Hybrid DevSecOps Engineer: CI/CD & Kubernetes Security

Zachary Piper Solutions; Gaithersburg (MD); Hybrid; USD 140.000 - 150.000; Vollzeit

Zusammenfassung

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government client. The role focuses on automating security controls across CI/CD and containerized environments, with a hybrid schedule (3 days onsite, 2 remote) for candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

The ideal candidate has 4+ years in DevSecOps, experience with SAST/DAST/SCA, Kubernetes security, and policy-as-code with OPA or Kyverno, plus ability to

Qualifikationen

• 4+ years of DevSecOps, cybersecurity, cloud security, or security engineering experience.

Aufgaben

• Implement automated security controls across CI/CD pipelines (SAST/DAST/SCA, container scanning, IaC scanning).
• Manage security gates, artifact signing, provenance verification, and SBOMs (CycloneDX/SPDX).
• Remediate container vulnerabilities and develop hardened base images.
• Implement Kubernetes security controls including RBAC, network policies, pod security, admission controls, and security contexts.
• Support secrets management, mTLS, service mesh policies, and Linux/container hardening.
• Develop policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or similar.
• Partner with platform and application teams on vulnerability remediation, incident response, and root cause analysis.
• Produce automated security evidence supporting authorization and continuous monitoring requirements.

Kenntnisse

DevSecOps experience

Cloud security

Kubernetes security

CI/CD tooling

Secrets management

Scripting (Python/Bash/Go)

NIST 800-53 knowledge

Public Trust eligibility

Ausbildung

Bachelor's degree in Cybersecurity/CS/IT

Tools

Nessus

Trivy

Grype

Qualys

GitLab CI

GitHub Actions

Jenkins

Sigstore/Cosign

Jobbeschreibung

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government client. The role focuses on automating security controls across CI/CD and containerized environments, with a hybrid schedule (3 days onsite, 2 remote) for candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

The ideal candidate has 4+ years in DevSecOps, experience with SAST/DAST/SCA, Kubernetes security, and policy-as-code with OPA or Kyverno, plus ability to