Platform Security Engineer (DevSecOps) for Federal CI/CD

ZipStaff Inc.; McLean (VA); On-site; USD 96,000 - 165,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

401(k) + 401(k) matching

Paid time off

Referral Program

Job summary

ZipStaff is hiring a Platform Security Engineer (DevSecOps) in McLean, VA. This W2 contract role focuses on integrating and hardening security across software delivery pipelines for mission-critical federal defense systems, aligning with DoW cybersecurity mandates.

You will drive continuous improvement of the CI/CD ecosystem, implement policy-as-code, and support risk assessments and ATO processes while collaborating with development, operations and security teams to uphold zero trust across the

Qualifications

• 5+ years of cybersecurity engineering, including DevSecOps in federal or defense environments (IaC/CaC, CI/CD, SDLC).
• 3+ years of software engineering with Python, TypeScript or Bash and automation frameworks.
• 2+ years implementing cybersecurity solutions in AWS and container orchestration such as Kubernetes.
• Experience with AI software development tools such as Claude Code or Codex.
• Experience with Agile and Change Management methodologies.
• Knowledge of NIST SP 800-53, RMF, eMASS, STIG Manager/Viewer and SCAP tools, plus AI/ML security best practices.
• Ability to obtain a Secret clearance.
• HS diploma or GED.

Responsibilities

• Evolve secure CI/CD pipelines by integrating and automating SAST, DAST, SCA and container scanning tools.
• Tune scanners, refine vulnerability thresholds, reduce false positives and optimize remediation workflows.
• Harden IaC templates (Terraform) and enforce policy-as-code across environments.
• Conduct risk assessments and contribute to SSPs and continuous ATO efforts.
• Collaborate with development, operations and security teams; monitor pipelines and support incident response.
• Champion zero trust principles across the SDLC.

Skills

Cybersecurity engineering

DevSecOps

Python

TypeScript

Bash

AWS

Kubernetes

AI tools (Claude/Codex)

Agile methodologies

Change management

Education

HS diploma or GED

Tools

Terraform

eMASS

STIG Manager/Viewer

SCAP tools

Job description

ZipStaff is hiring a Platform Security Engineer (DevSecOps) in McLean, VA. This W2 contract role focuses on integrating and hardening security across software delivery pipelines for mission-critical federal defense systems, aligning with DoW cybersecurity mandates.

You will drive continuous improvement of the CI/CD ecosystem, implement policy-as-code, and support risk assessments and ATO processes while collaborating with development, operations and security teams to uphold zero trust across the