Senior Security Engineer (Architecture & DevSecOps)

This role is responsible for helping secure every new technology introduced across the organization, from cloud platforms and vendor solutions to containerized environments and AI initiatives. The ideal candidate can evaluate new technologies, identify security risks, apply appropriate controls, and help engineering teams move quickly without sacrificing security.

Cybersecurity Engineer (Security Engineering / DevSecOps)
Location: Tulsa, OK (On Site)
Type: 6-Month Contract with Strong Likelihood of Extension
Experience: 7+ Years
About the Role
Join a 15-person Systems and Cybersecurity Engineering team supporting enterprise technology initiatives for a large Tulsa-based retailer. This role is responsible for helping secure every new technology introduced across the organization, from cloud platforms and vendor solutions to containerized environments and AI initiatives.

This is a project-based security engineering role focused on security architecture, risk assessment, and DevSecOps practices. It is not a SOC, GRC, vulnerability management, or firewall administration position. You'll partner closely with infrastructure, cloud, application, and architecture teams to build security into projects from the beginning.
What You'll Do

• Perform security architecture reviews for new systems, cloud platforms, vendor products, and enterprise initiatives
• Assess how new technologies will be secured, including data protection, identity, integrations, logging, and access controls
• Apply NIST and CIS security controls to projects and document standards alignment, compensating controls, and exceptions
• Conduct threat modeling and security design reviews to identify risks and recommend appropriate safeguards
• Build security requirements and controls into engineering workflows using Git, CI/CD pipelines, APIs, and DevSecOps practices
• Design and implement security guardrails for emerging technologies including containerized workloads, Kubernetes platforms, cloud services, and AI-enabled solutions
• Validate logging, monitoring, and security visibility as data sources and platforms evolve, including migrations to modern observability architectures
• Develop security patterns, standards, and approved implementation approaches for engineering teams
• Represent security in project meetings, contribute to technical solution design, and independently plan and execute work within agile project cycles

Required Qualifications

• 7+ years of hands-on Security Engineering experience
• Experience performing security architecture reviews and securing enterprise technology implementations
• Strong understanding and practical application of NIST and CIS controls in real-world project environments
• Experience integrating security into engineering and deployment processes using Git, CI/CD pipelines, APIs, and DevSecOps practices
• Experience securing new systems, cloud platforms, infrastructure, or vendor technologies in cross-functional implementation projects
• Ability to assess risk, balance business requirements, and recommend pragmatic security controls
• Strong communication skills with the ability to influence technical and non-technical stakeholders
• Ability to work independently, navigate ambiguity, and drive projects forward with limited oversight

Preferred Qualifications

• Container and Kubernetes security
• Identity and access management integrations, including Okta and SailPoint
• Splunk, Cribl, or similar logging and observability platforms
• CrowdStrike, Palo Alto, or other enterprise security technologies
• Cloud security architecture experience
• Experience developing security standards, reference architectures, or engineering guardrails

What We're Looking For
We're seeking a security engineer who enjoys partnering with infrastructure, cloud, platform, and application teams to build secure solutions from the beginning. The ideal candidate can evaluate new technologies, identify security risks, apply appropriate controls, and help engineering teams move quickly without sacrificing security.

This role is best suited for someone with a security architecture or DevSecOps mindset rather than someone focused primarily on SOC operations, compliance administration, vulnerability management, or firewall support.