Senior Cloud Automation Engineer

Job Title: Senior Cloud Automation Engineer

Location: Navi Mumbai

Working Hours: 9:00 AM – 6:00 PM

Mode of Interview: Face-to-Face at Navi Mumbai

Headcount: 2 Positions

Position Summary

The Senior Cloud Automation Engineer is an individual contributor role focused on building end-to-end automation that actively strengthens the enterprise cyber-security posture. The incumbent will write Terraform to deploy security controls, build Logic Apps for automated SOAR workflows, develop custom Sentinel connectors and Azure Monitor-based applications, and contribute to multi-cloud CSPM and asset-discovery pipelines across Azure, GCP, and AWS environments.

Requirements

Key Responsibilities

• Terraform & Infrastructure-as-Code (IaC):
  

  • Write and maintain reusable, production-grade Terraform modules for Azure security controls—including NSGs, Azure Firewall, App Gateway / WAF, Key Vault, Private Endpoints, and Defender for Cloud.
    

  • Manage Terraform state, workspaces, automated plan reviews, and policy-as-code enforcement using tools like Checkov and tfsec.
    

• Sentinel Connectors, Logic Apps & SOAR Automation:
  

  • Develop custom Microsoft Sentinel data connectors utilizing Codeless Connector Platform (CCP), Logs Ingestion API, Function App pollers, and Event Hub / Storage pipelines.
    

  • Build Logic Apps (Standard & Consumption) for SOAR to handle real-time alert enrichment, ITSM ticketing (ServiceNow, Jira), Teams/email notifications, and automated containment actions.
    

  • Engineer Sentinel-as-Code content—including Analytics Rules written in KQL, custom Workbooks, and Watchlists—delivered seamlessly via Terraform.
    

• Azure Monitor & Web Applications:
  

  • Design and implement Azure Monitor dashboards, Log Analytics workspaces, Data Collection Rules (DCRs), Azure Monitor Agent (AMA) onboarding, custom alerts, action groups, and Application Insights.
    

  • Deploy and operate Azure Web Apps, App Services, and Azure Functions using modern deployment frameworks (ZIP, Run-from-Package, container deployments, and deployment slots with swap).
    

  • Embed robust App Service security using Managed Identities, Key Vault references, Private Endpoints, and Easy Auth (Microsoft Entra ID integration).
    

• Multi-Cloud CSPM & Asset Discovery:
  

  • Contribute to Cloud Security Posture Management (CSPM) pipelines assessing Azure, GCP, and AWS against CIS benchmarks, NIST standards, and internal security frameworks.
    

  • Develop automated asset-discovery tools to aggregate subscriptions, projects, accounts, identities, networks, storage, and PaaS inventories.
    

  • Centralize security findings from Defender for Cloud, GCP Security Command Center (SCC), and AWS Security Hub into a unified triage workflow.
    

Candidate Profile & Qualifications

• Experience: 6 to 9 years of hands-on experience in cloud security engineering, infrastructure-as-code automation, and cloud-native security development.
  

• Education: B.Tech or M.Tech in Computer Science, Information Technology, Cyber Security, or a related field.
  

• Core Technical Competencies:
  

  • Expert-level Terraform skills along with policy-as-code tools (Checkov, tfsec).
    

  • Strong mastery of Microsoft Sentinel, KQL, custom data connector development, and Logic Apps for automated threat response.
    

  • Practical experience with Azure Monitor, App Services, Azure Functions, and Python/PowerShell/Shell scripting.
    

  • Deep understanding of multi-cloud environments (Azure, GCP, AWS) and security posture management frameworks.
    

• Certifications:
  

  • HashiCorp Certified: Terraform Associate
    

  • AZ-204: Developing Solutions for Microsoft Azure
    

  • AZ-500: Microsoft Azure Security Technologies
    

  • SC-200: Microsoft Security Operations Analyst
    

  • AWS Certified Security – Specialty OR Google Associate Cloud Engineer