Job Summary

Individual contributor building automation that strengthens the enterprise cyber-security posture. The incumbent will write Terraform to deploy security controls, build Logic Apps for SOAR, develop custom Sentinel connectors and Azure Monitor-based applications, and contribute to multi-cloud CSPM and asset-discovery pipelines

Key Responsibilities

• Develop reusable Terraform modules to deploy and manage Azure security infrastructure.
• Build Microsoft Sentinel data connectors, Logic Apps, and SOAR playbooks for automated incident response.
• Develop KQL-based analytics rules, security dashboards, alerts, and Azure Monitor applications.
• Deploy and secure Azure Web Apps, App Services, and Functions.
• Automate multi-cloud security posture management (CSPM) and cloud asset discovery across Azure, GCP, and AWS.
• Integrate security findings from Defender for Cloud, GCP Security Command Center, and AWS Security Hub.
• Implement CI/CD pipelines, policy-as-code, and cloud security best practices.

Required Technical Skills

• IaC: Terraform, Bicep, ARM Templates, Checkov, tfsec.
• Scripting: Python, PowerShell, Bash, Azure CLI, gcloud, AWS CLI.
• Security & Monitoring: Microsoft Sentinel, KQL, Azure Monitor, Log Analytics, DCRs, AMA.
• Automation: Azure Logic Apps, SOAR, custom data connectors, ServiceNow/Jira integration.
• Azure Services: App Service, Azure Functions, Key Vault, Entra ID, Defender for Cloud, Private Endpoints.
• Cloud Security: Azure, GCP, AWS, CSPM, IAM, CIS Benchmarks, NIST CSF.
• DevOps: Azure DevOps Pipelines, GitHub Actions, CI/CD.

Required Experience

• 6–9 years in cloud automation, infrastructure-as-code, or security engineering.
• Minimum 2 years of hands-on Terraform/IaC experience.
• Minimum 2 years developing Sentinel connectors, Logic Apps SOAR playbooks, and Azure Monitor applications.
• At least 1 year of multi-cloud security automation/CSPM exposure.
• At least 1 year deploying and managing Azure App Services or Web Apps.

Preferred Certifications

Terraform Associate, AZ-204, AZ-500, SC-200, AWS Security Specialty, or Google Associate Cloud Engineer.