DevSecOps Engineer, senior

Dallas, TX | HybridWe're seeking a Senior DevSecOps Engineer to join a well-established financial services organization in a newly created role with significant influence over the organization's security architecture, engineering standards, and cloud security strategy.Working closely with Platform Engineering leadership, you'll help modernize security practices, mature cloud-native engineering capabilities, and drive initiatives spanning Kubernetes security, secure CI/CD, Zero Trust architecture, vulnerability management, and AI-assisted security operations.This role offers the opportunity to influence architecture, security standards, tooling decisions, and engineering practices across the organization while helping establish a scalable foundation for future growth.What You'll DoDesign and implement secure CI/CD pipelines using Azure DevOps and GitHubEstablish policy-as-code controls, automated security gates, and approval workflowsIntegrate SAST, DAST, SCA, secret scanning, and container security controls throughout the software delivery lifecycleCreate centralized visibility and reporting for security findings across engineering teamsPartner with engineering teams to embed security into development workflowsDefine Kubernetes security requirements, operational guardrails, and governance practicesImplement Kyverno policies, Pod Security Standards, RBAC, and network segmentation strategiesDrive container image scanning, signing, attestation, and registry security practicesDesign and implement Zero Trust principles across infrastructure and applicationsDevelop workload identity and managed identity strategies within AzureEstablish secure service-to-service communication and microsegmentation patternsOperationalize security scanning across multiple platforms and toolsetsCorrelate, prioritize, and streamline vulnerability remediation workflowsBuild scalable security processes that improve security posture while maintaining engineering velocitySupport audit readiness and regulatory security initiatives within a highly regulated environmentEvaluate and operationalize AI-powered security tooling across the SDLCEstablish governance standards for AI coding assistants and agentic development toolsBuild automation for vulnerability triage, policy generation, audit evidence collection, and incident responseHelp define how AI can be securely leveraged within engineering and security workflowsWhat We're Looking For7+ years of experience across DevOps, Platform Engineering, Security Engineering, or related disciplines, including significant hands-on experience in DevSecOps and cloud securityStrong experience designing, securing, and supporting enterprise CI/CD platformsDeep hands-on expertise securing and operating Kubernetes environmentsExperience working within regulated or compliance-driven organizationsAbility to influence technical direction and partner effectively with engineering leadershipTechnical ExpertiseAzure DevOps and/or GitHub-based development workflowsGitHub Advanced Security or comparable application security toolingKubernetes security within AKSContainer security, image signing, attestation, and registry managementKyverno, OPA/Gatekeeper, or similar policy frameworksTerraform and Infrastructure as CodeAzure services including ACR, Key Vault, Managed Identity, and Azure PolicyAI-assisted engineering and security platforms such as GitHub Copilot, Claude Code, Cursor, or similar toolsPreferred ExperienceZero Trust architecture implementationSupply chain security, including SBOMs, provenance, and attestationBanking, fintech, or other highly regulated industry experiencePreferred CertificationsCKS, AZ-500, CISSP, CCSKCompensation & BenefitsCompetitive compensation based on experienceAnnual bonus opportunityComprehensive medical, dental, and vision coverage401(k) with employer matchGenerous PTO and paid holidaysStrong overall benefits packageIf you're energized by solving complex security and infrastructure challenges, influencing technical direction, and helping a growing organization mature its DevSecOps capabilities, we'd welcome the opportunity to speak with you.