Iac Security Engineer - Information Technology - Analysts

MassGenics, Inc.; Chandler, Northern (AZ, KY); Hybrid; USD 117,000 - 124,000; Full time

Benefits offered by this job

Medical coverage

Dental/Vision

401(k)

HSA/FSA

Life Insurance

Disability Insurance

Job summary

Innova Solutions is seeking an IAC Security Engineer to lead security for Infrastructure as Code across multi-cloud CI/CD pipelines. You will design and enforce OPA/Rego policies, integrate Wiz scanning, and partner with engineering to prevent misconfigurations before deployment.

The role requires deep Terraform/Kubernetes experience, strong policy skills, and hands-on CI/CD expertise across GitHub Actions, GitLab CI, and Azure DevOps. Hybrid/Remote US-based.

Qualifications

• 8+ years in Cloud Security, DevSecOps or AppSec with hands-on experience.
• Strong IaC security with Terraform and Kubernetes/Helm.
• Wiz experience for IaC scanning, CI/CD gating and posture management.
• Proficiency in writing OPA/Rego rules and policy testing.

Responsibilities

• Policy as Code (OPA/Rego): author, test, version and tune custom IaC rules.
• Staged Enforcement: manage regression testing and controlled rollouts.
• CI/CD & IDE Integration: embed Wiz CLI and plugins into major CI/CD tools.
• Triage & Operations: monitor pipelines, triage scanner failures, route findings.
• Developer Enablement: create secure IaC templates and quick-fix guides.

Skills

Cloud security

DevSecOps

AppSec

IaC security

Terraform

Kubernetes/Helm

OPA/Rego

Wiz

CI/CD

Policy enforcement

Tools

Wiz

GitHub Actions

GitLab CI

Azure DevOps

Jira

ServiceNow

VS Code

Job description

Iac Security Engineer - Information Technology

Job ID: 1025441 CHARLOTTE , North Carolina Job Type: Contract Added - 2 days ago

Job Description

A client of Innova Solutions is immediately hiring for an IAC Security Engineer.

Title: IAC Security Engineer.

Position type: Full Time – Contract

Duration: 6 Months

Location: Charlotte, NC, Irving, TX, Minneapolis, MN, Chandler, AZ, Des Moines, IA, Columbus, OH, Raleigh, NC, San Antonio, TX, Washington (Hybrid) / Remote

As an IAC Security Engineer, you will: Lead and scale Infrastructure as Code (IaC) security across multi-cloud CI/CD pipelines. You will design, build, and enforce custom OPA/Rego policies with Wiz, integrate shift-left scanning across Terraform and Kubernetes, and partner directly with engineering teams to minimize noise and prevent cloud misconfigurations before deployment.

Key Responsibilities

• Policy as Code (OPA/Rego): Author, test, version, and tune custom IaC security rules in Rego/OPA to extend Wiz checks and codify internal guardrails.
• Staged Enforcement: Manage regression testing and staged rollouts (Report ? Warn ? Block) to maintain low false-positive rates and high pipeline throughput.
• CI/CD & IDE Integration: Embed Wiz CLI, VCS integrations, and plugins into GitHub Actions, GitLab CI, Azure DevOps, and VS Code for real-time PR/local feedback.
• Triage & Operations: Monitor pipeline health, triage scanner failures, maintain exception ledgers, and automate findings routing via ServiceNow (AVR/CVR) and Jira.
• Developer Enablement: Host office hours, build "how-to-fix" documentation, and create secure sample IaC templates to accelerate remediation.

Required Qualifications

• 8+ years in Cloud Security, DevSecOps, or AppSec with deep hands‑on expertise.
• IaC & Containers: Strong, production‑grade security experience with Terraform and Kubernetes/Helm (CloudFormation and ARM/Bicep are a plus).
• Wiz Expertise: Proven experience operating Wiz for IaC scanning, CI/CD gating, and posture management.
• Policy Engine: Demonstrated ability to write, debug, and test OPA/Rego rules.
• CI/CD Fluency: Hands‑on pipeline authoring across GitHub Actions, GitLab CI, Azure DevOps, or Jenkins.

Preferred Qualifications

• Prior experience executing a Prisma Cloud to Wiz migration.
• Understanding of platform abstraction layers and differences between Terraform & Ansible.
• Integrations with ServiceNow (AVR / CVR / ITSM) or Jira for finding synchronization and exception tracking.
• Developer enablement tools (e.g., Wiz VS Code / IDE extensions).
• Relevant Certifications: Terraform Associate, CKA / CKAD, or Cloud Certifications (AWS / Azure / GCP).
• Automation scripting using Python, Bash, or PowerShell.

This position is only open to applicants who can be engaged on a W-2 basis. 1099 contractors and Corp-to-Corp arrangements will not be considered for this position.

PAY RANGE AND BENEFITS:

Pay Range*: $85/hr to $90/hr

*Pay range offered to a successful candidate will be based on several factors, including the candidate's education, work experience, work location, specific job duties, certifications, etc.

Benefits: Innova Solutions offers benefits( based on eligibility) that include the following: Medical & pharmacy coverage, Dental/vision insurance, 401(k), Health saving account (HSA) and Flexible spending account (FSA), Life Insurance, Pet Insurance, Short term and Long term Disability, Accident & Critical illness coverage, Pre-paid legal & ID theft protection, Sick time, and other types of paid leaves (as required by law), Employee Assistance Program (EAP).

ABOUT INNOVA SOLUTIONS: Founded in 1998 and headquartered in Atlanta, Georgia, Innova Solutions employs approximately 50,000 professionals worldwide and reports an annual revenue approaching $3 Billion. Through our global delivery centers across North America, Asia, and Europe, we deliver strategic technology and business transformation solutions to our clients, enabling them to operate as leaders within their fields.

Recent Recognitions:

• Named One of America’s Best Employers for New Grads by Forbes (2024)
• Named One of the Best Companies to Work for by U.S. News & World Report (Private Companies List, 2024-2025)
• One of the Largest IT Staffing Firms in the US – Ranked #3 by Staffing Industry Analysts (SIA, 2024)
• One of the Largest Staffing Firms in the US – Ranked #13 by Staffing Industry Analysts (SIA, 2024; includes Innova Solutions, Volt, & HireGenics)
• Named One of the Top Ten Private Companies in Atlanta by the Atlanta Business Chronicle (2023)
• One of the Largest Certified Minority Business Enterprises (MBEs) in the United States (NMSDC, 2024)
• AWS Advanced Tier Services Partner with 100+ certifications

Website: https://www.innovasolutions.com/

Innova Solutions is an Equal Opportunity Employer and prohibits any kind of unlawful discrimination and harassment. Innova Solutions is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment on the basis of race, color, religion or belief, national origin, citizenship, social or ethnic origin, sex, age, physical or mental disability, veteran status, marital status, domestic partner status, sexual orientation, or any other status protected by the statutes, rules, and regulations in the locations where it operates. If you are an individual with a disability and need a reasonable accommodation to assist with your job search or application for employment, please contact us at [e-mail] or [phone]. Please indicate the specifics of the assistance needed. Innova Solutions encourages all interested and qualified candidates to apply for employment opportunities. Innova Solutions (HireGenics/Volt) does not discriminate against applicants based on citizenship status, immigration status, or national origin, in accordance with 8 U.S.C. § 1324b.
The company will consider for employment qualified applicants with arrest and conviction records in a manner that complies with the San Francisco Fair Chance Ordinance, the Los Angeles Fair Chance Initiative for Hiring Ordinance, and other applicable laws.