Hybrid DevSecOps Engineer: Secure CI/CD & Kubernetes

Piper Companies; Eagan (MN); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k)

PTO

Paid Holidays

Job summary

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer focused on automated security controls across CI/CD and containerized environments. This hybrid role requires 3 days onsite and 2 days remote for candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing automated security controls, managing SBOMs, and securing Kubernetes environments with RBAC and network policies.

Qualifications

• 4+ years in DevSecOps, cybersecurity, cloud security, or security engineering.
• Bachelor’s degree in Cybersecurity, CS, IT, or related field.
• Hands-on with SAST/DAST/SCA in CI/CD pipelines.
• Experience securing Kubernetes environments and hardened images.
• Familiarity with vulnerability tools (Nessus/Trivy/Grype/Qualys) and CVE remediation.
• Experience with GitLab CI, GitHub Actions, Jenkins.

Responsibilities

• Implement automated security controls across CI/CD pipelines, including SAST, DAST, SCA, container and IaC scanning.
• Manage security gates, artifact signing, provenance verification, and SBOMs.
• Identify and remediate container vulnerabilities; develop hardened base images.
• Implement Kubernetes security controls: RBAC, network policies, pod security, admission controls, security contexts.
• Support secrets management, mTLS, service mesh policies, and Linux/container hardening.
• Develop policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or similar.
• Partner with platform/application teams on vulnerability remediation and incident response.
• Produce automated security evidence supporting authorization and continuous monitoring.

Skills

CI/CD security

SAST

DAST

SCA

Container scanning

IaC scanning

Kubernetes security

RBAC

Network policies

Pod security

Security contexts

Admission control

Secrets management

mTLS

Service mesh

OPA/Rego

Kyverno

Python

Bash

Go

NIST 800-53

AWS/Azure security

CVE remediation

GitLab CI

GitHub Actions

Jenkins

Education

Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field

Tools

Nessus

Trivy

Grype

Qualys

GitLab CI

GitHub Actions

Jenkins

Kubernetes

OpenShift

Cosign

Sigstore

SLSA

Terraform

CloudFormation

Python

Bash

Go

Job description

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer focused on automated security controls across CI/CD and containerized environments. This hybrid role requires 3 days onsite and 2 days remote for candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing automated security controls, managing SBOMs, and securing Kubernetes environments with RBAC and network policies.