Hybrid Cloud DevSecOps Security Engineer — Remote-Eligible

Piper Companies

Gaithersburg (MD)

Hybrid

USD 87,000 - 157,000

Full time

4 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Zachary Piper Solutions seeks a DevSecOps Security Engineer to support next‑gen air traffic management systems via a hybrid cloud automation platform and AI‑enabled engineering. The role spans hybrid work in Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ, with remote work possible for qualified candidates outside commutable areas.

You will secure and automate security across the software delivery lifecycle.

Qualifications

4+ years of experience in DevSecOps, cybersecurity engineering, cloud security, or application security.
Hands‑on experience with SAST, DAST, software composition analysis, container scanning, and vulnerability management solutions.
Experience securing Kubernetes environments, containerized workloads, secrets management platforms, and cloud infrastructure (AWS and/or Azure).
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent).
Ability to obtain and maintain a Public Trust clearance and meet government background requirements.

Responsibilities

Implement and maintain automated security controls within CI/CD pipelines, including SAST, DAST, SCA, container scanning, and IaC security scanning.
Enforce security gates, artifact signing, provenance verification, and SBOM generation to ensure secure software delivery.
Secure and harden Kubernetes and containerized environments through RBAC, network policies, admission controls, secrets management, and vulnerability remediation.
Develop and maintain policy-as-code and infrastructure security guardrails using OPA/Rego, Kyverno, and cloud-native security solutions.
Partner with platform, application, and DevOps teams to remediate vulnerabilities, support incident response, and generate security evidence for compliance.