DevSecOps Security Engineer
Listed on 2026-10-16
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Systems Engineer, Cloud Computing: Infrastructure & Operations
Zachary Piper Solutions is seeking a Dev Sec Ops Security Engineer to support a federal government customer in a hybrid work environment (3 days onsite, 2 days remote) within commuting distance of Gaithersburg, MD;
Eagan, MN; or Egg Harbor Township, NJ
. This role focuses on embedding automated security controls throughout the software delivery lifecycle, helping ensure secure, compliant, and efficient application and platform deployments. The Dev Sec Ops Security Engineer will partner with platform and application teams to strengthen security posture, support continuous authorization efforts, and enable secure software delivery at scale.
- Implement and maintain automated security controls within CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and infrastructure-as-code scanning.
- Enforce security gates, artifact signing, provenance verification, and SBOM generation to prevent vulnerable or unverified software deployments.
- Secure and harden Kubernetes and container environments through RBAC, network policies, admission controls, secrets management, mTLS, and Linux/container hardening practices.
- Develop and maintain policy-as-code and infrastructure guardrails using tools such as OPA/Rego, Kyverno, or equivalent technologies.
- Partner with engineering teams to remediate vulnerabilities, produce security evidence for authorization activities, and support incident response, root cause analysis, and continuous monitoring initiatives.
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field + 4 years of relevant experience
- Experience securing CI/CD pipelines with SAST, DAST, software composition analysis, and container scanning technologies.
- Hands-on experience with Kubernetes, container security, and vulnerability remediation processes.
- Experience with Git-based development workflows and CI/CD tools such as Git Lab CI, Git Hub Actions, or Jenkins.
- Experience with security automation using Python, Bash, or Go.
- Knowledge of Hashi Corp Vault or similar secrets-management solutions.
- Working knowledge of NIST 800-53 and AWS and/or Azure security
- Ability to obtain and maintain a Public Trust US government security clearance
- Salary range: $140, (based on experience)
- Comprehensive benefits:
Cigna Medical, Dental, Vision, 401K, PTO, Sick Leave as required by law, and Holidays
This job opens for applications on October 13th, 2026. Applications for this job will be accepted for at least 30 days from the posting date.
/CD, cloud, automation, vulnerability, IAM, NIST, AWS, Azure, Git Lab, Git Hub Actions, Jenkins, Python, Bash, Go, secrets-management, Identity Access Management, vulnerability management
#LI-Hybrid #LI-CB1
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).