Hybrid DevSecOps Engineer: Secure CI/CD & Kubernetes

Piper Companies; Gaithersburg (MD); Hybride; USD 140 000 - 150 000; Plein temps

Avantages offerts par ce poste

Health insurance

Dental and Vision

401K

Paid time off

Sick leave

Holiday pay

Résumé du poste

Zachary Piper Solutions seeks a DevSecOps Security Engineer to embed automated security controls across the software delivery lifecycle for a federal client in a hybrid setup (3 onsite, 2 remote) near Gaithersburg, MD. You’ll strengthen security posture, support authorization efforts, and enable secure software delivery at scale.

The role requires Kubernetes/security tooling expertise, SAST/DAST, and policy-as-code experience, with a Public Trust clearance potential.

Qualifications

• Bachelor’s degree in cybersecurity, CS, IT or related field with 4+ years of experience.
• Experience securing CI/CD pipelines with SAST/DAST, SCA, container scanning.
• Hands-on with Kubernetes, container security and remediation processes.

Responsabilités

• Implement and maintain automated security controls in CI/CD pipelines (SAST/DAST, SCA, container scanning).
• Enforce gates, artifact signing, SBOM generation and provenance verification.
• Harden Kubernetes/container environments with RBAC, network policies, mTLS and secret management.
• Develop policy-as-code and guardrails using OPA/Rego, Kyverno, or equivalents.
• Collaborate with engineering to remediate vulnerabilities and support security evidence for authorization and monitoring.

Connaissances

Kubernetes security

CI/CD security

SAST and DAST

Container security

RBAC & network policies

Secret management (Vault)

Policy-as-code (OPA/Rego, Kyverno)

Scripting: Python/Bash/Go

Formation

Bachelor's degree in Cybersecurity / CS / IT or related field

Outils

GitLab CI

GitHub Actions

Jenkins

HashiCorp Vault

AWS/Azure security

Description du poste

Zachary Piper Solutions seeks a DevSecOps Security Engineer to embed automated security controls across the software delivery lifecycle for a federal client in a hybrid setup (3 onsite, 2 remote) near Gaithersburg, MD. You’ll strengthen security posture, support authorization efforts, and enable secure software delivery at scale.

The role requires Kubernetes/security tooling expertise, SAST/DAST, and policy-as-code experience, with a Public Trust clearance potential.