Senior DevSecOps Engineer (Azure Infrastructure Engineer)

cubic; India; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Cubic Transportation Systems is seeking a Senior DevSecOps Engineer to deliver and support security services across Azure platforms. This hands-on role blends manual tasks with scripted automation (PowerShell, Terraform, Ansible) and requires keeping technical documentation up to date.

You will patch, harden, monitor, encrypt, back up, and control access across programs, collaborating with global teams while advancing Infrastructure-as-Code adoption within Security Operations.

Qualifications

• Bachelor's degree or 8+ years in DevSecOps/DevOps roles.
• Strong hands-on Azure experience and scripting/automation skills.
• Ability to troubleshoot code-level issues in scripts and Terraform.
• Experience with patching, malware protection, hardening, logging, and backups.

Responsibilities

• Deliver standard security service implementation across Azure programs and environments.
• Write, maintain and troubleshoot automation using PowerShell, Terraform and Ansible.
• Diagnose and fix code-level issues and remediation gaps in scripts.
• Create and maintain SOPs aligned to deployed configurations.
• Configure security scanning tooling and manage encryption, backup and recovery.
• Administer authentication and remote access controls (Entra ID/Azure AD, MFA, PIM).
• Collaborate with global teams and evolve IaC adoption within Security Operations.

Skills

Microsoft Azure

Networking

Security tooling

Windows/Linux administration

PowerShell

Terraform

Ansible

Education

Bachelor's degree in a relevant field

Tools

PowerShell

Terraform

Ansible

Job description

Business Unit:

Cubic Transportation Systems

Company Details:

When you join Cubic, you become part of a company that creates and delivers technology solutions in transportation to make people's lives easier by simplifying their daily journeys, and defense capabilities to help promote mission success and safety for those who serve their nation. Led by our talented teams around the world, Cubic is committed to solving global issues through innovation and service to our customers and partners.

We have a top-tier portfolio of businesses, including Cubic Transportation Systems (CTS) and Cubic Defense (CD). Explore more on Cubic.com.

Job Details:

Job Summary : We are looking for a highly skilled Senior DevSecOps Engineer to deliver and support the standard security service implementation across our Azure platform, consistently applied across every program and environment. This is a hands‑on senior engineering role covering both manual configuration and scripted/automated delivery (PowerShell, Terraform, Ansible), with responsibility for fixing code‑level issues and keeping technical documentation current.

Work Shift: 24x7 Rotational

Experience: 8+ Years

Primary Skills: Microsoft Azure, PowerShell, Terraform, Ansible

Secondary Skills: Networking, security scanning tooling, Windows/Linux administration

Responsibilities :

• Deliver the standard security service implementation across every Azure program and environment, covering: patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
• Write, maintain and troubleshoot automation using PowerShell, Terraform and Ansible to support implementation, remediation and configuration control activities.
• Diagnose and fix code‑level issues in existing scripts and Terraform, including remediating configuration drift, rather than solely deploying new builds.
• Create and maintain Technical Standard Operating Procedures (SOPs) following every implementation or remediation, keeping documentation aligned to what is actually deployed.
• Configure and support security scanning tooling, ensuring findings are tracked and remediated in line with agreed standards.
• Manage encryption, backup and recovery configuration in line with security and compliance requirements.
• Administer authentication and remote access controls (e.g. Entra ID/Azure AD, MFA, PIM) to agreed standards.
• Act as a senior technical point of contact within Security Operations, reducing the team's reliance on escalations to core platform/network teams.
• Collaborate with global teams to align delivery with security standards and best practice.
• Support the team's ongoing evolution toward broader Infrastructure-as-Code adoption.

Minimum Job Requirements:

• Bachelor's degree, or a minimum of 8 years' experience in DevOps/DevSecOps or a related technical engineering role.
• Strong hands‑on experience with Microsoft Azure.
• Strong scripting and automation skills across PowerShell, Terraform and Ansible.
• Demonstrated ability to troubleshoot and fix code‑level issues in scripts and Terraform, including resolving configuration drift - not just deploying new infrastructure.
• Hands‑on experience implementing and supporting: patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
• Experience producing and maintaining clear technical documentation/SOPs.
• Strong analytical and problem‑solving skills, comfortable operating across a mix of manual and automated (IaC) delivery.

You bring a solution‑driven mindset, stay current with technology trends, and thrive in a collaborative, high‑stakes environment.

Desirable Certifications:

• Microsoft Certified: Azure Security Engineer Associate (AZ-500) or equivalent.
• HashiCorp Certified: Terraform Associate.
• Background in network engineering (this role backfills a network engineering position within the team).

Worker Type:

Employee

We are committed to creating an inclusive workplace and welcome applications from people of all backgrounds. We do not discriminate based on any protected characteristic under applicable law.