DevSecOps Engineer - Hybrid, Multi-Cloud Security

ampliFI Loyalty; Naperville (IL); Hybride; USD 90 000 - 100 000; Plein temps

Avantages offerts par ce poste

Medical/Dental/Vision

Remote capabilities

401K with match

Tuition Reimbursement

Gym on site

Résumé du poste

ampliFI Loyalty, a leading loyalty technology provider based in Naperville, IL, seeks a DevOps/DevSecOps Engineer to embed automated security guardrails, vulnerability scanning, and compliance controls into our cloud platform and CI/CD pipelines. You will manage SAST/DAST/SCA tooling, automate triage and enable secure multi-cloud patterns (AWS to GCP).

This mid-to-senior role focuses on secure infrastructure, IaC automation, and cross-team guidance, with hybrid on-site work in Naperville, IL.

Qualifications

• 3 to 5+ years in DevSecOps, cloud security, or platform security engineering.
• Multi-cloud experience AWS and GCP with strong security tooling integration.
• Hands-on experience with SAST/DAST/SCA and container security in CI/CD.

Responsabilités

• Embed automated security guardrails into cloud platform and CI/CD pipelines.
• Automate vulnerability triage and remediation workflows across teams.
• Establish secure multi-cloud guardrails including AWS-GCP integrations.
• Enforce IaC security automation using Terraform, Checkov, and Trivy.
• Serve as SME for cloud security tooling, CI/CD automation, and multi-cloud access patterns.
• Tune security tools to reduce false positives and operational noise.
• Coordinate during security events and contribute to post-mortem analyses.
• Provide guidance across Security, Development, Operations and Architecture teams.

Connaissances

DevSecOps

Cloud Security

AWS

GCP

Terraform

CI/CD

SAST/DAST/SCA

IAM/KMS

EKS/ECS

Security Monitoring

Outils

Terraform

AWS CDK

GitHub Actions

CodeBuild

Jenkins

Checkov

Trivy

KMS

OAuth

VPC

Description du poste

ampliFI Loyalty, a leading loyalty technology provider based in Naperville, IL, seeks a DevOps/DevSecOps Engineer to embed automated security guardrails, vulnerability scanning, and compliance controls into our cloud platform and CI/CD pipelines. You will manage SAST/DAST/SCA tooling, automate triage and enable secure multi-cloud patterns (AWS to GCP).

This mid-to-senior role focuses on secure infrastructure, IaC automation, and cross-team guidance, with hybrid on-site work in Naperville, IL.