IAC Security Engineer

American CyberSystems
Charlotte, NC, United States
9 days ago
Apply on public-rest34.bullhornstaffing.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Compensation
$176,800.0 - $187,200.0
Working hours
Regular working hours

Tech stack

Amazon Web Services JIRA Microsoft Azure Bash Shell Cloud Computing Security Continuous Integration Software Debugging Github Python (Programming Language) Windows PowerShell Regression Testing Systems Integration
+14 more
Visual Studio Online Policy as Code Scripting Google Cloud Software Security Cloudformation Gitlab-ci Kubernetes Bicep Hashicorp Terraform Devsecops Jenkins Servicenow

Job description

Lead and scale Infrastructure as Code (IaC) security across multi-cloud CI/CD pipelines. You will design, build, and enforce custom OPA/Rego policies with Wiz, integrate shift-left scanning across Terraform and Kubernetes, and partner directly with engineering teams to minimize noise and prevent cloud misconfigurations before deployment., * Policy as Code (OPA/Rego): Author, test, version, and tune custom IaC security rules in Rego/OPA to extend Wiz checks and codify internal guardrails.

  • Staged Enforcement: Manage regression testing and staged rollouts (Report ? Warn ? Block) to maintain low false-positive rates and high pipeline throughput.
  • CI/CD & IDE Integration: Embed Wiz CLI, VCS integrations, and plugins into GitHub Actions, GitLab CI, Azure DevOps, and VS Code for real-time PR/local feedback.
  • Triage & Operations: Monitor pipeline health, triage scanner failures, maintain exception ledgers, and automate findings routing via ServiceNow (AVR/CVR) and Jira.
  • Developer Enablement: Host office hours, build “how-to-fix” documentation, and create secure sample IaC templates to accelerate remediation.

Requirements

  • 8+ years in Cloud Security, DevSecOps, or AppSec with deep hands-on expertise.
  • IaC & Containers: Strong, production-grade security experience with Terraform and Kubernetes/Helm (CloudFormation and ARM/Bicep are a plus).
  • Wiz Expertise: Proven experience operating Wiz for IaC scanning, CI/CD gating, and posture management.
  • Policy Engine: Demonstrated ability to write, debug, and test OPA/Rego rules.
  • CI/CD Fluency: Hands-on pipeline authoring across GitHub Actions, GitLab CI, Azure DevOps, or Jenkins.

Preferred Skills

  • Integration experience with ServiceNow (AVR/CVR/ITSM) for finding synchronization and SLA tracking.
  • Scripting proficiency in Python, Bash, or PowerShell for workflow automation and reporting.
  • Certifications: CKA/CKAD, HashiCorp Terraform Associate, or Cloud Security (AWS, Azure, GCP).

Benefits & conditions

Benefits: Innova Solutions offers benefits( based on eligibility) that include the following: Medical & pharmacy coverage, Dental/vision insurance, 401(k), Health saving account (HSA) and Flexible spending account (FSA), Life Insurance, Pet Insurance, Short term and Long term Disability, Accident & Critical illness coverage, Pre-paid legal & ID theft protection, Sick time, and other types of paid leaves (as required by law), Employee Assistance Program (EAP).

About the company

ABOUT INNOVA SOLUTIONS: Founded in 1998 and headquartered in Atlanta, Georgia, Innova Solutions employs approximately 50,000 professionals worldwide and reports an annual revenue approaching $3 Billion. Through our global delivery centers across North America, Asia, and Europe, we deliver strategic technology and business transformation solutions to our clients, enabling them to operate as leaders within their fields. Recent Recognitions:

  • Named One of America’s Best Employers for New Grads by Forbes (2024
  • Named One of the Best Companies to Work for by U.S. News & World Report (Private Companies List, 2024-2025)
  • One of the Largest IT Staffing Firms in the US - Ranked #3 by Staffing Industry Analysts (SIA, 2024)
  • One of the Largest Staffing Firms in the US - Ranked #13 by Staffing Industry Analysts (SIA, 2024; includes Innova Solutions, Volt, & HireGenics)
  • Named One of the Top Ten Private Companies in Atlanta by the Atlanta Business Chronicle (2023)
  • One of the Largest Certified Minority Business Enterprises (MBEs) in the United States (NMSDC, 2024)
  • AWS Advanced Tier Services Partner with 100+ certifications, employment opportunities. Innova Solutions (HireGenics/Volt) does not discriminate against applicants based on citizenship status, immigration status, or national origin, in accordance with 8 U.S.C. § 1324b. The company will consider for employment qualified applicants with arrest and conviction records in a manner that complies with the San Francisco Fair Chance Ordinance, the Los Angeles Fair Chance Initiative for Hiring Ordinance, and other applicable laws. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Innova Solutions and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at Privacy Policy - innovasolutions.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on public-rest34.bullhornstaffing.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

6:36 min

Funding open source through GitHub Accelerator and Sponsors

Stormy Peters · World Congress 2023

2:56 min

Provisioning a secure container infrastructure with Bicep

Matthias Falkenberg +1 · World Congress 2022

3:05 min

Integrating an assistant application with Jira software

Felix Augenstein · LIVE

1:53 min

Transitioning toward DevSecOps with dynamic scanning and secrets management

Christoph Ruggenthaler · LIVE

2:40 min

Using GitHub primitives for internal documentation and corporate operations

Kyle Daigle · Coffee With Developers

4:09 min

Selecting infrastructure tools and determining proper abstraction layers

Alayshia Knighten Alayshia Knighten · World Congress 2024

Videos

See all

Related articles

See all