Senior/Lead DevSecOps Engineer (Azure, Terraform, Sentinel)

Nix; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible working format

Competitive salary

Education reimbursement

Professional development tools

Team events

Job summary

N-iX is seeking a Senior/Lead DevSecOps Engineer to lead the migration of Microsoft Sentinel and Azure resources to Terraform IaC, ensuring reliable, scalable cloud automation. You’ll implement CI/CD via GitHub and Azure DevOps, and drive secure infrastructure engineering across the threat-detection stack.

The role focuses on automation, modular Terraform deployments, and clear communication with stakeholders across global teams. A strong foundation in cloud security and DevSecOps is required.

Qualifications

• 4+ years in Software Engineering/DevOps/Cloud/Cybersecurity with 2+ years explicitly focused on IaC automation (Terraform).
• Hands-on proficiency building and maintaining CI/CD pipelines in GitHub and Azure DevOps.
• Deep Terraform expertise including state management, modular development, and zero-downtime refactoring.
• Direct experience configuring Microsoft Sentinel SIEM and deploying Azure resources via code.
• Proficiency in Python or Go and scripting (PowerShell, Bash) for automation and API integrations.
• Strong ability to author architectural docs and inventory tracking for Terraform-managed resources.

Responsibilities

• Migrate Microsoft Sentinel and Azure resources to Terraform IaC.
• Build, automate, and manage Azure configurations using GitHub and Azure DevOps pipelines.
• Apply software engineering practices across migration lifecycle with CI/CD and automated testing.
• Create repeatable documentation for automated infrastructure deployment.
• Communicate security concepts, infrastructure findings, and migration status to technical and non-technical stakeholders.

Skills

Terraform

Azure

GitHub

Azure DevOps

Python

Go

PowerShell

Bash

Scripting

Education

Bachelor's degree in Computer Science/Engineering or related field

Tools

Terraform

Microsoft Sentinel

Azure

GitHub

Azure DevOps

Job description

N-iX is looking for Senior/Lead DevSecOps Engineer (Azure, Terraform, Sentinel)
Over 1.5 million customers and more than a billion people in over 180 countries use Customer solutions to accelerate the process of doing business and simplify people’s lives. With intelligent agreement management, Client unleashes business-critical data that is trapped inside of documents. Until now, these were disconnected from business systems of record, costing businesses time, money, and opportunity. Using our product companies can create, commit, and manage agreements.

We are seeking a skilled and motivated engineer to join our Threat Detection Engineering team for an Infrastructure-as-Code migration initiative. Reporting to the Manager of Threat Detection Engineering, you will be responsible for the migration of Microsoft Sentinel and associated Azure resources that power our threat detection capabilities to Infrastructure-as-Code (Terraform). This role requires a strong software engineering, DevOps, and cloud engineering foundation and a focus on system reliability.

Team Overview:

Security Operations, comprising Threat Intel, Detection Engineering, and CSIRT, identifies and mitigates threats through detection building, alert analysis, and forensic investigations. We are proactive, engineering-oriented, intent-driven problem-solvers dedicated to securing the business. We prioritize trust, safeguarding customer data, and platform integrity. Our dynamic and global team innovates at speed with cutting-edge tech, fostering continuous improvement and proactive defense against evolving threats.

Detection Engineering forms the backbone of our data platform and detection operations, designing and engineering the pipeline and developing code and detections to provide for its efficacy. This pipeline powers our software engineering-based monitoring service, enabling the identification of relevant threats and delivering actionable alerts to the CSIRT for effective response.

Responsibility:

• Transition the configuration of existing Microsoft Sentinel and Azure resources (used to collect, process, and ingest security telemetry) to Infrastructure-as-Code (Terraform).
• Build, automate, and manage Azure resource configuration leveraging GitHub and Azure DevOps (ADO) pipelines.
• Demonstrate software engineering principles throughout the migration lifecycle, including using version control, automated testing, and continuous integration/continuous deployment (CI/CD) pipelines to eliminate breaking changes and false negatives.
• Partner effectively with the Threat Detection Engineering team to establish repeatable, scalable documentation around automated infrastructure deployment.
• Clearly and concisely communicate technical security concepts, infrastructure findings, and migration status updates to both technical and non-technical stakeholders.

Requirements:

Basic

• 4+ years of progressive experience in Software Engineering, DevOps, Cloud Engineering, or Cybersecurity, with at least 2+ years explicitly focused on Infrastructure-as-Code automation (Terraform) and provisioning cloud platform environments.
• Direct, hands-on proficiency building, managing, and maintaining secure continuous integration and continuous deployment (CI/CD) pipelines within both GitHub and Azure DevOps (ADO).
• Deep technical expertise in provisioning and managing cloud infrastructure using Terraform, including state file management, modular development, and executing zero-downtime refactoring.
• Direct experience configuring and optimizing Microsoft Sentinel SIEM environments, with a specific focus on deploying the associated Azure resources used for security log collection and ingestion via code.
• Highly proficient in programming languages like Python or Go, alongside scripting tools (e.g., PowerShell, Bash), specifically tailored for system automation, cloud platform interactions, and custom API integrations.
• Demonstrated ability to author clean, comprehensive engineering documentation, including architectural mappings of cloud deployments and exhaustive inventory tracking of resources maintained under Terraform management.

Preferred:

• Bachelor's degree or equivalent experience in Computer Science, Engineering, or a related field ; advanced security or cloud engineering certifications (e.g., Microsoft Certified: DevOps Engineer Expert, Azure Security Engineer Associate, or HashiCorp Certified: Terraform Associate are a distinct advantage.
• Experience managing large-scale infrastructure deployments across complex, multi-tenant cloud environments.
• Strong foundational background in security-focused software engineering, DevSecOps, or automation-heavy system architecture.
• Proven history of collaborating effectively across engineering, infrastructure, and security operations teams to drive architectural excellence.

We offer*:

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Personalized career growth
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing
• Education reimbursement
• Memorable anniversary presents
• Corporate events and team buildings
• Other location-specific benefits

*not applicable for freelancers