Senior DevSecOps Engineer: Cloud Security & Automation

ampliFI Loyalty Solutions; Naperville (IL); Hybrid; USD 90,000 - 100,000; Full time

Benefits offered by this job

Competitive pay

401(k) with employer match

Medical, dental, vision

Paid time off

Hybrid work environment

Job summary

ampliFI Loyalty Solutions seeks a DevSecOps Engineer to embed automated security guardrails, vulnerability scanning, and compliance controls into our cloud platform and CI/CD pipelines. You will manage security tooling (SAST/DAST/SCA) and drive secure multi‑cloud integration between AWS and Google Cloud Platform.

This mid-to-senior role accelerates software delivery while reducing administrative security overhead, with a hybrid work arrangement in Naperville, IL and national remote options for

Qualifications

• 3 to 5+ years of DevSecOps, cloud security, or platform security engineering.
• Multi-cloud experience AWS and GCP.
• Strong experience with Terraform or AWS CDK.
• Hands-on with SAST/DAST/SCA and CI/CD integrations.
• Experience with identity federation across multi-cloud environments.
• Container security and image scanning experience.
• Proficiency with CloudWatch and SIEM monitoring.

Responsibilities

• Implement, configure, and maintain automated security scanning platforms across development pipelines.
• Triage findings and automate remediation workflows across teams.
• Establish secure multi-cloud guardrails, including AWS-to-GCP integration and IAM/KMS controls.
• Enforce IaC security automation using Terraform, Checkov, and Trivy.
• Serve as SME for cloud security tooling and CI/CD automation.
• Tune security tools to reduce false positives and noise.
• Coordinate security events and contribute to post-mortem analyses.

Skills

DevSecOps

Cloud security

Multi-cloud AWS/GCP

Terraform

CI/CD security

SAST/DAST/SCA

IAM/KMS/Secrets

Container security

Policy as code

Incident response

Tools

GitHub Actions

AWS CodeBuild

Jenkins

ECR

Trivy

Job description

ampliFI Loyalty Solutions seeks a DevSecOps Engineer to embed automated security guardrails, vulnerability scanning, and compliance controls into our cloud platform and CI/CD pipelines. You will manage security tooling (SAST/DAST/SCA) and drive secure multi‑cloud integration between AWS and Google Cloud Platform.

This mid-to-senior role accelerates software delivery while reducing administrative security overhead, with a hybrid work arrangement in Naperville, IL and national remote options for