DevSecOps Engineer - Government CI/CD Security (Hybrid)

Piper Companies; Gaithersburg (MD); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

401(k)

Job summary

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer, building and operating automated security controls across CI/CD and containerized environments. This hybrid role requires 3 days onsite and 2 days remote for candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing automated security controls (SAST/DAST/SCA), managing SBOMs, enforcing Kubernetes security, secrets

Qualifications

• 4+ years in DevSecOps, cybersecurity, or cloud security.
• Bachelor's degree in cybersecurity, CS, IT, or related field.
• Hands-on integration of SAST, DAST, SCA and container scanning in CI/CD pipelines.
• Experience securing Kubernetes environments including RBAC, network policies, and hardened images.
• Experience with vulnerability tools such as Nessus/Trivy/Grype/Qualys and CVE remediation.
• Experience with CI/CD platforms like GitLab CI, GitHub Actions, Jenkins.
• Working knowledge of NIST 800-53 and cloud security (AWS/Azure).
• Ability to obtain and maintain a Public Trust clearance.

Responsibilities

• Implement automated security controls across CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and IaC scanning.
• Manage security gates, artifact signing, provenance verification, and SBOMs (CycloneDX/SPDX).
• Identify and remediate container vulnerabilities while developing hardened/minimal base images.
• Implement Kubernetes security controls including RBAC, network policies, pod security, admission controls, and security contexts.
• Support secrets management, mTLS, service mesh policies, and Linux/container hardening.
• Develop policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or similar technologies.
• Partner with platform and application teams on vulnerability remediation, incident response, and root cause analysis.
• Produce automated security evidence supporting authorization and continuous monitoring requirements.

Skills

DevSecOps

SAST/DAST

SCA

Container security

Kubernetes security

RBAC & network policies

Policy as Code

OPA/Rego

Kyverno

Secret management

Python/Bash/Go

CI/CD tools

NIST 800-53

Public Trust clearance

Education

Bachelor's degree in Cybersecurity, CS, IT, or related field

Tools

Nessus

Trivy

Grype

Qualys

GitLab CI

GitHub Actions

Jenkins

Sigstore/Cosign

OpenShift

Docker

Kubernetes

Job description

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer, building and operating automated security controls across CI/CD and containerized environments. This hybrid role requires 3 days onsite and 2 days remote for candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing automated security controls (SAST/DAST/SCA), managing SBOMs, enforcing Kubernetes security, secrets