Senior DevSecOps Engineer (Azure Infrastructure Engineer)

Cubic Transportation Systems; Hyderabad; On-site; INR 4,500,000 - 7,500,000; Full time

Job summary

Cubic Transportation Systems in Hyderabad is seeking a senior DevSecOps Engineer to deliver and support a standard security service across our Azure platform, combining manual configuration with scripted IaC delivery.

You will script with PowerShell, Terraform and Ansible to support implementation, remediation and configuration control activities, while ensuring patching, malware protection, hardening, log management and backup/recovery are maintained.

Qualifications

• Bachelor's degree or 8+ years in DevOps/DevSecOps or a related technical engineering role.
• Strong hands-on experience with Microsoft Azure.
• Strong scripting and automation skills across PowerShell, Terraform and Ansible.
• Demonstrated ability to troubleshoot and fix code-level issues in scripts and Terraform, including resolving configuration drift – not just deploying new infrastructure.
• Hands-on experience implementing and supporting: patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
• Experience producing and maintaining clear technical documentation/SOPs.
• Strong analytical and problem-solving skills, comfortable operating across a mix of manual and automated (IaC) delivery.

Responsibilities

• Deliver the standard security service implementation across every Azure program and environment, covering: patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
• Write, maintain and troubleshoot automation using PowerShell, Terraform and Ansible to support implementation, remediation and configuration control activities.
• Diagnose and fix code-level issues in existing scripts and Terraform, including remediating configuration drift, rather than solely deploying new builds.
• Create and maintain Technical SOPs following every implementation or remediation, keeping documentation aligned to what is actually deployed.
• Configure and support security scanning tooling, ensuring findings are tracked and remediated in line with agreed standards.
• Manage encryption, backup and recovery configuration in line with security and compliance requirements.
• Administer authentication and remote access controls (e.g. Entra ID/Azure AD, MFA, PIM) to agreed standards.
• Act as a senior technical point of contact within Security Operations, reducing the team's reliance on escalations to core platform/network teams.
• Collaborate with global teams to align delivery with security standards and best practice.
• Support the team's ongoing evolution toward broader Infrastructure-as-Code adoption.

Skills

Microsoft Azure

PowerShell

Terraform

Ansible

Networking

Education

Bachelor's degree or 8+ years experience in DevOps/DevSecOps

Job description

Company Details

When you join Cubic, you become part of a company that creates and delivers technology solutions in transportation to make people’s lives easier by simplifying their daily journeys, and defense capabilities to help promote mission success and safety for those who serve their nation. Led by our talented teams around the world, Cubic is committed to solving global issues through innovation and service to our customers and partners.

Business Unit

Cubic Transportation Systems

Company Details

When you join Cubic, you become part of a company that creates and delivers technology solutions in transportation to make people’s lives easier by simplifying their daily journeys, and defense capabilities to help promote mission success and safety for those who serve their nation. Led by our talented teams around the world, Cubic is committed to solving global issues through innovation and service to our customers and partners.

We have a top-tier portfolio of businesses, including Cubic Transportation Systems (CTS) and Cubic Defense (CD). Explore more on Cubic.com.

Job Details

• Job Summary: We are looking for a highly skilled Senior DevSecOps Engineer to deliver and support the standard security service implementation across our Azure platform, consistently applied across every program and environment. This is a hands‑on senior engineering role covering both manual configuration and scripted/automated delivery (PowerShell, Terraform, Ansible), with responsibility for fixing code‑level issues and keeping technical documentation current.

Work Shift: 24x7 Rotational

Experience: 8+ Years

Primary Skills: Microsoft Azure, PowerShell, Terraform, Ansible

Secondary Skills: Networking, security scanning tooling, Windows/Linux administration

Responsibilities

• Deliver the standard security service implementation across every Azure program and environment, covering: patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
• Write, maintain and troubleshoot automation using PowerShell, Terraform and Ansible to support implementation, remediation and configuration control activities.
• Diagnose and fix code-level issues in existing scripts and Terraform, including remediating configuration drift, rather than solely deploying new builds.
• Create and maintain Technical Standard Operating Procedures (SOPs) following every implementation or remediation, keeping documentation aligned to what is actually deployed.
• Configure and support security scanning tooling, ensuring findings are tracked and remediated in line with agreed standards.
• Manage encryption, backup and recovery configuration in line with security and compliance requirements.
• Administer authentication and remote access controls (e.g. Entra ID/Azure AD, MFA, PIM) to agreed standards.
• Act as a senior technical point of contact within Security Operations, reducing the team's reliance on escalations to core platform/network teams.
• Collaborate with global teams to align delivery with security standards and best practice.
• Support the team's ongoing evolution toward broader Infrastructure-as-Code adoption.

Minimum Job Requirements

• Bachelor's degree, or a minimum of 8 years' experience in DevOps/DevSecOps or a related technical engineering role.
• Strong hands‑on experience with Microsoft Azure.
• Strong scripting and automation skills across PowerShell, Terraform and Ansible.
• Demonstrated ability to troubleshoot and fix code‑level issues in scripts and Terraform, including resolving configuration drift – not just deploying new infrastructure.
• Hands‑on experience implementing and supporting: patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
• Experience producing and maintaining clear technical documentation/SOPs.
• Strong analytical and problem‑solving skills, comfortable operating across a mix of manual and automated (IaC) delivery.

Desirable Certifications:

• Microsoft Certified: Azure Security Engineer Associate (AZ-500) or equivalent.
• HashiCorp Certified: Terraform Associate.
• Background in network engineering (this role backfills a network engineering position within the team).

Worker Type: Employee

Worker Type: Employee

We are committed to creating an inclusive workplace and welcome applications from people of all backgrounds. We do not discriminate based on any protected characteristic under applicable law.