Hybrid DevSecOps Engineer - Cloud & Kubernetes Security

ZP Group; Gaithersburg (MD); Hybrid; USD 140,000 - 150,000; Full time

Job summary

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer focusing on automated security controls across modern CI/CD and containerized environments. This hybrid role requires three days onsite and two days remote for candidates within commuting distance of Gaithersburg, MD, Eagan, MN, or Egg Harbor Township, NJ.

You will implement automated security controls, manage SBOMs and provenance, and strengthen Kubernetes and container security while collaborating

Qualifications

• 4+ years of DevSecOps, cybersecurity, cloud security, or security engineering experience.
• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field.
• Hands-on experience integrating SAST, DAST, SCA into CI/CD pipelines.
• Experience securing Kubernetes and containerized environments, including RBAC and network policies.
• Experience with vulnerability tools (Nessus, Trivy, Grype, Qualys) and CVE remediation.
• Experience with GitLab CI, GitHub Actions, Jenkins, or similar CI/CD platforms.
• Experience with secrets management and automation using Python, Bash, or Go.
• Working knowledge of NIST 800-53 and AWS or Azure security.
• Ability to obtain and maintain a Public Trust.

Responsibilities

• Implement automated security controls across CI/CD pipelines (SAST, DAST, SCA).
• Manage security gates, artifact signing, provenance verification, and SBOMs.
• Identify and remediate container vulnerabilities and harden base images.
• Implement Kubernetes security controls including RBAC, network policies, pod security.
• Support secrets management, mTLS, service mesh policies, and Linux/container hardening.
• Develop policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno.
• Partner with platform and application teams on vulnerability remediation and incident response.
• Produce automated security evidence supporting authorization and continuous monitoring.

Skills

CI/CD security

Kubernetes security

Vulnerability management

Secrets management

Policy as code

Cloud security

Public Trust eligibility

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

GitLab CI

GitHub Actions

Jenkins

Nessus

Trivy

Grype

Qualys

Kubernetes

Docker

OPA/Rego

Job description

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer focusing on automated security controls across modern CI/CD and containerized environments. This hybrid role requires three days onsite and two days remote for candidates within commuting distance of Gaithersburg, MD, Eagan, MN, or Egg Harbor Township, NJ.

You will implement automated security controls, manage SBOMs and provenance, and strengthen Kubernetes and container security while collaborating