DevSecOps Engineer — Public Trust (Hybrid)

Zachary Piper Solutions; Gaithersburg, Northern (MD, KY); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

PTO

Paid holidays

Job summary

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer focused on automated security controls across CI/CD and containerized environments. This hybrid role requires 3 days onsite and 2 days remote, with candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing automated controls, managing SBOMs, vulnerability management in CI/CD, with strong focus on Kubernetes security and

Qualifications

• 4+ years of DevSecOps, cybersecurity, cloud security, or security engineering experience.
• Bachelor's degree in Cybersecurity, CS, IT, or related field.
• Hands-on experience integrating SAST, DAST, SCA, and container scanning into CI/CD pipelines.
• Experience securing Kubernetes environments, including RBAC and network policies, and hardened images.
• Experience with vulnerability tooling such as Nessus, Trivy, Grype, or Qualys and CVE remediation.
• Experience with CI/CD platforms such as GitLab CI, GitHub Actions, Jenkins.
• Scripting skills in Python, Bash, or Go for automation.
• Working knowledge of NIST 800-53 and AWS or Azure cloud security.
• Ability to obtain and maintain a Public Trust clearance.

Responsibilities

• Implement automated security controls across CI/CD pipelines and IaC scanning.
• Manage security gates, artifact signing, provenance verification, and SBOMs.
• Identify and remediate container vulnerabilities while developing hardened/minimal base images.
• Implement Kubernetes security controls including RBAC, network policies, pod security, admission controls, and security contexts.
• Support secrets management, mTLS, service mesh policies, and Linux/container hardening.
• Develop policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or similar.
• Partner with platform and application teams on vulnerability remediation, incident response, and root cause analysis.
• Produce automated security evidence supporting authorization and continuous monitoring requirements.

Skills

DevSecOps

CI/CD security

Kubernetes security

Vulnerability management

Secrets management

Python

Bash

Go

Cloud security

Public Trust eligibility

NIST 800-53

Education

Bachelors in Cybersecurity

Tools

Nessus

Trivy

Grype

Qualys

GitLab CI

GitHub Actions

Jenkins

Job description

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer focused on automated security controls across CI/CD and containerized environments. This hybrid role requires 3 days onsite and 2 days remote, with candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing automated controls, managing SBOMs, vulnerability management in CI/CD, with strong focus on Kubernetes security and