Senior Cloud Automation Engineer

TOCUMULUS; Mumbai; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

TOCUMULUS in Navi Mumbai seeks a Senior Cloud Automation Engineer to design end-to-end automation that strengthens security. You will author Terraform modules, build Logic Apps for SOAR, and create Sentinel connectors and Azure Monitor-based apps across Azure, GCP, and AWS.

This role requires hands-on IaC, cloud security, and scripting with Python/PowerShell. You will contribute to multi-cloud CSPM pipelines and asset discovery, delivering secure, scalable automation solutions.

Qualifications

• 6 to 9 years of hands-on cloud security engineering and IaC automation.
• B.Tech or M.Tech in CS/IT/Cyber Security or related field.
• Strong Terraform expertise with policy-as-code tooling (Checkov, tfsec).
• Experience with Microsoft Sentinel, KQL, and Logic Apps for automated threat response.

Responsibilities

• Write reusable Terraform modules for Azure security controls.
• Develop Sentinel connectors and Logic Apps for SOAR automation.
• Build Sentinel-as-Code content including Analytics Rules and Workbooks.
• Design Azure Monitor dashboards and manage Log Analytics.
• Collaborate on CSPM across Azure, GCP, and AWS.

Skills

Terraform

Checkov

tfsec

Microsoft Sentinel

KQL

Logic Apps

Azure Monitor

Python

Azure Functions

Multi-cloud

Education

B.Tech or M.Tech in CS/IT/Cyber Security

Tools

Terraform

Microsoft Sentinel

Job description

Job Title: Senior Cloud Automation Engineer

Working Hours: 9:00 AM – 6:00 PM

Mode of Interview: Face-to-Face at Navi Mumbai

Headcount: 2 Positions

Position Summary

The Senior Cloud Automation Engineer is an individual contributor role focused on building end-to-end automation that actively strengthens the enterprise cyber-security posture. The incumbent will write Terraform to deploy security controls, build Logic Apps for automated SOAR workflows, develop custom Sentinel connectors and Azure Monitor-based applications, and contribute to multi-cloud CSPM and asset-discovery pipelines across Azure, GCP, and AWS environments.

Requirements

Job Title: Senior Cloud Automation Engineer

Working Hours: 9:00 AM – 6:00 PM

Mode of Interview: Face-to-Face at Navi Mumbai

Headcount: 2 Positions

Position Summary

The Senior Cloud Automation Engineer is an individual contributor role focused on building end-to-end automation that actively strengthens the enterprise cyber-security posture. The incumbent will write Terraform to deploy security controls, build Logic Apps for automated SOAR workflows, develop custom Sentinel connectors and Azure Monitor-based applications, and contribute to multi-cloud CSPM and asset-discovery pipelines across Azure, GCP, and AWS environments.

Key Responsibilities

• Terraform & Infrastructure-as-Code (IaC):

  • Write and maintain reusable, production-grade Terraform modules for Azure security controls—including NSGs, Azure Firewall, App Gateway / WAF, Key Vault, Private Endpoints, and Defender for Cloud.

  • Manage Terraform state, workspaces, automated plan reviews, and policy-as-code enforcement using tools like Checkov and tfsec.

• Sentinel Connectors, Logic Apps & SOAR Automation:

  • Develop custom Microsoft Sentinel data connectors utilizing Codeless Connector Platform (CCP), Logs Ingestion API, Function App pollers, and Event Hub / Storage pipelines.

  • Build Logic Apps (Standard & Consumption) for SOAR to handle real-time alert enrichment, ITSM ticketing (ServiceNow, Jira), Teams/email notifications, and automated containment actions.

  • Engineer Sentinel-as-Code content—including Analytics Rules written in KQL, custom Workbooks, and Watchlists—delivered seamlessly via Terraform.

• Azure Monitor & Web Applications:

  • Design and implement Azure Monitor dashboards, Log Analytics workspaces, Data Collection Rules (DCRs), Azure Monitor Agent (AMA) onboarding, custom alerts, action groups, and Application Insights.

  • Deploy and operate Azure Web Apps, App Services, and Azure Functions using modern deployment frameworks (ZIP, Run-from-Package, container deployments, and deployment slots with swap).

  • Embed robust App Service security using Managed Identities, Key Vault references, Private Endpoints, and Easy Auth (Microsoft Entra ID integration).

• Multi-Cloud CSPM & Asset Discovery:

  • Contribute to Cloud Security Posture Management (CSPM) pipelines assessing Azure, GCP, and AWS against CIS benchmarks, NIST standards, and internal security frameworks.

  • Develop automated asset-discovery tools to aggregate subscriptions, projects, accounts, identities, networks, storage, and PaaS inventories.

  • Centralize security findings from Defender for Cloud, GCP Security Command Center (SCC), and AWS Security Hub into a unified triage workflow.

Candidate Profile & Qualifications

• Experience: 6 to 9 years of hands-on experience in cloud security engineering, infrastructure-as-code automation, and cloud-native security development.

• Education: B.Tech or M.Tech in Computer Science, Information Technology, Cyber Security, or a related field.

• Core Technical Competencies:

  • Expert-level Terraform skills along with policy-as-code tools (Checkov, tfsec).

  • Strong mastery of Microsoft Sentinel, KQL, custom data connector development, and Logic Apps for automated threat response.

  • Practical experience with Azure Monitor, App Services, Azure Functions, and Python/PowerShell/Shell scripting.

  • Deep understanding of multi-cloud environments (Azure, GCP, AWS) and security posture management frameworks.

• Certifications:

  • HashiCorp Certified: Terraform Associate

  • AZ-204: Developing Solutions for Microsoft Azure

  • AZ-500: Microsoft Azure Security Technologies

  • SC-200: Microsoft Security Operations Analyst

  • AWS Certified Security – Specialty OR Google Associate Cloud Engineer