IAC Security Engineer: Cloud Guardrails & Policy

MassGenics, Inc.; Chandler, Northern (AZ, KY); Hybrid; USD 117,000 - 124,000; Full time

Benefits offered by this job

Medical coverage

Dental/Vision

401(k)

HSA/FSA

Life Insurance

Disability Insurance

Job summary

Innova Solutions is seeking an IAC Security Engineer to lead security for Infrastructure as Code across multi-cloud CI/CD pipelines. You will design and enforce OPA/Rego policies, integrate Wiz scanning, and partner with engineering to prevent misconfigurations before deployment.

The role requires deep Terraform/Kubernetes experience, strong policy skills, and hands-on CI/CD expertise across GitHub Actions, GitLab CI, and Azure DevOps. Hybrid/Remote US-based.

Qualifications

• 8+ years in Cloud Security, DevSecOps or AppSec with hands-on experience.
• Strong IaC security with Terraform and Kubernetes/Helm.
• Wiz experience for IaC scanning, CI/CD gating and posture management.
• Proficiency in writing OPA/Rego rules and policy testing.

Responsibilities

• Policy as Code (OPA/Rego): author, test, version and tune custom IaC rules.
• Staged Enforcement: manage regression testing and controlled rollouts.
• CI/CD & IDE Integration: embed Wiz CLI and plugins into major CI/CD tools.
• Triage & Operations: monitor pipelines, triage scanner failures, route findings.
• Developer Enablement: create secure IaC templates and quick-fix guides.

Skills

Cloud security

DevSecOps

AppSec

IaC security

Terraform

Kubernetes/Helm

OPA/Rego

Wiz

CI/CD

Policy enforcement

Tools

Wiz

GitHub Actions

GitLab CI

Azure DevOps

Jira

ServiceNow

VS Code

Job description

Innova Solutions is seeking an IAC Security Engineer to lead security for Infrastructure as Code across multi-cloud CI/CD pipelines. You will design and enforce OPA/Rego policies, integrate Wiz scanning, and partner with engineering to prevent misconfigurations before deployment.

The role requires deep Terraform/Kubernetes experience, strong policy skills, and hands-on CI/CD expertise across GitHub Actions, GitLab CI, and Azure DevOps. Hybrid/Remote US-based.