Remote DevSecOps Engineer (Secret)

Zachary Piper Solutions is seeking a DevSecOps Engineer to support a long-term U.S. Navy program focused on mission-critical platforms that enable network operations. This role is responsible for building and sustaining secure CI/CD pipelines, hardening Kubernetes environments, and automating compliance and security processes.

Responsibilities:

• Design, implement, and maintain automated CI/CD pipelines using GitLab CI to support secure software delivery across Navy and DoD environments
• Build, manage, and harden Kubernetes environments in compliance-driven and restricted network environments
• Automate security processes including SBOM generation, vulnerability scanning, compliance validation, and remediation workflows
• Implement and maintain Infrastructure as Code (IaC) and GitOps practices using tools such as Terraform
• Develop and maintain Helm charts and Kubernetes deployment configurations
• Support Authority to Operate (ATO) activities through automated evidence collection and documentation-as-code practices
• Collaborate with software engineers, systems engineers, and cybersecurity teams to integrate security requirements throughout the development lifecycle
• Maintain deployment infrastructure across cloud, disconnected, and air-gapped environments
• Establish standards for container security, secrets management, deployment automation, and operational consistency
• Develop and maintain runbooks, architecture documentation, and deployment guides as version-controlled artifacts
• Contribute to application development efforts when needed while applying secure software development practices
• Utilize AI-assisted engineering tools to accelerate development, remediation, documentation, and operational workflows

Requirements:

• Bachelor's degree and 4+ years of DevSecOps, DevOps, or platform engineering experience
• Experience designing and maintaining CI/CD pipelines using GitLab CI
• Strong Kubernetes administration experience, including secure deployments and cluster hardening
• Experience supporting DISA STIG compliance in Linux-based environments
• Strong experience with Terraform and Infrastructure as Code methodologies
• Experience managing containerized environments using Kubernetes and Helm
• Experience with automated vulnerability scanning, SBOM generation, and CVE remediation
• Proficiency in Python and/or Bash scripting
• Experience working within secure government or compliance-driven environments
• Ability to work independently and manage competing priorities within a fast-paced engineering team
• Active Secret security clearance required
• Experience supporting air-gapped, disconnected, or classified environments
• Active Security+ CE or equivalent DoD 8570/8140 IAT Level II certification
• Experience supporting RMF or ATO processes through automation and compliance documentation
• Experience with RKE2 or K3S Kubernetes distributions
• Experience with secrets management tools such as Vault, SOPS, or Sealed Secrets
• Familiarity with observability tools such as Prometheus and Grafana
• Certified Kubernetes Administrator (CKA) certification or willingness to obtain
• Experience applying 'everything as code' principles including policy-as-code, configuration-as-code, and documentation-as-code