IaC Security Engineer - Wiz / OPA / Rego

CHARLOTTE, NC, US • Posted 1 day ago • Updated 2 hours ago
Contract W2
On-site
$89.34 - $100.66/hr
Company Branding Image
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • Financial Services
  • Finance
  • Training
  • Military
  • SEC
  • DevSecOps
  • Fluency
  • Git
  • Communication
  • JIRA
  • Routing
  • Cloud Computing
  • Amazon Web Services
  • Google Cloud Platform
  • Google Cloud
  • Scripting
  • Python
  • Bash
  • Windows PowerShell
  • Evaluation
  • Innovation
  • Analytical Skill
  • Leadership
  • Oracle Policy Automation
  • Regulatory Compliance
  • Service Level
  • JSON
  • Concurrent Computing
  • Slack
  • Public Relations
  • IDE
  • Command-line Interface
  • Regression Analysis
  • Roadmaps
  • Microsoft Windows
  • General Ledger
  • IT Service Management
  • SLA
  • Reporting
  • Dashboard
  • Auditing
  • Continuous Integration
  • Continuous Delivery
  • Stacks Blockchain
  • Terraform
  • ARM
  • Kubernetes
  • Veritas Cluster Server
  • Microsoft Azure
  • DevOps
  • GitHub
  • GitLab
  • Jenkins
  • ServiceNow
  • Workflow

Summary

Outstanding long-term contract opportunity! A well-known Financial Services Company is looking for a Engineer in Charlotte, NC (Hybrid).

Work with the brightest minds at one of the largest financial institutions in the world. This is a long-term contract opportunity that includes a competitive benefit package! Our client has been around for over 150 years and is continuously innovating in today's digital age. If you want to work for a company that is not only a household name, but also truly cares about satisfying customers' financial needs and helping people succeed financially, apply today.

Contract Duration: 6 Months

Required Skills & Experience
  • 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work or consulting experience, training, military experience, education.
  • 8+ years in AppSec/Cloud Sec/DevSecOps with hands on Terraform and Kubernetes security.
  • Practical experience operating Wiz (or similar) for IaC in CI/CD.
  • Policy as Code skills (e.g., OPA/Rego) or equivalent rule tuning experience.
  • CI/CD fluency and Git workflows; strong triage/routing at scale; clear written/verbal communication for developer enablement.
Desired Skills & Experience
  • ServiceNow AVR/CVR/ITSM integration experience; JIRA/defect tracker routing.
  • VS Code/IDE enablement for developer workflows.
  • Cloud certifications (Azure/AWS/Google Cloud Platform), Terraform Associate, CKA/CKAD.
  • Scripting (Python/Bash/PowerShell) for automation and reporting.

What You Will Be Doing
  • Consult as an expert to develop or influence initiatives and resources for highly complex business and technical needs across Engineering.
  • Consult on the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, and advanced analytical and inductive thinking.
  • Provide expertise to client senior leadership on innovative Engineering business solutions.
  • Strategically engage with client personnel.
  • Design, implement, and tune custom IaC rules in Rego/OPA to extend Wiz beyond built?in checks; codify internal guardrails and compliance mappings; maintain versioned policy packages.
  • Build automated regression tests for rules (sample repos, TF plans, K8s manifests); measure quality and iteratively reduce false positives prior to enforcement (report ? warn ? block).
  • Perform pipeline health checks, triage failed scans and monitor tool availability to minimize developer friction.
  • Validate severity, de duplicate/mark false positives, and route issues to the right owners at repo/service level; drive high signal to noise at scale.
  • Tune IaC policies/rules (including policy as code), version changes, align to internal standards/frameworks, and roll out safely with staged enforcement (report ? warn ? block).
  • Integrate Wiz CLI into pipelines; implement gating thresholds; publish artifacts (JSON/SARIF) for traceability; optimize run time and concurrency.
  • Deploy and maintain Wiz DevOps extensions and/or Wiz Scanner plugin; standardize pipeline templates with block/warn logic across services.
  • Leverage Wiz VCS integrations to surface PR/MR feedback and ownership context across GitHub, GitLab, and Azure Repos.
  • Enable local/PR scanning and IDE workflows (Wiz VS Code extension); deliver "how?to?fix" guidance, sample modules, and office hours to accelerate remediation.
  • Partner with platform teams to embed scanning in golden pipelines/modules and drive consistent adoption.
  • Run office hours and Slack/Teams support; explain failures with actionable fix guidance; promote local/PR/IDE scanning; review PRs/modules.
  • Own tool health and upgrades: Wiz CLI updates, policy bundle refreshes, CI/CD plugin versions, and regression tests; document rollback and "warn?mode" fallbacks.
  • Work with Wiz support/product to escalate defects, track roadmap, and schedule change windows; align integrations using the official Wiz integrations ecosystem.
  • Triage findings at scale; validate severity, de?dupe/suppress noise, and auto?route to owners; maintain exception ledger with expiries and compensating controls.
  • Integrate with ServiceNow (AVR/CVR/ITSM) for ticket synchronization and SLA tracking; ensure bidirectional status updates and reporting.
  • Support publish monthly dashboards (coverage, block rates, MTTR, exception aging, false?positive rate); prepare audit evidence (policy mappings, change logs, access reviews).
  • Tools & Technologies
  • Wiz for IaC scanning and CI/CD policy enforcement.
  • IaC stacks: Terraform, CloudFormation, ARM/Bicep, Kubernetes/Helm.
  • Pipelines/VCS: Azure DevOps/GitHub/GitLab/Jenkins.
  • Ticketing/Governance: ServiceNow workflows for finding lifecycle and exceptions.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10105282
  • Position Id: 888695
  • Posted 1 day ago

Company Info

About Motion Recruitment Partners, LLC

Motion Recruitment delivers IT Talent Solutions for Contract, Direct Hire, Managed Solutions and Statement of Work to all of North America from our 21 delivery centers. Our high-touch, specialized, team-based recruitment model’s success is proven through our exemplary track record in filling the most challenging IT positions for startup and enterprise clients alike. Our hyper-specialized tech focus results in a truly consultative approach for both our clients and candidates, within our recruiting areas of expertise: Software, Mobile, Data, Infrastructure, Cybersecurity, Product + UX and Functional.

Motion also delivers IT Consulting Solutions through the Motion Consulting Group (MCG) that create true digital transformation for IT projects in Agile Development & Coaching, DevOps & DevSecOps Solutions, and Managed Services for IT Operations.

We’re also the proud creators of Tech in Motion and the Timmy Awards, our North American community platform, events series and award program that connects over 250,000 tech enthusiasts to meet, learn, and innovate.

About_Company_OneAbout_Company_Two
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Charlotte, North Carolina

•

Today

Easy Apply

Contract

$90 - $100

Charlotte, North Carolina

•

Today

Easy Apply

Contract

$90.63 - $102.11

Raleigh, North Carolina

•

Today

Easy Apply

Contract

$90 - $100

Remote

•

Today

Easy Apply

Contract

$50 - $65

Search all similar jobs