Senior DevSecOps Engineer: Cloud Security & Automation

The Friedkin Group; Houston (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

The Friedkin Group is seeking a DevSecOps Engineer to own the secure delivery pipeline and platform foundations across cloud environments. You’ll design and automate IAM, infrastructure as code (Terraform), CI/CD (GitHub Actions), and Kubernetes operations, embedding security controls by default and enabling development teams to ship quickly and safely.

Your assignment includes designing least-privilege IAM, building Terraform modules, owning GitHub Actions pipelines, operating Kubernetes

Qualifications

• 8+ years in DevOps/Platform/SRE with a security-first mindset.
• Strong IAM design (cloud + Kubernetes RBAC), OIDC/OAuth2, SSO/IdP (e.g., Okta/Azure Entra).
• Production Terraform experience (workspaces, modules, remote state, CI‑driven plans/applies).
• Hands‑on GitHub Actions (self‑hosted runners, OIDC to cloud, environments/protections).
• Operating Kubernetes in production (Helm, networking, ingress, autoscaling, upgrades, backups/DR).
• Practical use of security scanners (e.g., Wiz, Trivy/Grype, Dependabot, Checkov/tfsec).
• Proficient with one or more clouds (AWS), Linux, containers, networking fundamentals.
• Strong scripting in Python or Bash; Infrastructure troubleshooting and debugging.

Responsibilities

• Own the secure delivery pipeline and platform foundations across cloud environments.
• Design and automate IAM, IaC, CI/CD, and Kubernetes operations with security baked in.
• Manage GitHub Actions pipelines, reusable workflows, and deployment gates.
• Operate Kubernetes clusters (EKS/AKS/GKE) including Helm/Kustomize and GitOps.
• Embed SCA/SAST/DAST, image signing, and provenance tooling into pipelines.
• Drive threat modeling, secure design reviews, and remediation with cross‑team partners.

Skills

DevSecOps

IAM design

Terraform

GitHub Actions

Kubernetes

Security scanners

Cloud AWS

Python/Bash scripting

Tools

Terraform

GitHub Actions

Argo CD

Kubernetes

Job description

The Friedkin Group is seeking a DevSecOps Engineer to own the secure delivery pipeline and platform foundations across cloud environments. You’ll design and automate IAM, infrastructure as code (Terraform), CI/CD (GitHub Actions), and Kubernetes operations, embedding security controls by default and enabling development teams to ship quickly and safely.

Your assignment includes designing least-privilege IAM, building Terraform modules, owning GitHub Actions pipelines, operating Kubernetes