Security Automation & DevSecOps Engineer

Security Automation & DevSecOps Engineer (Contract-to-Hire)Location: Charlotte, NCEmployment Type: Contract-to-HireCompensation: Salary range of $180,000 to $195,000, with an hourly rate aligned to salary target.Position OverviewRobert Half is seeking a highly skilled Security Automation & DevSecOps Engineer for a contract-to-hire opportunity with an innovative, technology-driven organization. This role is ideal for a hands-on engineer who combines strong software development skills with cloud security expertise and a passion for automation.The ideal candidate will have multiple years of DevSecOps experience, strong Google Cloud Platform (GCP) knowledge, excellent communication skills, and the ability to design and develop security-focused automation solutions, including LLM-powered applications and agentic workflows that improve security operations, compliance readiness, and risk management.This position will partner closely with Security, Infrastructure, Engineering, Data, and Compliance teams to automate security controls, strengthen cloud security posture, and reduce manual operational overhead through scalable engineering solutions.Key ResponsibilitiesDesign, build, and maintain cloud security automation, DevSecOps controls, and security engineering solutions across cloud, SaaS, identity, and enterprise environments.Develop production-grade applications, APIs, scripts, and automation workflows using Python, JavaScript, and/or TypeScript.Create and maintain automated evidence collection and control validation processes supporting SOC 2, audit, compliance, and regulatory requirements.Design and implement LLM-powered and agentic security workflows that collect, validate, summarize, and route security evidence while maintaining appropriate governance and oversight.Build cloud security guardrails for IAM, networking, logging, encryption, secrets management, vulnerability management, and secure configuration management.Enhance identity governance processes through RBAC, least-privilege access models, birthright access provisioning, SSO, MFA, and lifecycle automation.Improve security monitoring by automating alert enrichment, triage workflows, detection tuning, and response orchestration.Translate security and compliance requirements into automated technical controls, dashboards, reporting mechanisms, and measurable security outcomes.Collaborate with technical and non-technical stakeholders to communicate security risks, automation opportunities, and engineering solutions.Required Qualifications5+ years of experience in DevOps, DevSecOps, Security Engineering, Cloud Engineering, Platform Engineering, SRE, or related disciplines.Demonstrated multi-year hands-on DevSecOps experience implementing security controls within cloud-native environments.Strong experience with Google Cloud Platform (GCP), including IAM, networking, logging, monitoring, encryption, and secure cloud architecture.Advanced coding experience in Python and experience with JavaScript and/or TypeScript.Proven ability to develop custom security automation, APIs, integrations, workflow orchestration, and internal tooling.Experience building or supporting LLM-powered applications, AI-driven automation, agentic workflows, or security-focused AI solutions.Experience with Infrastructure-as-Code and Policy-as-Code tools such as Terraform, Pulumi, OPA/Rego, Checkov, tfsec, or similar technologies.Strong understanding of identity and access management concepts including RBAC, least privilege, SSO, MFA, and identity lifecycle management.Working knowledge of security frameworks and compliance standards such as SOC 2, NIST CSF, ISO 27001, GDPR, and CCPA/CPRA.Excellent verbal and written communication skills with the ability to collaborate across technical and business teams.Preferred QualificationsExperience with GRC, audit, or compliance platforms such as ServiceNow, Jira, OneTrust, or similar solutions.Experience with SIEM, SOAR, detection engineering, alert tuning, and automated incident response.Familiarity with Kubernetes, containers, serverless architectures, APIs, and microservices.Experience with cloud security posture management (CSPM), vulnerability management, endpoint security, or data security tools.Background supporting regulated industries such as energy, utilities, fintech, SaaS, healthcare, or financial services.Relevant certifications such as CISSP, CISM, CISA, CCSP, CRISC, GIAC, Google Professional Cloud Security Engineer, AWS Security Specialty, or equivalent.Why This Opportunity?Contract-to-hire opportunity with long-term growth potential.Hands-on role building next-generation security automation and AI-driven security solutions.Opportunity to influence cloud security strategy, DevSecOps maturity, and compliance automation initiatives.Collaborative environment working across engineering, security, compliance, and business functions.Exposure to modern cloud technologies, security engineering practices, and emerging AI-powered security use cases.