery strategies. Define landing zones and governance models aligned with enterprise standards.

DevSecOps Implementation

Implement DevSecOps practices across CI/CD pipelines. Integrate security controls into build and deployment workflows. Automate infrastructure using Infrastructure as Code (Bicep / ARM / Terraform). Embed security scanning tools (SAST, DAST, container scanning, dependency checks). Implement secure release management and environment promotion strategies.

Security Architecture & Compliance

Design zero-trust architecture patterns. Implement secure API gateway configurations (Azure APIM policies). Configure OAuth2, OpenID Connect, Azure AD (Entra ID). Ensure compliance with OWASP API Security Top 10. Manage certificate lifecycle, mTLS, and key vault integration. Define cloud security posture management practices.

Automation & CI/CD

Architect CI/CD pipelines using Azure DevOps or GitHub Actions. Implement blue-green / canary deployment strategies. Enable automated policy validation for APIs. Design pipeline governance and approval gates.

Monitoring & Observability

Implement Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana Define logging, tracing, and alerting strategies. Enable proactive anomaly detection and SLA monitoring.

Skills and Experience

Technical Skills – Mandatory

Azure Expertise

Azure APIM (architecture & policy configuration) Azure AD / Entra ID Azure App Services / Functions AKS (preferred) Azure Key Vault Azure Networking (VNet, NSG, Private Endpoints)

Security & DevSecOps

DevSecOps implementation experience CI/CD pipeline security SAST/DAST tools integration Identity & access management Secure coding practices API security frameworks

Automation

Azure DevOps / GitHub Actions Infrastructure as Code (Bicep / ARM / Terraform) YAML pipelines Containerization (Docker, Kubernetes preferred)