> Markdown version of [/jobs/ext/2597329-iac-security-engineer](https://www.wearedevelopers.com/jobs/ext/2597329-iac-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IaC Security Engineer

- **Company:** Manpower
- **Location:** Charlotte, NC, United States
- **Experience:** Expert
- **Salary:** $166,400.0 - $187,200.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Cloud Computing Security, Cyber Security, Continuous Integration, Regression Testing, Policy as Code, Software Security, Infrastructure as Code (IaC), Git Flow, Terraform, Devsecops
- **Published:** August 23, 2026
- **Apply:** https://www.beyondcharlotte.com/job.asp?id=3363359226&tx=ZT212TYI&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

Our banking client is seeking an IaC Engineer to join their team. As an IaC Engineer, you will be part of the Cybersecurity/Application Security department supporting infrastructure security initiatives. The ideal candidate will have strong problem-solving skills, excellent communication abilities, and a proactive mindset, which will align successfully in the organization., * 8+ years of experience in AppSec, Cloud Security, or DevSecOps with hands-on Terraform and Kubernetes security expertise.

 * Practical experience operating Wiz (or similar tools) for IaC in CI/CD environments.
 * Strong policy as code skills, such as OPA/Rego, or equivalent rule tuning experience.
 * Fluency in CI/CD processes and Git workflows, with the ability to perform triage and routing at scale.
 * Excellent written and verbal communication skills to enable and support developers effectively.

## Description

* Design, implement, and tune custom Infrastructure as Code (IaC) security rules using Wiz across CI/CD pipelines.
 * Build automated regression tests for rules, measure quality, and iteratively reduce false positives prior to enforcement.
 * Perform pipeline health checks, triage failed scans, and monitor tool availability to minimize developer friction.
 * Validate severity, de-duplicate false positives, and route issues to the appropriate owners at the repository or service level.
 * Integrate Wiz CLI into pipelines, implement gating thresholds, and publish artifacts for traceability and audit purposes.


## Related Videos

- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews)
- [Unleashing Potential Across Teams: The Power of Infrastructure as Code](https://www.wearedevelopers.com/videos/930-unleashing-potential-across-teams-the-power-of-infrastructure-as-code)
- [Building Applications with Infrastructure as Code](https://www.wearedevelopers.com/videos/887-building-applications-with-infrastructure-as-code)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)