About this opportunity
Motion Recruitment lists this IaC Security Engineer – Wiz / OPA / Rego opportunity in charlotte, North Carolina. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Outstanding long-term contract opportunity! A well-known Financial Services Company is looking for a Engineer in Charlotte, NC (Hybrid). Work with the brightest minds at one of the largest financial institutions in the world. This is a long-term contract opportunity that includes a competitive benefit package! Our client has been around for over 150 years and is continuously innovating in today's digital age. If you want to work for a company that is not only a household name, but also truly cares about satisfying customers' financial needs and helping people succeed financially,
Contract Duration: 6 Months
Required Skills & Experience
7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work or consulting experience, training, military experience, education.
8+ years in AppSec/Cloud Sec/DevSecOps with hands on Terraform and Kubernetes security.
Practical experience operating Wiz (or similar) for IaC in CI/CD.
Policy as Code skills (e.g., OPA/Rego) or equivalent rule tuning experience.
CI/CD fluency and Git workflows; strong triage/routing at scale; clear written/verbal communication for developer enablement.
Desired Skills & Experience
ServiceNow AVR/CVR/ITSM integration experience; JIRA/defect tracker routing.
VS Code/IDE enablement for developer workflows.
Cloud certifications (Azure/AWS/GCP), Terraform Associate, CKA/CKAD.
Scripting (Python/Bash/PowerShell) for automation and reporting.
What You Will Be Doing
Consult as an expert to develop or influence initiatives and resources for highly complex business and technical needs across Engineering.
Consult on the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, and advanced analytical and inductive thinking.
Provide expertise to client senior leadership on innovative Engineering business solutions.
Strategically engage with client personnel.
Design, implement, and tune custom IaC rules in Rego/OPA to extend Wiz beyond built?in checks; codify internal guardrails and compliance mappings; maintain versioned policy packages.
Build automated regression tests for rules (sample repos, TF plans, K8s manifests); measure quality and iteratively reduce false positives prior to enforcement (report ? warn ? block).
Perform pipeline health checks, triage failed scans and monitor tool availability to minimize developer friction.
Validate severity, de duplicate/mark false positives, and route issues to the right owners at repo/service level; drive high signal to noise at scale.
Tune IaC policies/rules (including policy as code), version changes, align to internal standards/frameworks, and roll out safely with staged enforcement (report ? warn ? block).
Integrate Wiz CLI into pipelines; implement gating thresholds; publish artifacts (JSON/SARIF) for traceability; optimize run time and concurrency.
Deploy and maintain Wiz DevOps extensions and/or Wiz Scanner plugin; standardize pipeline templates with block/warn logic across services.
Leverage Wiz VCS integrations to surface PR/MR feedback and ownership context across GitHub, GitLab, and Azure Repos.
Enable local/PR scanning and IDE workflows (Wiz VS Code extension); deliver "how?to?fix" guidance, sample modules, and office hours to accelerate remediation.
Partner with platform teams to embed scanning in golden pipelines/modules and drive consistent adoption.
Run office hours and Slack/Teams support; explain failures with actionable fix guidance; promote local/PR/IDE scanning; review PRs/modules.
Own tool health and upgrades: Wiz CLI updates, policy bundle refreshes, CI/CD plugin versions, and regression tests; document rollback and "warn?mode" fallbacks.
Work with Wiz support/product to elevate defects, track roadmap, and schedule change windows; align integrations using the official Wiz integrations ecosystem.
Triage findings at scale; validate severity, de?dupe/suppress noise, and auto?route to owners; maintain exception ledger with expiries and compensating controls.
Integrate with ServiceNow (AVR/CVR/ITSM) for ticket synchronization and SLA tracking; ensure bidirectional status updates and reporting.
Support publish monthly dashboards (coverage, block rates, MTTR, exception aging, false?positive rate); prepare audit evidence (policy mappings, change logs, access reviews).
Tools & Technologies
Wiz for IaC scanning and CI/CD policy enforcement.
IaC stacks: Terraform, CloudFormation, ARM/Bicep, Kubernetes/Helm.
Pipelines/VCS: Azure DevOps/GitHub/GitLab/Jenkins.
Ticketing/Governance: ServiceNow workflows for finding lifecycle and exceptions.
#J-18808-Ljbffr
Worksite address
charlotte, NC, 28245, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.