About this role

We are seeking a highly skilled DevSecOps / Azure Architect to
lead the design, implementation, and governance of secure cloud-native
architectures on Microsoft Azure. The role will be instrumental in driving
secure DevOps practices, infrastructure automation, and enterprise-grade API
platform modernization (including Azure API Management). The ideal candidate
will combine deep Azure architecture expertise with strong DevSecOps
practices, ensuring scalability, resilience, and security by design.

Key Responsibilities

Azure Architecture & Cloud Design

Design secure, scalable, and
high-availability Azure architectures.

Lead cloud migration initiatives
(on-prem / legacy platform → Azure).

Architect solutions using Azure APIM,
App Services, Functions, AKS, Service Bus, and related services.

Implement multi-region and disaster
recovery strategies.

Define landing zones and governance
models aligned with enterprise standards.

DevSecOps Implementation

Implement DevSecOps practices across
CI/CD pipelines.

Integrate security controls into
build and deployment workflows.

Automate infrastructure using
Infrastructure as Code (Bicep / ARM / Terraform).

Embed security scanning tools (SAST,
DAST, container scanning, dependency checks).

Implement secure release management
and environment promotion strategies.

Security Architecture & Compliance

Design zero-trust architecture
patterns.

Implement secure API gateway
configurations (Azure APIM policies).

Configure OAuth2, OpenID Connect,
Azure AD (Entra ID).

Ensure compliance with OWASP API
Security Top 10.

Manage certificate lifecycle, mTLS,
and key vault integration.

Define cloud security posture
management practices.

Automation & CI/CD

Architect CI/CD pipelines using Azure
DevOps or GitHub Actions.

Implement blue-green / canary
deployment strategies.

Enable automated policy validation
for APIs.

Design pipeline governance and
approval gates.

Monitoring & Observability

Implement Azure Monitor, Log
Analytics, Application Insights, ELK, Prometheus and Grafana

Define logging, tracing, and alerting
strategies.

Enable proactive anomaly detection
and SLA monitoring.

Requirements

Technical Skills – Mandatory

Azure Expertise

Azure APIM (architecture & policy
configuration)

Azure AD / Entra ID

Azure App Services / Functions

AKS (preferred)

Azure Key Vault

Azure Networking (VNet, NSG, Private
Endpoints)

Security & DevSecOps

DevSecOps implementation experience

CI/CD pipeline security

SAST/DAST tools integration

Identity & access management

Secure coding practices

API security frameworks

Automation

Azure DevOps / GitHub Actions

Infrastructure as Code (Bicep / ARM /
Terraform)

YAML pipelines

Containerization (Docker, Kubernetes
preferred)