Platform Engineer

Ampcus Inc; Cedar Rapids (IA); Hybrid; USD 100,000 - 140,000; Full time

Job summary

Ampcus Inc. is seeking a developer to remediate vulnerabilities across our Java/Spring Boot platform.

You will work on a twice-weekly cadence, focusing on upgrades, dependency management, and security findings, using AI-assisted tooling and CI/CD pipelines. You'll touch Python services, collaborate with security and release teams, and ensure compatibility across shared libraries while keeping deployments smooth.

Qualifications

• Must-Have: Java 17/21, Maven, Spring / Spring Boot, GitHub, Jenkins pipelines.
• Secondary: Python 3.x, pip / requirements.txt / Poetry, React, Node.js / NPM.

Responsibilities

• Remediate library vulnerabilities across platform services on a twice-weekly cycle.
• Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive dependencies).
• Analyze Mythos and Snyk findings, assess severity and impact, apply fixes.
• Validate upgrades do not introduce regressions (build, test, deploy).
• Maintain compatibility across shared libraries consumed by multiple services.
• Work with AI-assisted remediation tooling to accelerate upgrade workflows.
• Coordinate with security and release teams on vulnerability SLAs.
• Occasionally remediate Python dependencies (pip/requirements.txt) in platform services.

Skills

Java 17/21

Maven

Spring / Spring Boot

GitHub

Jenkins pipelines

Tools

Python 3.x

pip / requirements.txt / Poetry

React

Node.js / NPM

AWS

Docker

Terraform

AI-assisted coding

AWS Kiro

Snyk/Mythos

Job description

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Work Location:

Cedar Rapids, IA - Hybrid

Duration:

12 Months Contract

About the Role:

We're hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isn't firefighting — it's disciplined, recurring upgrade work that keeps our platform ahead of security findings before they become blockers. You'll work primarily in Java/Spring Boot codebases but will also touch Python services that live within the same platform ecosystem. You'll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle.

What You'll Do:

• Remediate library vulnerabilities across platform services on a twice-weekly cycle
• Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive dependencies)
• Analyze Mythos and Snyk findings, assess severity/impact, and apply fixes
• Validate upgrades don't introduce regressions (build, test, deploy)
• Maintain compatibility across shared libraries consumed by multiple services
• Work with AI-assisted remediation tooling to accelerate upgrade workflows
• Coordinate with security and release teams on vulnerability SLAs
• Occasionally remediate Python dependencies (pip/requirements.txt) in platform services

Required Skills:

• Primary (Must-Have)
  • Java 17/21
  • Maven
  • Spring / Spring Boot
  • GitHub
  • Jenkins pipelines
• Secondary
  • Python 3.x
  • pip / requirements.txt / Poetry
  • React
  • Node.js / NPM
• Cloud & Infrastructure
  • AWS (ECS, Lambda, IAM)
  • Docker
  • Terraform
• Git
  • AI & Automation
    • AI-assisted coding (AWS Kiro or similar)
    • Familiarity with LLM-driven workflows
    • Automation mindset
  • Security & Compliance
    • SCA tools (Mythos, Snyk, or similar)
    • Vulnerability lifecycle management
    • CVSS scoring & risk assessment
    • Compliance awareness

Nice to Have:

• Strong experience with SDLC, DevOps, and CI/CD pipelines
• Experience managing upgrades at scale across 10 microservices
• Familiarity with Apache Camel or integration-heavy Spring services
• Background in financial services / insurance (regulated environment)
• Experience with OpenSearch or Elasticsearch library upgrades
• Comfort with NestJS/Node.js (some platform tooling uses this)

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.