Job Description A growing enterprise technology organization is seeking a
Technology and Data Engineer 5 for a hybrid opportunity in
Des Moines, Iowa.
This position will focus on improving cloud infrastructure security by embedding automated controls into development and deployment workflows. The team is looking for someone who can help enhance Infrastructure as Code security practices, support policy governance initiatives, and strengthen security oversight throughout the software delivery process.
You will collaborate with engineers, security professionals, and platform teams to create scalable solutions that help identify risk early, improve compliance alignment, and enable secure cloud deployments across enterprise environments. Required Skills & Experience
- 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work or consulting experience, training, military experience, education.
- 8+ years in AppSec, Cloud Security, or DevSecOps with hands-on Terraform and Kubernetes security experience.
- Practical experience operating Wiz (or similar) for IaC in CI/CD environments.
- Policy as Code skills using OPA/Rego or equivalent rule tuning experience.
- Strong CI/CD knowledge and Git workflow experience.
- Excellent communication skills with the ability to support development teams and drive remediation efforts.
Desired Skills & Experience
- ServiceNow AVR/CVR/ITSM integration experience.
- JIRA or defect-routing experience.
- VS Code and IDE enablement experience.
- Cloud certifications including AWS, Azure, or Google Cloud Platform.
- Terraform Associate, CKA, or CKAD certifications.
- Python, Bash, or PowerShell scripting experience.
What You Will Be Doing Daily Responsibilities
- Design, implement, and tune custom IaC rules in Rego/OPA to extend security coverage beyond built-in capabilities.
- Build automated regression tests using Terraform plans, Kubernetes manifests, and sample repositories.
- Perform pipeline health checks and investigate failed security scans.
- Monitor platform availability and scanning effectiveness to minimize engineering disruption.
- Validate finding severity and remove duplicate or inaccurate results.
- Route security issues to the appropriate service and application owners.
- Tune policy-as-code controls in alignment with enterprise standards and governance requirements.
- Implement staged enforcement models using report, warning, and blocking controls.
- Integrate Wiz CLI into CI/CD workflows and configure security gates.
- Publish security artifacts for traceability and compliance reporting.
- Deploy and maintain Wiz DevOps extensions and scanning integrations.
- Support GitHub, GitLab, Azure DevOps, and Jenkins security workflows.
- Enable pull-request, merge-request, local workstation, and IDE-based scanning capabilities.
- Partner with platform engineering teams to standardize secure deployment templates.
- Deliver remediation guidance and support developer adoption efforts.
- Conduct office hours, troubleshooting sessions, and training activities.
- Manage policy package updates, platform upgrades, and regression testing efforts.
- Coordinate with vendors regarding defects, enhancements, and product roadmap items.
- Maintain findings exception processes and compensating-control documentation.
- Integrate findings management activities with ServiceNow workflows.
- Produce operational metrics, audit evidence, executive dashboards, and compliance reporting.
The Offer
- Hybrid Schedule
- 6-Month Contract
- W2 Only
You will receive the following benefits
- Medical Insurance
- Dental Benefits
- Vision Benefits
- Paid Time Off (PTO)
- 401(k)
Applicants must be currently authorized to work in the US on a full-time basis now and in the future.
