Lead DevSecOps / Azure Architect
We are
seeking a highly skilled DevSecOps / Azure Architect to lead the design,
implementation, and governance of secure cloud-native architectures on
Microsoft Azure. The role will be instrumental in driving secure DevOps
practices, infrastructure automation, and enterprise-grade API platform
modernization (including Azure API Management).
The ideal
candidate will combine deep Azure architecture expertise with strong DevSecOps
practices, ensuring scalability, resilience, and security by design.
Requirements
Key Responsibilities
Azure Architecture & Cloud Design
- Design
secure, scalable, and high-availability Azure architectures.
- Lead
cloud migration initiatives (on-prem / legacy platform → Azure).
- Architect
solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and
related services.
- Implement
multi-region and disaster recovery strategies.
- Define
landing zones and governance models aligned with enterprise standards.
DevSecOps Implementation
- Implement
DevSecOps practices across CI/CD pipelines.
- Integrate
security controls into build and deployment workflows.
- Automate
infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
- Embed
security scanning tools (SAST, DAST, container scanning, dependency
checks).
- Implement
secure release management and environment promotion strategies.
Security Architecture & Compliance
- Design
zero-trust architecture patterns.
- Implement
secure API gateway configurations (Azure APIM policies).
- Configure
OAuth2, OpenID Connect, Azure AD (Entra ID).
- Ensure
compliance with OWASP API Security Top 10.
- Manage
certificate lifecycle, mTLS, and key vault integration.
- Define
cloud security posture management practices.
Automation & CI/CD
- Architect
CI/CD pipelines using Azure DevOps or GitHub Actions.
- Implement
blue-green / canary deployment strategies.
- Enable
automated policy validation for APIs.
- Design
pipeline governance and approval gates.
Monitoring & Observability
- Implement
Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus and
Grafana
- Define
logging, tracing, and alerting strategies.
- Enable
proactive anomaly detection and SLA monitoring.
Technical Skills – Mandatory
Azure Expertise
- Azure
APIM (architecture & policy configuration)
- Azure
AD / Entra ID
- Azure
App Services / Functions
- AKS
(preferred)
- Azure
Key Vault
- Azure
Networking (VNet, NSG, Private Endpoints)
Security & DevSecOps
- DevSecOps
implementation experience
- CI/CD
pipeline security
- SAST/DAST
tools integration
- Identity
& access management
- Secure
coding practices
- API
security frameworks
Automation
- Azure
DevOps / GitHub Actions
- Infrastructure
as Code (Bicep / ARM / Terraform)
- YAML
pipelines
- Containerization
(Docker, Kubernetes preferred)
Key Responsibilities
Azure Architecture & Cloud Design
Design secure, scalable, and high-availability Azure
architectures.
Lead cloud migration initiatives (on-prem / legacy platform
→ Azure).
Architect solutions using Azure APIM, App Services,
Functions, AKS, Service Bus, and related services.
Implement multi-region and disaster recovery strategies.
Define landing zones and governance models aligned with
enterprise standards.
DevSecOps Implementation
Implement DevSecOps practices across CI/CD pipelines.
Integrate security controls into build and deployment
workflows.
Automate infrastructure using Infrastructure as Code (Bicep
/ ARM / Terraform).
Embed security scanning tools (SAST, DAST, container
scanning, dependency checks).
Implement secure release management and environment
promotion strategies.
Security Architecture & Compliance
Design zero-trust architecture patterns.
Implement secure API gateway configurations (Azure APIM
policies).
Configure OAuth2, OpenID Connect, Azure AD (Entra ID).
Ensure compliance with OWASP API Security Top 10.
Manage certificate lifecycle, mTLS, and key vault
integration.
Define cloud security posture management practices.
Automation & CI/CD
Architect CI/CD pipelines using Azure DevOps or GitHub
Actions.
Implement blue-green / canary deployment strategies.
Enable automated policy validation for APIs.
Design pipeline governance and approval gates.
Monitoring & Observability
Implement Azure Monitor, Log Analytics, Application
Insights.
Define logging, tracing, and alerting strategies.
Enable proactive anomaly detection and SLA monitoring.
Technical Skills – Mandatory
Azure Expertise
Azure APIM (architecture & policy configuration)
Azure AD / Entra ID
Azure App Services / Functions
AKS (preferred)
Azure Key Vault
Azure Networking (VNet, NSG, Private Endpoints)
Security & DevSecOps
DevSecOps implementation experience
CI/CD pipeline security
SAST/DAST tools integration
Identity & access management
Secure coding practices
API security frameworks
Automation
Azure DevOps / GitHub Actions
Infrastructure as Code (Bicep / ARM / Terraform)
YAML pipelines
Containerization (Docker, Kubernetes preferred)