Hybrid DevSecOps Security Engineer: Secure CI/CD

Zachary Piper Solutions; Gaithersburg (MD); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Comprehensive benefits

401K plan

Paid time off

Job summary

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a federal government customer in a hybrid environment (3 days onsite, 2 days remote) with locations within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

The role focuses on embedding automated security controls across the software delivery lifecycle, strengthening security posture, and enabling secure software delivery at scale.

Qualifications

• Bachelor's degree + 4 years of relevant experience.
• Experience securing CI/CD pipelines with SAST, DAST, software composition analysis and container scanning.
• Hands-on Kubernetes and container security experience with remediation processes.
• Experience with Git-based development workflows and CI/CD tools (GitLab CI, GitHub Actions, Jenkins).
• Security automation using Python, Bash, or Go.
• Knowledge of Vault or similar secrets-management solutions.
• Working knowledge of NIST 800-53 and AWS/Azure security.
• Ability to obtain and maintain a Public Trust US government security clearance.

Responsibilities

• Implement and maintain automated security controls in CI/CD pipelines (SAST, DAST, SCA, container scanning).
• Enforce security gates, artifact signing, provenance verification, SBOM generation.
• Secure and harden Kubernetes and container environments (RBAC, network policies, mTLS, secrets management).
• Develop policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or equivalents.
• Collaborate with engineering to remediate vulnerabilities and support incident response and monitoring.

Skills

CI/CD security

SAST/DAST/CSA

Kubernetes security

Secrets management

Security automation

NIST 800-53

Public Trust clearance

AWS/Azure security

Education

Bachelor's degree in Cybersecurity, CS, IT

Tools

GitLab CI

GitHub Actions

Jenkins

OPA/Rego

Kyverno

HashiCorp Vault

Job description

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a federal government customer in a hybrid environment (3 days onsite, 2 days remote) with locations within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

The role focuses on embedding automated security controls across the software delivery lifecycle, strengthening security posture, and enabling secure software delivery at scale.