Platform Engineer
Cedar Rapids, IA - USA
Job Summary
Work Location:
Cedar Rapids IA Hybrid
12 Months Contract
Were hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isnt firefighting its disciplined recurring upgrade work that keeps our platform ahead of security findings before they become blockers. Youll work primarily in Java/Spring Boot codebases but will also touch Python services that live within the same platform ecosystem. Youll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle.
- Remediate library vulnerabilities across platform services on a twice-weekly cycle
- Upgrade and manage dependencies (Maven BOMs parent POMs transitive dependencies)
- Analyze Mythos and Snyk findings assess severity/impact and apply fixes
- Validate upgrades dont introduce regressions (build test deploy)
- Maintain compatibility across shared libraries consumed by multiple services
- Work with AI-assisted remediation tooling to accelerate upgrade workflows
- Coordinate with security and release teams on vulnerability SLAs
- Occasionally remediate Python dependencies (pip/) in platform services
- Primary (Must-Have)
- Java 17/21
- Maven
- Spring / Spring Boot
- GitHub
- Jenkins pipelines
- Secondary
- Python 3.x
- pip / / Poetry
- React
- / NPM
- Cloud & Infrastructure
- AWS (ECS Lambda IAM)
- Docker
- Terraform
- Git
- AI & Automation
- AI-assisted coding (AWS Kiro or similar)
- Familiarity with LLM-driven workflows
- Automation mindset
- Security & Compliance
- SCA tools (Mythos Snyk or similar)
- Vulnerability lifecycle management
- CVSS scoring & risk assessment
- Compliance awareness
- Strong experience with SDLC DevOps and CI/CD pipelines
- Experience managing upgrades at scale across 10 microservices
- Familiarity with Apache Camel or integration-heavy Spring services
- Background in financial services / insurance (regulated environment)
- Experience with OpenSearch or Elasticsearch library upgrades
- Comfort with NestJS/ (some platform tooling uses this)
Required Experience:
IC