Platform Engineer

Ampcus, Inc; Cedar Rapids (IA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Ampcus, Inc. in Cedar Rapids, IA is seeking a Java/Spring Boot developer to remediate vulnerabilities in platform services on a twice-weekly cadence.

You’ll work primarily in Java/Spring Boot codebases, with Python services also touched, leveraging AI-assisted tooling and CI/CD pipelines to accelerate remediation. You will analyze findings from Mythos and Snyk, upgrade dependencies, validate changes, and ensure compatibility across shared libraries while coordinating with security and release

Qualifications

• Must-have: Java 17/21, Maven, Spring Boot, GitHub, and Jenkins pipelines.
• Nice-to-have: Python 3.x, React, Node.js, and AWS container/CI tooling.
• Experience with secure SDLC, vulnerability remediation, and CI/CD automation.

Responsibilities

• Remediate library vulnerabilities across platform services on a twice-weekly cycle.
• Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive deps).
• Analyze Mythos and Snyk findings, assess severity, and apply fixes.
• Validate upgrades to avoid regressions (build, test, deploy).
• Maintain compatibility across shared libraries used by multiple services.
• Work with AI-assisted remediation tooling to speed upgrades.
• Coordinate with security and release teams on vulnerability SLAs.
• Occasionally remediate Python dependencies (pip/requirements.txt).

Skills

Java 17/21

Maven

Spring Boot

GitHub

Jenkins pipelines

Python 3.x

Pip/Requirements/Poetry

React

Node.js / NPM

AWS (ECS/Lambda/IAM)

Docker

Terraform

AI & Automation

AI-assisted coding

LLM-driven workflows

Automation mindset

SCA tools

Vulnerability lifecycle

CVSS scoring

Compliance awareness

Education

Bachelor's degree or equivalent

Tools

Mythos

Snyk

Job description

Work Location

Cedar Rapids, IA - Hybrid

Duration

12 Months Contract

About the Role

We're hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isn't firefighting - it's disciplined, recurring upgrade work that keeps our platform ahead of security findings before they become blockers. You'll work primarily in Java/Spring Boot codebases but will also touch Python services that live within the same platform ecosystem. You'll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle.

What You'll Do

• Remediate library vulnerabilities across platform services on a twice-weekly cycle
• Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive dependencies)
• Analyze Mythos and Snyk findings, assess severity/impact, and apply fixes
• Validate upgrades don't introduce regressions (build, test, deploy)
• Maintain compatibility across shared libraries consumed by multiple services
• Work with AI-assisted remediation tooling to accelerate upgrade workflows
• Coordinate with security and release teams on vulnerability SLAs
• Occasionally remediate Python dependencies (pip/requirements.txt) in platform services

Required Skills

• Primary (Must-Have)
  • Java 17/21
  • Maven
  • Spring / Spring Boot
  • GitHub
  • Jenkins pipelines
• Secondary
  • Python 3.x
  • pip / requirements.txt / Poetry
  • React
  • Node.js / NPM
• Cloud & Infrastructure
  • AWS (ECS, Lambda, IAM)
  • Docker
  • Terraform
• Git
  • AI & Automation
  • AI-assisted coding (AWS Kiro or similar)
  • Familiarity with LLM-driven workflows
  • Automation mindset
• Security & Compliance
  • SCA tools (Mythos, Snyk, or similar)
  • Vulnerability lifecycle management
  • CVSS scoring & risk assessment
  • Compliance awareness

Nice to Have

• Strong experience with SDLC, DevOps, and CI/CD pipelines
• Experience managing upgrades at scale across 10 microservices