Application Developer - DevOps
Summary
DevOps/Azure Architect on a 12-month hybrid contract in Johannesburg (Sandton): designs secure, scalable Azure architectures, embeds DevSecOps into CI/CD pipelines, automates infrastructure as code, and modernizes the enterprise API platform with Azure APIM. Core stack: Azure APIM, Entra ID, AKS, Key Vault, Terraform/Bicep, GitHub Actions/Azure DevOps.
We are seeking a highly skilled DevOps / Azure Architect to lead the design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. The role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization (including Azure API Management).
The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design.
Key Responsibilities
- Design secure, scalable, and high-availability Azure architectures.
- Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and related services.
- Implement multi-region and disaster recovery strategies.
- Define landing zones and governance models aligned with enterprise standards.
DevSecOps Implementation
- Implement DevSecOps practices across CI/CD pipelines.
- Integrate security controls into build and deployment workflows.
- Automate infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
- Embed security scanning tools (SAST, DAST, container scanning, dependency checks).
- Implement secure release management and environment promotion strategies.
Security Architecture & Compliance
- Design zero-trust architecture patterns.
- Implement secure API gateway configurations (Azure APIM policies).
- Ensure compliance with OWASP API Security Top 10.
- Manage certificate lifecycle, mTLS, and key vault integration.
- Define cloud security posture management practices.
Automation & CI/CD
- Architect CI/CD pipelines using Azure DevOps or GitHub Actions.
- Implement blue-green / canary deployment strategies.
- Enable automated policy validation for APIs.
- Design pipeline governance and approval gates.
Monitoring & Observability
- Implement Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana
- Define logging, tracing, and alerting strategies.
- Enable proactive anomaly detection and SLA monitoring.
Technical Skills – Mandatory
- Azure APIM (architecture & policy configuration)
Azure Expertise
- Azure APIM (architecture & policy configuration)
- Azure AD / Entra ID
- Azure App Services / Functions
- AKS (preferred)
- Azure Key Vault
- Azure Networking (VNet, NSG, Private Endpoints)
Security & DevSecOps
- DevSecOps implementation experience
- CI/CD pipeline security
- SAST/DAST tools integration
- Identity & access management
- Secure coding practices
- API security frameworks
Automation
- Azure DevOps / GitHub Actions
- Infrastructure as Code (Bicep / ARM / Terraform)
- YAML pipelines
- Containerization (Docker, Kubernetes preferred)
Containerization (Docker, Kubernetes preferred)
We are seeking a highly skilled DevOps / Azure Architect to lead the design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. The role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization (including Azure API Management).
The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design.
Key Responsibilities
- Design secure, scalable, and high-availability Azure architectures.
- Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and related services.
- Implement multi-region and disaster recovery strategies.
- Define landing zones and governance models aligned with enterprise standards.
DevSecOps Implementation
- Implement DevSecOps practices across CI/CD pipelines.
- Integrate security controls into build and deployment workflows.
- Automate infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
- Embed security scanning tools (SAST, DAST, container scanning, dependency checks).
- Implement secure release management and environment promotion strategies.
Security Architecture & Compliance
- Design zero-trust architecture patterns.
- Implement secure API gateway configurations (Azure APIM policies).
- Ensure compliance with OWASP API Security Top 10.
- Manage certificate lifecycle, mTLS, and key vault integration.
- Define cloud security posture management practices.
Automation & CI/CD
- Architect CI/CD pipelines using Azure DevOps or GitHub Actions.
- Implement blue-green / canary deployment strategies.
- Enable automated policy validation for APIs.
- Design pipeline governance and approval gates.
Monitoring & Observability
- Implement Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana
- Define logging, tracing, and alerting strategies.
- Enable proactive anomaly detection and SLA monitoring.
Technical Skills – Mandatory
- Azure APIM (architecture & policy configuration)
Azure Expertise
- Azure APIM (architecture & policy configuration)
- Azure AD / Entra ID
- Azure App Services / Functions
- AKS (preferred)
- Azure Key Vault
- Azure Networking (VNet, NSG, Private Endpoints)
Security & DevSecOps
- DevSecOps implementation experience
- CI/CD pipeline security
- SAST/DAST tools integration
- Identity & access management
- Secure coding practices
- API security frameworks
Automation
- Azure DevOps / GitHub Actions
- Infrastructure as Code (Bicep / ARM / Terraform)
- YAML pipelines
- Containerization (Docker, Kubernetes preferred)
Containerization (Docker, Kubernetes preferred)
Requirements
Duration – 1 November 2026 – 31 October 2027
Work Model – hybrid
Location: Johannesburg Area (Sandton)
Travel: Not required
Skills
- AKS
- Analytics
- Anomaly Detection
- API
- API Gateway
- Api Security
- Automation
- Azure
- Azure AD
- Azure Application Insights
- Azure DevOps
- Azure Monitor
- Bicep
- CI/CD
- Cloud
- Cloud Native
- Cloud Security
- Containerization
- DAST
- DevOps
- DevSecOps
- Docker
- ELK
- Entra ID
- GitHub
- GitHub Actions
- Grafana
- Infrastructure as Code
- Kubernetes
- Networking
- Observability
- OWASP
- Prometheus
- SAST
- Secure Coding
- Terraform
- TLS
- Vault
- YAML
- Zero Trust