Hybrid DevSecOps Engineer: Secure CI/CD & Kubernetes

Zachary Piper, LLC; Eagan (MN); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k)

PTO

Paid Holidays

Job summary

Zachary Piper Solutions seeks a DevSecOps Security Engineer to support a government client, focusing on automated security controls across modern CI/CD and containerized environments. Hybrid role with 3 days onsite and 2 days remote, located near Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing automated security controls, managing SBOMs, and hardening container and Kubernetes security.

Qualifications

• 4+ years of DevSecOps, cybersecurity, cloud security, or security engineering experience.
• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field; additional relevant experience may be considered.
• Hands-on experience integrating SAST, DAST, SCA, and container scanning into CI/CD pipelines.
• Experience securing Kubernetes and containerized environments, including RBAC, network policies, and hardened images.
• Experience with vulnerability management tools such as Nessus, Trivy, Grype, or Qualys and CVE remediation.
• Experience with GitLab CI, GitHub Actions, Jenkins, or similar CI/CD platforms.
• Experience with secrets management and automation using Python, Bash, or Go.
• Working knowledge of NIST 800-53 and AWS or Azure cloud security.
• Ability to obtain and maintain a Public Trust and meet government background investigation requirements.

Responsibilities

• Implement automated security controls across CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and IaC scanning.
• Manage security gates, artifact signing, provenance verification, and SBOMs (CycloneDX/SPDX).
• Identify and remediate container vulnerabilities while developing hardened/minimal base images.
• Implement Kubernetes security controls including RBAC, network policies, pod security, admission controls, and security contexts.
• Support secrets management, mTLS, service mesh policies, and Linux/container hardening.
• Develop policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or similar technologies.
• Partner with platform and application teams on vulnerability remediation, incident response, and root cause analysis.
• Produce automated security evidence supporting authorization and continuous monitoring requirements.

Skills

CI/CD integration

Kubernetes security

Vulnerability management tools

Scripting (Python, Bash, Go)

Cloud security

Public Trust eligibility

DevSecOps experience

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, or related field

Tools

Nessus

Trivy

Grype

Qualys

GitLab CI

GitHub Actions

Jenkins

Job description

Zachary Piper Solutions seeks a DevSecOps Security Engineer to support a government client, focusing on automated security controls across modern CI/CD and containerized environments. Hybrid role with 3 days onsite and 2 days remote, located near Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing automated security controls, managing SBOMs, and hardening container and Kubernetes security.