DevSecOps Azure Architect

About the role

Sunrise is seeking a DevSecOps Azure Architect to lead the design, implementation, and governance of secure cloud‑native solutions on Microsoft Azure for its telecommunications operations in Johannesburg. The role will drive secure DevOps practices, infrastructure automation, and modernisation of enterprise‑grade API platforms.

Key responsibilities

• Design and implement secure, scalable, high‑availability Azure architectures, including multi‑region and disaster‑recovery strategies.
• Lead migration of on‑premise and legacy workloads to Azure, defining landing zones and governance models.
• Architect solutions using Azure API Management, App Services, Functions, AKS, Service Bus and related services.
• Embed DevSecOps practices into CI/CD pipelines, integrating security controls, SAST/DAST scanning, container scanning and dependency checks.
• Automate infrastructure with Infrastructure as Code (Bicep, ARM, Terraform) and manage deployments via Azure DevOps or GitHub Actions.
• Design zero‑trust and API security patterns, configure OAuth2/OpenID Connect, Azure AD (Entra ID) and manage certificates, mTLS and Key Vault.
• Implement monitoring, logging and alerting using Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus and Grafana.
• Define pipeline governance, approval gates and release management strategies such as blue‑green or canary deployments.

Required profile

• Proven experience designing and operating secure Azure environments at enterprise scale.
• Strong background in DevSecOps, CI/CD pipeline security and infrastructure automation.
• Hands‑on experience with cloud migration projects and API platform modernisation.
• Ability to work onsite in Johannesburg for the duration of the contract.

Required skills

• Azure API Management (APIM) architecture and policy configuration
• Azure AD / Entra ID, Azure Key Vault, Azure Networking (VNet, NSG, Private Endpoints)
• Azure App Services, Azure Functions, Azure Kubernetes Service (AKS)
• Infrastructure as Code: Bicep, ARM templates, Terraform
• CI/CD tools: Azure DevOps, GitHub Actions, YAML pipelines
• Security tooling: SAST, DAST, container scanning, dependency checks
• Identity & access management, OAuth2, OpenID Connect, zero‑trust design
• Monitoring & observability: Azure Monitor, Log Analytics, Application Insights, ELK, Prometheus, Grafana
• Containerisation: Docker, Kubernetes (preferred)