Hybrid DevSecOps Security Engineer: Secure CI/CD & K8s

Zachary Piper, LLC; Gaithersburg (MD); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Health benefits package

401K

PTO & Holidays

Job summary

Zachary Piper Solutions seeks a DevSecOps Security Engineer to support a federal government customer in a hybrid role (3 days onsite, 2 days remote) within commuting distance of Gaithersburg, MD. You will embed automated security controls across the software delivery lifecycle and collaborate with platform teams to strengthen security.

Required are a bachelor’s degree and 4+ years of experience in secure CI/CD, Kubernetes, and vault-based secrets management, plus ability to obtain Public Trust

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field plus 4 years of relevant experience.
• Experience securing CI/CD pipelines with SAST, DAST, software composition analysis, and container scanning technologies.
• Hands-on experience with Kubernetes, container security, and vulnerability remediation processes.
• Experience with Git-based development workflows and CI/CD tools such as GitLab CI, GitHub Actions, or Jenkins.
• Experience with security automation using Python, Bash, or Go.
• Knowledge of HashiCorp Vault or similar secrets-management solutions.
• Working knowledge of NIST 800-53 and AWS and/or Azure security.
• Ability to obtain and maintain a Public Trust US government security clearance

Responsibilities

• Implement and maintain automated security controls within CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and IaC scanning.
• Enforce security gates, artifact signing, provenance verification, and SBOM generation to prevent vulnerable or unverified software deployments.
• Secure and harden Kubernetes and container environments through RBAC, network policies, admission controls, secrets management, mTLS, and Linux/container hardening practices.
• Develop and maintain policy-as-code and infrastructure guardrails using tools such as OPA/Rego, Kyverno, or equivalent technologies.
• Partner with engineering teams to remediate vulnerabilities, produce security evidence for authorization activities, and support incident response, root cause analysis, and continuous monitoring initiatives.

Skills

CI/CD security

Kubernetes security

Git-based workflows

Security automation (Python/Bash/Go)

Secrets management (Vault)

Cloud security (AWS/Azure)

Public Trust clearance

Vulnerability remediation

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

GitLab CI

GitHub Actions

Jenkins

Kubernetes

Python

Go

Bash

HashiCorp Vault

AWS

Azure

Job description

Zachary Piper Solutions seeks a DevSecOps Security Engineer to support a federal government customer in a hybrid role (3 days onsite, 2 days remote) within commuting distance of Gaithersburg, MD. You will embed automated security controls across the software delivery lifecycle and collaborate with platform teams to strengthen security.

Required are a bachelor’s degree and 4+ years of experience in secure CI/CD, Kubernetes, and vault-based secrets management, plus ability to obtain Public Trust