DevSecOps Engineer — Cloud Security & CI/CD Automation

ampliFI Loyalty Solutions; Naperville (IL); Hybrid; USD 90,000 - 100,000; Full time

Benefits offered by this job

401(k) with employer match

Medical insurance

Dental insurance

Tuition Reimbursement

Paid time off

Hybrid work environment

Onsite gym & snacks

Employee recognition

Job summary

ampliFI is seeking a DevSecOps Engineer to embed automated security guardrails, vulnerability scanning, and compliance controls into our cloud platform and CI/CD pipelines. You will manage security tooling, automate triage, and build secure multi-cloud patterns (AWS to GCP) to keep our infrastructure scalable and secure.

Your role operates as a mid-to-senior technical resource, accelerating software delivery while reducing security overhead across teams.

Qualifications

• 3 to 5+ years of experience in DevSecOps, cloud security, or platform security engineering.
• Multi-cloud experience across AWS and GCP with deep AWS security infra (IAM, KMS, Secrets Manager, VPC, EKS/ECS).
• Strong proficiency with Terraform or AWS CDK to enforce guardrails as code.
• Hands-on experience integrating security testing tools (SAST/DAST/SCA/Container scanning) into CI/CD pipelines (GitHub Actions, CodeBuild, or Jenkins).
• Experience with identity flows, OAuth, and Workload/Workforce Identity Federation across AWS and GCP.
• Hands-on container security with image scanning (ECR, Trivy) and runtime security.
• Proficiency with CloudWatch, SIEM, and security findings triage.

Responsibilities

• Implement, configure, and maintain automated security scanning platforms across pipelines.
• Triage security findings and automate remediation workflows across teams.
• Establish secure multi-cloud guardrails (AWS to GCP) including identity federation and KMS management.
• Enforce IaC security automation with Terraform, Checkov, and Trivy across environments.
• Act as SME for cloud security tooling, CI/CD automation, and multi-cloud access patterns.
• Tune security tools to reduce false positives and operational noise.
• Serve as escalation point for security and platform incidents during events.
• Coordinate technical resolution during security events and post-mortem analysis.

Skills

DevSecOps

Cloud security

Multi-cloud

CI/CD automation

Vulnerability triage

Identity federation

Scripting

Tools

Terraform

AWS CDK

SAST

DAST

SCA

Container scanning

GitHub Actions

CodeBuild

Jenkins

ECR

Trivy

Checkov

IAM

Job description

ampliFI is seeking a DevSecOps Engineer to embed automated security guardrails, vulnerability scanning, and compliance controls into our cloud platform and CI/CD pipelines. You will manage security tooling, automate triage, and build secure multi-cloud patterns (AWS to GCP) to keep our infrastructure scalable and secure.

Your role operates as a mid-to-senior technical resource, accelerating software delivery while reducing security overhead across teams.