DevSecOps Security Engineer — Cloud & Kubernetes Guardian

Zachary Piper Solutions; Gaithersburg, Northern (MD, KY); Hybrid; USD 87,000 - 157,000; Full time

Benefits offered by this job

PTO

Paid Holidays

Medical

Dental

Vision

401K

Tuition Reimbursement

Sick Leave

Job summary

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a mission-critical air traffic management platform. The role combines hybrid cloud automation, modern DevSecOps practices, and AI-enabled engineering to build and maintain security controls across the software delivery lifecycle in mission-critical environments.

The engineer will implement CI/CD security controls, enforce gates and SBOMs, secure Kubernetes, and develop policy-as-code using OPA/Kyverno.

Qualifications

• 4+ years of experience in DevSecOps, cybersecurity engineering, cloud security, or application security.
• Hands-on experience with CI/CD security tools including SAST, DAST, software composition analysis, container scanning, and vulnerability management solutions.
• Experience securing Kubernetes environments, containerized workloads, secrets management platforms, and cloud infrastructure (AWS and/or Azure).
• Ability to obtain and maintain a Public Trust clearance and meet government background investigation requirements.

Responsibilities

• Implement and maintain automated security controls within CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and IaC security scanning.
• Enforce security gates, artifact signing, provenance verification, and SBOM generation to ensure secure software delivery.
• Secure and harden Kubernetes and containerized environments through RBAC, network policies, admission controls, secrets management, and vulnerability remediation.
• Develop and maintain policy-as-code and infrastructure security guardrails using tools such as OPA/Rego, Kyverno, and cloud-native security solutions.
• Partner with platform, application, and DevOps teams to remediate vulnerabilities, support incident response activities, and generate security evidence for compliance and authorization requirements.

Skills

DevSecOps

cybersecurity engineering

cloud security

application security

CI/CD security

SAST/DAST/ SCA

Education

Bachelor's degree in Cybersecurity or related field

Tools

SAST

DAST

SCA

IaC security (Terraform/CloudFormation)

Kubernetes security

OPA/Rego/Kyverno

Job description

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a mission-critical air traffic management platform. The role combines hybrid cloud automation, modern DevSecOps practices, and AI-enabled engineering to build and maintain security controls across the software delivery lifecycle in mission-critical environments.

The engineer will implement CI/CD security controls, enforce gates and SBOMs, secure Kubernetes, and develop policy-as-code using OPA/Kyverno.