Cloud Engineer

Cubic Corporation; Hyderabad; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Cubic Corporation in Hyderabad is seeking a Senior DevSecOps Engineer to deliver and support security service implementations across Azure platforms, combining manual configuration with IaC automation (PowerShell, Terraform, Ansible).

The role covers patching, malware protection, hardening, log management, encryption, backup and recovery, authentication and remote access, and security tooling. You will write SOPs and work with global teams to improve automation and IaC adoption.

Qualifications

• Bachelor's degree or 8+ years in DevOps/DevSecOps or related role.
• Strong hands-on experience with Microsoft Azure.

Responsibilities

• Deliver the standard security service across every Azure program and environment.
• Write, maintain and troubleshoot automation using PowerShell, Terraform and Ansible.
• Diagnose and fix code-level issues in scripts and Terraform, including remediation of configuration drift.
• Create and maintain Technical SOPs following every implementation or remediation.
• Configure and support security scanning tooling and remediation.
• Manage encryption, backup and recovery configurations.
• Administer authentication and remote access controls (Entra ID/Azure AD, MFA).
• Collaborate with global teams to align delivery with security standards.
• Support evolution toward broader Infrastructure-as-Code adoption.

Skills

Azure expertise

PowerShell scripting

Terraform

Ansible

Security operations

IaC automation

Education

Bachelor's degree or equivalent

Tools

PowerShell

Terraform

Ansible

Job description

Job Summary

• We are looking for a highly skilled Senior DevSecOps Engineer to deliver and support the standard security service implementation across our Azure platform, consistently applied across every program and environment. This is a hands-on senior engineering role covering both manual configuration and scripted/automated delivery (PowerShell, Terraform, Ansible), with responsibility for fixing code-level issues and keeping technical documentation current.
• Work Shift: 24x7 Rotational
• Experience: 8+ Years
• Primary Skills: Microsoft Azure, PowerShell, Terraform, Ansible
• Secondary Skills: Networking, security scanning tooling, Windows/Linux administration

Responsibilities

• Deliver the standard security service implementation across every Azure program and environment, covering: patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
• Write, maintain and troubleshoot automation using PowerShell, Terraform and Ansible to support implementation, remediation and configuration control activities.
• Diagnose and fix code-level issues in existing scripts and Terraform, including remediating configuration drift, rather than solely deploying new builds.
• Create and maintain Technical Standard Operating Procedures (SOPs) following every implementation or remediation, keeping documentation aligned to what is actually deployed.
• Configure and support security scanning tooling, ensuring findings are tracked and remediated in line with agreed standards.
• Manage encryption, backup and recovery configuration in line with security and compliance requirements.
• Administer authentication and remote access controls (e.g. Entra ID/Azure AD, MFA, PIM) to agreed standards.
• Act as a senior technical point of contact within Security Operations, reducing the team's reliance on escalations to core platform/network teams.
• Collaborate with global teams to align delivery with security standards and best practice.
• Support the team's ongoing evolution toward broader Infrastructure-as-Code adoption.
• Bachelor's degree, or a minimum of 8 years' experience in DevOps/DevSecOps or a related technical engineering role.
• Strong hands-on experience with Microsoft Azure.
• Strong scripting and automation skills across PowerShell, Terraform and Ansible.
• Demonstrated ability to troubleshoot and fix code-level issues in scripts and Terraform, including resolving configuration drift - not just deploying new infrastructure.
• Hands-on experience implementing and supporting: patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
• Experience producing and maintaining clear technical documentation/SOPs.
• Strong analytical and problem-solving skills, comfortable operating across a mix of manual and automated (IaC) delivery.
• You bring a solution-driven mindset, stay current with technology trends, and thrive in a collaborative, high-stakes environment.

Desirable Certifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500) or equivalent.
• Background in network engineering (this role backfills a network engineering position within the team).