Senior Cloud Security Engineer / DevSecOps Engineer at ARRA Finance
Carrollton, TX
—
Jul 6, 2026
Carrollton, TX
Jul 21, 2026
What this job asks for AI summary
A hands-on cloud security role centered on an active Azure migration, where the engineer will help ensure infrastructure is built securely from the ground up. Day-to-day work spans writing Terraform, hardening CI/CD pipelines, conducting infrastructure risk reviews, improving cloud security posture, setting up vulnerability reporting, and supporting privileged access and Entra ID architecture. Suits someone who can take ownership and bring structure rather than simply executing assigned tasks.
Senior level · Dallas-Fort Worth-Arlington, TX · Contract
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 70 people in the Dallas-Fort Worth-Arlington, TX area plausibly meet what this posting asks for (information security analysts). range 20–100
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $136,548 (middle half $105,715–$165,838).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
This is a 6-month contract-to-hire (C2C) engagement based on-site in Carrollton, TX — no remote option is indicated.
The role sits at the intersection of cloud security and DevSecOps/IaC engineering. 15-1212 (Information Security Analysts) was chosen as primary because the core mandate is securing the cloud environment, threat hunting, and vulnerability management; 15-1252 (Software Developers) is a credible runner-up given the heavy Terraform/IaC writing and CI/CD pipeline work.
Terraform is explicitly called out as a hard requirement — the posting states the candidate must be able to write IaC, not just have surface-level exposure.
PAM/identity security is treated as a hard gate based on its placement in the core skills list and repeated emphasis throughout the role description. Delinea is the incumbent tool on-prem, but the posting explicitly accepts CyberArk, BeyondTrust, or Thycotic as equivalents — those are captured as alternatives.
Delinea, SonarQube, and Splunk are listed with softening language ('would be helpful', 'is relevant', 'exposure is relevant') and are treated as preferred.
No compensation figures were provided in the posting.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Privileged Access Management.
Posting is for a contract engagement — the market benchmarks below price full-time roles, so read the comp comparison with that in mind.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.