Cubic Transportation Systems - Senior DevSecOps Engineer - Azure Infrastructure

Job Summary :

We are looking for a highly skilled Senior DevSecOps Engineer to deliver and support the standard security service implementation across our Azure platform, consistently applied across every program and environment. This is a hands-on senior engineering role covering both manual configuration and scripted/automated delivery (PowerShell, Terraform, Ansible), with responsibility for fixing code-level issues and keeping technical documentation current.

Work Shift : 24x7 Rotational

Experience : 8+ Years

Primary Skills : Microsoft Azure, PowerShell, Terraform, Ansible

Secondary Skills : Networking, security scanning tooling, Windows/Linux :

- Deliver the standard security service implementation across every Azure program and environment, covering : patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.

- Write, maintain and troubleshoot automation using PowerShell, Terraform and Ansible to support implementation, remediation and configuration control activities.

- Diagnose and fix code-level issues in existing scripts and Terraform, including remediating configuration drift, rather than solely deploying new builds.

- Create and maintain Technical Standard Operating Procedures (SOPs) following every implementation or remediation, keeping documentation aligned to what is actually deployed.

- Configure and support security scanning tooling, ensuring findings are tracked and remediated in line with agreed standards.

- Manage encryption, backup and recovery configuration in line with security and compliance requirements.

- Administer authentication and remote access controls (e.g. Entra ID/Azure AD, MFA, PIM) to agreed standards.

- Act as a senior technical point of contact within Security Operations, reducing the team's reliance on escalations to core platform/network teams.

- Collaborate with global teams to align delivery with security standards and best practice.

- Support the team's ongoing evolution toward broader Infrastructure-as-Code adoption.

Minimum Job Requirements :

- Bachelor's degree, or a minimum of 8 years' experience in DevOps/DevSecOps or a related technical engineering role.

- Strong hands-on experience with Microsoft Azure.

- Strong scripting and automation skills across PowerShell, Terraform and Ansible.

- Demonstrated ability to troubleshoot and fix code-level issues in scripts and Terraform, including resolving configuration drift - not just deploying new infrastructure.

- Hands-on experience implementing and supporting : patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.

- Experience producing and maintaining clear technical documentation/SOPs.

- Strong analytical and problem-solving skills, comfortable operating across a mix of manual and automated (IaC) delivery.

You bring a solution-driven mindset, stay current with technology trends, and thrive in a collaborative, high-stakes environment.

Desirable Certifications :

- Microsoft Certified : Azure Security Engineer Associate (AZ-500) or equivalent.

- HashiCorp Certified : Terraform Associate.

- Background in network engineering (this role backfills a network engineering position within the team).

(ref:hirist.tech)