DevSecOps Engineer - AmpliFI Loyalty Solutions

OpenTalent; Naperville (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

OpenTalent is seeking a DevSecOps Engineer to embed automated security guardrails, vulnerability scanning, and compliance controls into our cloud platform and CI/CD pipelines. You will manage SAST/DAST/SCA tooling and secure multi-cloud patterns, accelerating software delivery while reducing security overhead across teams.

You will collaborate with architecture and engineering to implement guardrails, automate remediation, and fine-tune tools for reduced false positives, ensuring secure release

Qualifications

• 3–5+ years in DevSecOps, cloud security, or platform security engineering.
• Multi-cloud experience with AWS and Google Cloud Platform (GCP).
• Deep experience with AWS core security infra (IAM, KMS, Secrets Manager, VPC, EKS/ECS).
• Strong proficiency with Terraform or AWS CDK for guardrails as code.
• Hands-on in integrating SAST/DAST/SCA into CI/CD pipelines (GitHub Actions, CodeBuild, Jenkins).
• Experience establishing identity flows and Workload/Workforce Federation across AWS and GCP.
• Hands-on with container security, image scanning (ECR, Trivy).
• Proficiency in CloudWatch, SIEM, and security findings triage.

Responsibilities

• Implement, configure, and maintain automated security scanning across development pipelines.
• Triage findings and automate remediation workflows to streamline vulnerability management.
• Establish secure multi-cloud guardrails, including AWS-to-GCP federation, KMS management, and API gateway access controls.
• Enforce IaC security automation (Terraform, Checkov, Trivy) to embed policy-as-code.
• Serve as SME for cloud security tooling, CI/CD automation, and multi-cloud access patterns.
• Tune security tools to reduce false positives and noise for delivery teams.
• Act as secondary escalation for security incidents and contribute to post-mortems.
• Coordinate technical resolution during security events and share learnings.

Skills

DevSecOps

Cloud security

AWS

GCP

Terraform

CI/CD

SAST/DAST/SCA

ECR/Container security

Security tooling

IAM/KMS

Tools

GitHub Actions

AWS CodeBuild

Jenkins

Trivy

Checkov

Terraform

AWS

ECR

Job description

Overview

The DevSecOps Engineer is responsible for embedding automated security guardrails, vulnerability scanning, and compliance controls directly into our cloud platform and CI/CD pipelines. By managing security tooling platforms (SAST/DAST/SCA), automating vulnerability triage, and building secure multi-cloud integration patterns (including AWS to Google Gemini Enterprise Plus), this role ensures our core cloud infrastructure remains scalable, secure, and friction-free. This position operates as a mid-to-senior technical resource, accelerating software delivery while reducing administrative security overhead across teams.

Responsibilities

• Implement, configure, and maintain automated security scanning platforms (SAST, DAST, SCA, container scanning) across our development pipelines.
• Triage security scan findings and automate remediation workflows to streamline vulnerability management across teams.
• Partner with Architecture and Engineering to establish secure multi-cloud guardrails, including AWS-to-GCP identity federation, KMS key management, and API gateway access controls for AI platform integrations.
• Enforce Infrastructure as Code (IaC) security automation (such as Terraform, Checkov, and Trivy) to embed policy-as-code across environments.
• Serve as a Subject Matter Expert (SME) for cloud security tooling, CI/CD automation, and multi-cloud access patterns, providing technical guidance across the organization.
• Proactively tune security tools to reduce false positives and eliminate operational noise for software delivery teams.
• Serve as a secondary point of escalation for security and platform incidents, rather than participating in the primary on-call rotation.
• Coordinate technical resolution during security events and contribute to post-mortem analysis to prevent recurrence.

Essential Skills and Experience

• 3 to 5+ years of experience in DevSecOps, cloud security, or platform security engineering.
• Multi-cloud experience across public cloud platforms, with deep expertise in AWS and working experience in GCP (Google Cloud Platform).
• Deep experience with AWS core security infrastructure (IAM, KMS, Secrets Manager, VPC, EKS/ECS).
• Strong proficiency in Terraform or AWS CDK to enforce infrastructure guardrails as code across cloud environments.
• Hands-on experience integrating security testing tools (SAST/DAST/SCA/Container scanning) into CI/CD pipelines (GitHub Actions, AWS CodeBuild, or Jenkins).
• Experience establishing identity flows, OAuth configurations, and Workload/Workforce Identity Federation across multi-cloud environments (AWS and GCP).
• Hands-on experience with container security, image scanning repositories (ECR, Trivy), and containerized application runtime security.
• Proficiency in CloudWatch, SIEM log monitoring, and security findings triage.