Senior/Lead DevSecOps Engineer (Azure, Terraform, Sentinel)

N-iX is looking for Senior/Lead DevSecOps Engineer (Azure, Terraform, Sentinel)
Over 1.5 million customers and more than a billion people in over 180 countries use Customer solutions to accelerate the process of doing business and simplify people’s lives. With intelligent agreement management, Client unleashes business-critical data that is trapped inside of documents. Until now, these were disconnected from business systems of record, costing businesses time, money, and opportunity. Using our product companies can create, commit, and manage agreements.

We are seeking a skilled and motivated engineer to join our Threat Detection Engineering team for an Infrastructure-as-Code migration initiative. Reporting to the Manager of Threat Detection Engineering, you will be responsible for the migration of Microsoft Sentinel and associated Azure resources that power our threat detection capabilities to Infrastructure-as-Code (Terraform). This role requires a strong software engineering, DevOps, and cloud engineering foundation and a focus on system reliability.

Team Overview:

Security Operations, comprising Threat Intel, Detection Engineering, and CSIRT, identifies and mitigates threats through detection building, alert analysis, and forensic investigations. We are proactive, engineering-oriented, intent-driven problem-solvers dedicated to securing the business. We prioritize trust, safeguarding customer data, and platform integrity. Our dynamic and global team innovates at speed with cutting-edge tech, fostering continuous improvement and proactive defense against evolving threats.

Detection Engineering forms the backbone of our data platform and detection operations, designing and engineering the pipeline and developing code and detections to provide for its efficacy. This pipeline powers our software engineering-based monitoring service, enabling the identification of relevant threats and delivering actionable alerts to the CSIRT for effective response.

Responsibility:

• Transition the configuration of existing Microsoft Sentinel and Azure resources (used to collect, process, and ingest security telemetry) to Infrastructure-as-Code (Terraform).
• Build, automate, and manage Azure resource configuration leveraging GitHub and Azure DevOps (ADO) pipelines.
• Demonstrate software engineering principles throughout the migration lifecycle, including using version control, automated testing, and continuous integration/continuous deployment (CI/CD) pipelines to eliminate breaking changes and false negatives.
• Partner effectively with the Threat Detection Engineering team to establish repeatable, scalable documentation around automated infrastructure deployment.
• Clearly and concisely communicate technical security concepts, infrastructure findings, and migration status updates to both technical and non-technical stakeholders.

Requirements:

Basic

• 4+ years of progressive experience in Software Engineering, DevOps, Cloud Engineering, or Cybersecurity, with at least 2+ years explicitly focused on Infrastructure-as-Code automation (Terraform) and provisioning cloud platform environments.
• Direct, hands-on proficiency building, managing, and maintaining secure continuous integration and continuous deployment (CI/CD) pipelines within both GitHub and Azure DevOps (ADO).
• Deep technical expertise in provisioning and managing cloud infrastructure using Terraform, including state file management, modular development, and executing zero-downtime refactoring.
• Direct experience configuring and optimizing Microsoft Sentinel SIEM environments, with a specific focus on deploying the associated Azure resources used for security log collection and ingestion via code.
• Highly proficient in programming languages like Python or Go, alongside scripting tools (e.g., PowerShell, Bash), specifically tailored for system automation, cloud platform interactions, and custom API integrations.
• Demonstrated ability to author clean, comprehensive engineering documentation, including architectural mappings of cloud deployments and exhaustive inventory tracking of resources maintained under Terraform management.

Preferred:

• Bachelor's degree or equivalent experience in Computer Science, Engineering, or a related field ; advanced security or cloud engineering certifications (e.g., Microsoft Certified: DevOps Engineer Expert, Azure Security Engineer Associate, or HashiCorp Certified: Terraform Associate are a distinct advantage.
• Experience managing large-scale infrastructure deployments across complex, multi-tenant cloud environments.
• Strong foundational background in security-focused software engineering, DevSecOps, or automation-heavy system architecture.
• Proven history of collaborating effectively across engineering, infrastructure, and security operations teams to drive architectural excellence.