Lead DevSecOps / Azure Architect
We are seeking a highly skilled DevSecOps / Azure Architect to lead the design, implementation, and governance of secure cloud-native architectures on Microsoft Azure. The role will be instrumental in driving secure DevOps practices, infrastructure automation, and enterprise-grade API platform modernization (including Azure API Management).
The ideal candidate will combine deep Azure architecture expertise with strong DevSecOps practices, ensuring scalability, resilience, and security by design.
Requirements
Key Responsibilities
Azure Architecture & Cloud Design
- Designsecure, scalable, and high-availability Azure architectures.
- Leadcloud migration initiatives (on-prem / legacy platform → Azure).
- Architectsolutions using Azure APIM, App Services, Functions, AKS, Service Bus, andrelated services.
- Implementmulti-region and disaster recovery strategies.
- Definelanding zones and governance models aligned with enterprise standards.
DevSecOps Implementation
- ImplementDevSecOps practices across CI/CD pipelines.
- Integratesecurity controls into build and deployment workflows.
- Automateinfrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
- Embedsecurity scanning tools (SAST, DAST, container scanning, dependencychecks).
- Implementsecure release management and environment promotion strategies.
Security Architecture & Compliance
- Designzero-trust architecture patterns.
- Implementsecure API gateway configurations (Azure APIM policies).
- ConfigureOAuth2, OpenID Connect, Azure AD (Entra ID).
- Ensurecompliance with OWASP API Security Top 10.
- Managecertificate lifecycle, mTLS, and key vault integration.
- Definecloud security posture management practices.
Automation & CI/CD
- ArchitectCI/CD pipelines using Azure DevOps or GitHub Actions.
- Implementblue-green / canary deployment strategies.
- Enableautomated policy validation for APIs.
- Designpipeline governance and approval gates.
Monitoring & Observability
- ImplementAzure Monitor, Log Analytics, Application Insights, ELK, Prometheus andGrafana
- Definelogging, tracing, and alerting strategies.
- Enableproactive anomaly detection and SLA monitoring.
Technical Skills - Mandatory
Azure Expertise
- AzureAPIM (architecture & policy configuration)
- AzureAD / Entra ID
- AzureApp Services / Functions
- AKS(preferred)
- AzureKey Vault
- AzureNetworking (VNet, NSG, Private Endpoints)
Security & DevSecOps
- DevSecOpsimplementation experience
- CI/CDpipeline security
- SAST/DASTtools integration
- Identity& access management
- Securecoding practices
- APIsecurity frameworks
Automation
- AzureDevOps / GitHub Actions
- Infrastructureas Code (Bicep / ARM / Terraform)
- YAMLpipelines
- Containerization(Docker, Kubernetes preferred)
Key Responsibilities
Azure Architecture & Cloud Design
Design secure, scalable, and high-availability Azure architectures.
Lead cloud migration initiatives (on-prem / legacy platform → Azure).
Architect solutions using Azure APIM, App Services, Functions, AKS, Service Bus, and related services.
Implement multi-region and disaster recovery strategies.
Define landing zones and governance models aligned with enterprise standards.
DevSecOps Implementation
Implement DevSecOps practices across CI/CD pipelines.
Integrate security controls into build and deployment workflows.
Automate infrastructure using Infrastructure as Code (Bicep / ARM / Terraform).
Embed security scanning tools (SAST, DAST, container scanning, dependency checks).
Implement secure release management and environment promotion strategies.
Security Architecture & Compliance
Design zero-trust architecture patterns.
Implement secure API gateway configurations (Azure APIM policies).
Configure OAuth2, OpenID Connect, Azure AD (Entra ID).
Ensure compliance with OWASP API Security Top 10.
Manage certificate lifecycle, mTLS, and key vault integration.
Define cloud security posture management practices.
Automation & CI/CD
Architect CI/CD pipelines using Azure DevOps or GitHub Actions.
Implement blue-green / canary deployment strategies.
Enable automated policy validation for APIs.
Design pipeline governance and approval gates.
Monitoring & Observability
Implement Azure Monitor, Log Analytics, Application Insights.
Define logging, tracing, and alerting strategies.
Enable proactive anomaly detection and SLA monitoring.
Technical Skills - Mandatory
Azure Expertise
Azure APIM (architecture & policy configuration)
Azure AD / Entra ID
Azure App Services / Functions
AKS (preferred)
Azure Key Vault
Azure Networking (VNet, NSG, Private Endpoints)
Security & DevSecOps
DevSecOps implementation experience
CI/CD pipeline security
SAST/DAST tools integration
Identity & access management
Secure coding practices
API security frameworks
Automation
Azure DevOps / GitHub Actions
Infrastructure as Code (Bicep / ARM / Terraform)
YAML pipelines
Containerization (Docker, Kubernetes preferred)