Hybrid DevSecOps Engineer: Secure CI/CD & Kubernetes

Piper Companies; Gaithersburg (MD); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k)

PTO & Paid Holidays

Job summary

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer, focusing on automated security controls across CI/CD and containerized environments. This hybrid role requires 3 days onsite and 2 days remote for candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing security controls across pipelines, managing SBOMs, securing Kubernetes, and building policy-as-code guardrails while

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field.
• 4+ years in DevSecOps or security engineering.
• Hands-on experience integrating SAST, DAST, SCA into CI/CD pipelines.
• Experience securing Kubernetes and containerized environments (RBAC, network policies, hardening).
• Experience with vulnerability management tools (Nessus, Trivy, Grype, Qualys) and CVE remediation.
• Experience with CI/CD platforms (GitLab CI, GitHub Actions, Jenkins).
• Experience with secrets management and automation using Python, Bash, or Go.
• Working knowledge of NIST 800-53 and AWS or Azure cloud security.
• Ability to obtain and maintain a Public Trust.

Responsibilities

• Implement automated security controls across CI/CD pipelines (SAST, DAST, SCA, container scanning).
• Manage security gates, artifact signing, provenance verification, and SBOMs (CycloneDX/SPDX).
• Identify and remediate container vulnerabilities and harden base images.
• Implement Kubernetes security controls (RBAC, network policies, pod security).
• Support secrets management, mTLS, service mesh policies, and Linux/container hardening.
• Develop policy-as-code and infrastructure guardrails (OPA/Rego, Kyverno).
• Collaborate with platform/application teams on vulnerability remediation and incident response.
• Produce automated security evidence for authorization and continuous monitoring.

Skills

DevSecOps

Cloud Security

CI/CD Security

Kubernetes Security

Policy as Code

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Nessus

Trivy

Grype

Qualys

GitLab CI

GitHub Actions

Jenkins

Kubernetes

Job description

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer, focusing on automated security controls across CI/CD and containerized environments. This hybrid role requires 3 days onsite and 2 days remote for candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

Responsibilities include implementing security controls across pipelines, managing SBOMs, securing Kubernetes, and building policy-as-code guardrails while