Lead Data Engineer

An enterprise technology company is seeking a Technology and Data Engineer 5 for a hybrid opportunity in Raleigh, North Carolina . This role is centered on strengthening Infrastructure as Code security across cloud environments and supporting secure software delivery practices at scale. The team is focused on building preventative controls, improving policy management, and increasing visibility into security issues before code and infrastructure reach production. The ideal candidate will enjoy working across security, DevOps, and engineering functions to develop practical solutions that improve risk management while supporting the speed and efficiency of modern development teams. Required Skills & Experience:

• 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work or consulting experience, training, military experience, education.
• 8+ years in AppSec, Cloud Security, or DevSecOps with hands-on Terraform and Kubernetes security experience.
• Practical experience operating Wiz (or similar) for IaC in CI/CD environments.
• Policy as Code skills using OPA/Rego or equivalent rule tuning experience.
• Strong CI/CD knowledge and Git workflow experience.
• Excellent communication skills with the ability to support development teams and drive remediation efforts.

• ServiceNow AVR/CVR/ITSM integration experience.
• JIRA or defect-routing experience.
• VS Code and IDE enablement experience.
• Cloud certifications including AWS, Azure, or Google Cloud Platform.
• Terraform Associate, CKA, or CKAD certifications.
• Python, Bash, or PowerShell scripting experience.

• Design, implement, and tune custom IaC rules in Rego/OPA to extend security coverage beyond built-in capabilities.
• Build automated regression tests using Terraform plans, Kubernetes manifests, and sample repositories.
• Perform pipeline health checks and investigate failed security scans.
• Monitor platform availability and scanning effectiveness to minimize engineering disruption.
• Validate finding severity and remove duplicate or inaccurate results.
• Route security issues to the appropriate service and application owners.
• Tune policy-as-code controls in alignment with enterprise standards and governance requirements.
• Implement staged enforcement models using report, warning, and blocking controls.
• Integrate Wiz CLI into CI/CD workflows and configure security gates.
• Publish security artifacts for traceability and compliance reporting.
• Deploy and maintain Wiz DevOps extensions and scanning integrations.
• Support GitHub, GitLab, Azure DevOps, and Jenkins security workflows.
• Enable pull-request, merge-request, local workstation, and IDE-based scanning capabilities.
• Partner with platform engineering teams to standardize secure deployment templates.
• Deliver remediation guidance and support developer adoption efforts.
• Conduct office hours, troubleshooting sessions, and training activities.
• Manage policy package updates, platform upgrades, and regression testing efforts.
• Coordinate with vendors regarding defects, enhancements, and product roadmap items.
• Maintain findings exception processes and compensating-control documentation.
• Integrate findings management activities with ServiceNow workflows.
• Produce operational metrics, audit evidence, executive dashboards, and compliance reporting.

The Offer

• Hybrid Schedule
• 6-Month Contract W2 Only
• You will receive the following benefits Medical Insurance Dental Benefits Vision Benefits Paid Time Off (PTO) 401(k)
• Applicants must be currently authorized to work in the US on a full-time basis now and in the future.

For applications and inquiries, contact:View email address on us.fitly.work