Senior DevSecOps Engineer

Business Unit:

Cubic Transportation Systems

Company Details:

When you join Cubic, you become part of a company that creates and delivers technology solutions in transportation to make people’s lives easier by simplifying their daily journeys, and defense capabilities to help promote mission success and safety for those who serve their nation. Led by our talented teams around the world, Cubic is committed to solving global issues through innovation and service to our customers and partners.

We have a top-tier portfolio of businesses, including Cubic Transportation Systems (CTS) and Cubic Defense (CD). Explore more on Cubic.com.

Job Details:

• Job Summary: We are looking for a highly skilled Senior DevSecOps Engineer to deliver and support the standard security service implementation across our Azure platform, consistently applied across every program and environment. This is a hands-on senior engineering role covering both manual configuration and scripted/automated delivery (PowerShell, Terraform, Ansible), with responsibility for fixing code-level issues and keeping technical documentation current.
  
  Work Shift: 24x7 Rotational
  Experience: 8+ Years
  Primary Skills: Microsoft Azure, PowerShell, Terraform, Ansible
  Secondary Skills: Networking, security scanning tooling, Windows/Linux administration
  Responsibilities :

• Deliver the standard security service implementation across every Azure program and environment, covering: patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
  • Write, maintain and troubleshoot automation using PowerShell, Terraform and Ansible to support implementation, remediation and configuration control activities.
  • Diagnose and fix code-level issues in existing scripts and Terraform, including remediating configuration drift, rather than solely deploying new builds.
  • Create and maintain Technical Standard Operating Procedures (SOPs) following every implementation or remediation, keeping documentation aligned to what is actually deployed.
  • Configure and support security scanning tooling, ensuring findings are tracked and remediated in line with agreed standards.
  • Manage encryption, backup and recovery configuration in line with security and compliance requirements.
  • Administer authentication and remote access controls (e.g. Entra ID/Azure AD, MFA, PIM) to agreed standards.
  • Act as a senior technical point of contact within Security Operations, reducing the team's reliance on escalations to core platform/network teams.
  • Collaborate with global teams to align delivery with security standards and best practice.
  • Support the team's ongoing evolution toward broader Infrastructure-as-Code adoption.
  Minimum Job Requirements:
• • Bachelor's degree, or a minimum of 8 years' experience in DevOps/DevSecOps or a related technical engineering role.
  • Strong hands-on experience with Microsoft Azure.
  • Strong scripting and automation skills across PowerShell, Terraform and Ansible.
  • Demonstrated ability to troubleshoot and fix code-level issues in scripts and Terraform, including resolving configuration drift – not just deploying new infrastructure.
  • Hands-on experience implementing and supporting: patching, malware protection, hardening, log management, network monitoring, configuration control, authentication & remote access, security scanning tooling, encryption, and backup & recovery.
  • Experience producing and maintaining clear technical documentation/SOPs.
  • Strong analytical and problem-solving skills, comfortable operating across a mix of manual and automated (IaC) delivery.
  You bring a solution-driven mindset, stay current with technology trends, and thrive in a collaborative, high-stakes environment.
  Desirable Certifications:
• • Microsoft Certified: Azure Security Engineer Associate (AZ-500) or equivalent.
  • HashiCorp Certified: Terraform Associate.
  • Background in network engineering (this role backfills a network engineering position within the team).
  ‎ 
  Worker Type:
  Employee

‎

Worker Type:

Employee

‎

We are committed to creating an inclusive workplace and welcome applications from people of all backgrounds. We do not discriminate based on any protected characteristic under applicable law.