We
are seeking a highly skilled DevOps / Azure Architect to lead the
design, implementation, and governance of secure cloud-native architectures on
Microsoft Azure. The role will be instrumental in driving secure DevOps
practices, infrastructure automation, and enterprise-grade API platform
modernization (including Azure API Management).
The
ideal candidate will combine deep Azure architecture expertise with strong
DevSecOps practices, ensuring scalability, resilience, and security by design.
Key Responsibilities
Azure Architecture & Cloud Design
· Design secure,
scalable, and high-availability Azure architectures.
· Lead cloud migration
initiatives (on-prem / legacy platform → Azure).
· Architect solutions
using Azure APIM, App Services, Functions, AKS, Service Bus, and related
services.
· Implement multi-region
and disaster recovery strategies.
· Define landing zones
and governance models aligned with enterprise standards.
DevSecOps Implementation
· Implement DevSecOps
practices across CI/CD pipelines.
· Integrate security
controls into build and deployment workflows.
· Automate
infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
· Embed security
scanning tools (SAST, DAST, container scanning, dependency checks).
· Implement secure
release management and environment promotion strategies.
Security Architecture
& Compliance
· Design zero-trust
architecture patterns.
· Implement secure API
gateway configurations (Azure APIM policies).
· Configure OAuth2,
OpenID Connect, Azure AD (Entra ID).
· Ensure compliance with
OWASP API Security Top 10.
· Manage certificate
lifecycle, mTLS, and key vault integration.
· Define cloud security
posture management practices.
Automation & CI/CD
· Architect CI/CD
pipelines using Azure DevOps or GitHub Actions.
· Implement blue-green /
canary deployment strategies.
· Enable automated
policy validation for APIs.
· Design pipeline
governance and approval gates.
Monitoring & Observability
· Implement Azure
Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana
· Define logging,
tracing, and alerting strategies.
· Enable proactive
anomaly detection and SLA monitoring.
Technical Skills – Mandatory
Azure Expertise
· Azure APIM
(architecture & policy configuration)
· Azure AD / Entra ID
· Azure App Services /
Functions
· AKS (preferred)
· Azure Key Vault
· Azure Networking
(VNet, NSG, Private Endpoints)
Security & DevSecOps
· DevSecOps
implementation experience
· CI/CD pipeline
security
· SAST/DAST tools
integration
· Identity & access
management
· Secure coding
practices
· API security
frameworks
Automation
· Azure DevOps / GitHub
Actions
· Infrastructure as Code
(Bicep / ARM / Terraform)
· YAML pipelines
Requirements
Key
Responsibilities
Azure
Architecture & Cloud Design
Design secure,
scalable, and high-availability Azure architectures.
Lead cloud
migration initiatives (on-prem / legacy platform → Azure).
Architect
solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and
related services.
Implement
multi-region and disaster recovery strategies.
Define landing
zones and governance models aligned with enterprise standards.
DevSecOps
Implementation
Implement
DevSecOps practices across CI/CD pipelines.
Integrate
security controls into build and deployment workflows.
Automate
infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
Embed security
scanning tools (SAST, DAST, container scanning, dependency checks).
Implement
secure release management and environment promotion strategies.
Security
Architecture & Compliance
Design
zero-trust architecture patterns.
Implement
secure API gateway configurations (Azure APIM policies).
Configure
OAuth2, OpenID Connect, Azure AD (Entra ID).
Ensure
compliance with OWASP API Security Top 10.
Manage
certificate lifecycle, mTLS, and key vault integration.
Define cloud
security posture management practices.
Automation
& CI/CD
Architect
CI/CD pipelines using Azure DevOps or GitHub Actions.
Implement
blue-green / canary deployment strategies.
Enable
automated policy validation for APIs.
Design
pipeline governance and approval gates.
Monitoring
& Observability
Implement
Azure Monitor, Log Analytics, Application Insights.
Define
logging, tracing, and alerting strategies.
Enable
proactive anomaly detection and SLA monitoring.
Technical
Skills – Mandatory
Azure
Expertise
Azure APIM
(architecture & policy configuration)
Azure AD /
Entra ID
Azure App
Services / Functions
AKS
(preferred)
Azure Key
Vault
Azure
Networking (VNet, NSG, Private Endpoints)
Security
& DevSecOps
DevSecOps
implementation experience
CI/CD pipeline
security
SAST/DAST
tools integration
Identity &
access management
Secure coding
practices
API security
frameworks
Automation
Azure DevOps /
GitHub Actions
Infrastructure
as Code (Bicep / ARM / Terraform)
YAML pipelines
Requirements
Duration – 1 November 2026 – 31 October 2027
Work Model – hybrid
Location: Johannesburg Area (Sandton)
Travel: Not required
Skills Required
- Azure API Management architecture and policy configuration experience
- Azure AD or Microsoft Entra ID experience
- Azure App Services and Azure Functions experience
- Azure Key Vault experience
- Azure networking experience, including VNets, NSGs, and private endpoints
- DevSecOps implementation experience
- CI/CD pipeline security experience
- SAST and DAST tool integration experience
- Identity and access management experience
- Secure coding practices knowledge
- API security frameworks knowledge
- Azure DevOps or GitHub Actions experience
- Infrastructure as Code experience using Bicep, ARM, or Terraform
- YAML pipeline experience
- Azure Kubernetes Service experience
- Docker and Kubernetes containerization experience
What We Do
Blue Pearl is a market-leading CLOUD Solutions developer with extensive knowledge and insight into the latest technologies, standardised processes, advanced technical capabilities and consulting processes available, ensuring wholistic success for our clientele. We offer professional consulting to compliment your business strategy and overall management and make it our priority to add value to any business by listening, analysing and creating a conducive solution that will empower our client. We implement a Data Analysis Process that includes inspecting, cleansing, transforming, and modelling data with the end-goal of discovering useful information, informing conclusions, and relevant information to support your decision-making. Your business cannot afford not to engage with us, allowing our data analysis to play a role in making your business decisions more scientific and helping your business achieve effective operation. Blue Pearl’s team of experts include BI strategists, BI analysts, Data Warehouse Architects, Data Scientists, Implementation and Development experts. With the use of BI, Analytics and Big Data, we effectively partner with our customers on their mission to achieve a competitive business advantage and real ROI from the structured information we collect.
