Hybrid DevSecOps Engineer - CI/CD Security & Kubernetes

Zachary Piper Solutions; Gaithersburg (MD); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k)

PTO

Paid Holidays

Job summary

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer focusing on automated security controls across CI/CD and containerized environments. This is a hybrid role with 3 days onsite and 2 days remote, open to candidates near Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing automated security controls, managing SBOMs, securing Kubernetes, and partnering with teams on vulnerability remediation and incident

Qualifications

• 4+ years of DevSecOps, cybersecurity, cloud security, or security engineering experience.
• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field; additional relevant experience may be considered.

Responsibilities

• Implement automated security controls across CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and IaC scanning.
• Manage security gates, artifact signing, provenance verification, and SBOMs (CycloneDX/SPDX).
• Identify and remediate container vulnerabilities while developing hardened/minimal base images.
• Implement Kubernetes security controls including RBAC, network policies, pod security, admission controls, and security contexts.
• Support secrets management, mTLS, service mesh policies, and Linux/container hardening.
• Develop policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or similar technologies.
• Partner with platform and application teams on vulnerability remediation, incident response, and root cause analysis.
• Produce automated security evidence supporting authorization and continuous monitoring requirements.

Skills

DevSecOps

Cybersecurity

Cloud security

Security engineering

CI/CD security

Kubernetes security

Vulnerability management

SAST/DAST/SCA

RBAC

Scripting: Python/Bash/Go

NIST 800-53

Public Trust

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Nessus

Trivy

Grype

Qualys

GitLab CI

GitHub Actions

Jenkins

Job description

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer focusing on automated security controls across CI/CD and containerized environments. This is a hybrid role with 3 days onsite and 2 days remote, open to candidates near Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing automated security controls, managing SBOMs, securing Kubernetes, and partnering with teams on vulnerability remediation and incident