Hybrid DevSecOps Engineer — Cloud & Container Security

Zachary Piper, LLC; Gaithersburg (MD); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k)

PTO

Paid Holidays

Job summary

Zachary Piper Solutions seeks a DevSecOps Security Engineer to support a government client, focused on automated security controls across CI/CD in hybrid on-site/remote environments for Gaithersburg, MD, plus other U.S. locations.

The role requires 4+ years in DevSecOps or security engineering, experience with Kubernetes security, and vulnerability management tools. Posted compensation reflects strong market rates; comprehensive benefits included.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field.
• Hands-on experience integrating SAST, DAST, SCA, and container scanning into CI/CD pipelines.
• Experience securing Kubernetes and containerized environments with RBAC and network policies.

Responsibilities

• Implement automated security controls across CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and IaC scanning.
• Manage security gates, artifact signing, provenance verification, and SBOMs (CycloneDX/SPDX).
• Identify and remediate container vulnerabilities while developing hardened/minimal base images.
• Implement Kubernetes security controls including RBAC, network policies, pod security, admission controls, and security contexts.
• Support secrets management, mTLS, service mesh policies, and Linux/container hardening.
• Develop policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or similar technologies.
• Partner with platform and application teams on vulnerability remediation, incident response, and root cause analysis.
• Produce automated security evidence supporting authorization and continuous monitoring requirements.

Skills

DevSecOps

Cybersecurity

Cloud security

Security engineering

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Nessus

Trivy

Grype

Qualys

GitLab CI

GitHub Actions

Jenkins

Job description

Zachary Piper Solutions seeks a DevSecOps Security Engineer to support a government client, focused on automated security controls across CI/CD in hybrid on-site/remote environments for Gaithersburg, MD, plus other U.S. locations.

The role requires 4+ years in DevSecOps or security engineering, experience with Kubernetes security, and vulnerability management tools. Posted compensation reflects strong market rates; comprehensive benefits included.