Senior DevSecOps Engineer

Overview

Deliver and support the standard security service implementation across the Azure platform, consistently applied across every program and environment. This is a hands-on senior engineering role covering manual configuration and scripted/automated delivery.

What you'll do

• Deliver the standard security service implementation across every Azure program and environment, covering patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
• Write, maintain and troubleshoot automation using PowerShell, Terraform and Ansible to support implementation, remediation and configuration control activities.
• Diagnose and fix code-level issues in existing scripts and Terraform, including remediating configuration drift, rather than solely deploying new builds.
• Create and maintain Technical Standard Operating Procedures (SOPs) following every implementation or remediation, keeping documentation aligned to what is actually deployed.
• Configure and support security scanning tooling, ensuring findings are tracked and remediated in line with agreed standards.
• Manage encryption, backup and recovery configuration in line with security and compliance requirements.
• Administer authentication and remote access controls (e.g. Entra ID/Azure AD, MFA, PIM) to agreed standards.
• Act as a senior technical point of contact within Security Operations, reducing the team's reliance on escalations to core platform/network teams.
• Collaborate with global teams to align delivery with security standards and best practice.
• Support the team's ongoing evolution toward broader Infrastructure-as-Code adoption.

What you'll need

• Bachelor's degree, or a minimum of 8 years' experience in DevOps/DevSecOps or a related technical engineering role.
• Strong hands-on experience with Microsoft Azure.
• Strong scripting and automation skills across PowerShell, Terraform and Ansible.
• Demonstrated ability to troubleshoot and fix code-level issues in scripts and Terraform, including resolving configuration drift, not just deploying new infrastructure.
• Hands-on experience implementing and supporting patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
• Experience producing and maintaining clear technical documentation/SOPs.
• Strong analytical and problem-solving skills, comfortable operating across a mix of manual and automated (IaC) delivery.

Details

• Work shift: 24x7 rotational.
• Experience: 8+ years.
• Business unit: Cubic Transportation Systems.
• Worker type: Employee.