DevSecOps Security Engineer - 176412

Piper Companies; Gaithersburg (MD); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental and Vision

401K

Paid time off

Sick leave

Holiday pay

Job summary

Zachary Piper Solutions seeks a DevSecOps Security Engineer to embed automated security controls across the software delivery lifecycle for a federal client in a hybrid setup (3 onsite, 2 remote) near Gaithersburg, MD. You’ll strengthen security posture, support authorization efforts, and enable secure software delivery at scale.

The role requires Kubernetes/security tooling expertise, SAST/DAST, and policy-as-code experience, with a Public Trust clearance potential.

Qualifications

• Bachelor’s degree in cybersecurity, CS, IT or related field with 4+ years of experience.
• Experience securing CI/CD pipelines with SAST/DAST, SCA, container scanning.
• Hands-on with Kubernetes, container security and remediation processes.

Responsibilities

• Implement and maintain automated security controls in CI/CD pipelines (SAST/DAST, SCA, container scanning).
• Enforce gates, artifact signing, SBOM generation and provenance verification.
• Harden Kubernetes/container environments with RBAC, network policies, mTLS and secret management.
• Develop policy-as-code and guardrails using OPA/Rego, Kyverno, or equivalents.
• Collaborate with engineering to remediate vulnerabilities and support security evidence for authorization and monitoring.

Skills

Kubernetes security

CI/CD security

SAST and DAST

Container security

RBAC & network policies

Secret management (Vault)

Policy-as-code (OPA/Rego, Kyverno)

Scripting: Python/Bash/Go

Education

Bachelor's degree in Cybersecurity / CS / IT or related field

Tools

GitLab CI

GitHub Actions

Jenkins

HashiCorp Vault

AWS/Azure security

Job description

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a federal government customer in a hybrid work environment (3 days onsite, 2 days remote) within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ. This role focuses on embedding automated security controls throughout the software delivery lifecycle, helping ensure secure, compliant, and efficient application and platform deployments. The DevSecOps Security Engineer will partner with platform and application teams to strengthen security posture, support continuous authorization efforts, and enable secure software delivery at scale.

Responsibilities of the DevSecOps Security Engineer Include:

• Implement and maintain automated security controls within CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and infrastructure-as-code scanning.
• Enforce security gates, artifact signing, provenance verification, and SBOM generation to prevent vulnerable or unverified software deployments.
• Secure and harden Kubernetes and container environments through RBAC, network policies, admission controls, secrets management, mTLS, and Linux/container hardening practices.
• Develop and maintain policy-as-code and infrastructure guardrails using tools such as OPA/Rego, Kyverno, or equivalent technologies.
• Partner with engineering teams to remediate vulnerabilities, produce security evidence for authorization activities, and support incident response, root cause analysis, and continuous monitoring initiatives.

Qualifications of the DevSecOps Security Engineer Includes:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field + 4 years of relevant experience
• Experience securing CI/CD pipelines with SAST, DAST, software composition analysis, and container scanning technologies.
• Hands-on experience with Kubernetes, container security, and vulnerability remediation processes.
• Experience with Git-based development workflows and CI/CD tools such as GitLab CI, GitHub Actions, or Jenkins.
• Experience with security automation using Python, Bash, or Go.
• Knowledge of HashiCorp Vault or similar secrets-management solutions.
• Working knowledge of NIST 800-53 and AWS and/or Azure security
• Ability to obtain and maintain a Public Trust US government security clearance

Compensation of the DevSecOps Security Engineer Includes:

• Salary range: $140,000 - 150,000 (based on experience)
• Comprehensive benefits: Cigna Medical, Dental, Vision, 401K, PTO, Sick Leave as required by law, and Holidays

This job opens for applications on October 21st, 2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: Kubernetes, clusters, security, DevSecOps, CI/CD, cloud, automation, vulnerability, IAM, NIST, AWS, Azure, GitLab, GitHub Actions, Jenkins, Python, Bash, Go, secrets-management, Identity Access Management, vulnerability management

#LI-Hybrid #LI-CB1