DevSecOps Security Engineer

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support next-generation air traffic management systems through cloud automation, modern DevSecOps practices, and AI-enabled engineering solutions. The role will build and maintain security controls across the software delivery lifecycle, secure cloud-native environments, and support compliance and operational security in mission-critical systems.

Responsibilities:

• Implement and maintain automated security controls within CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and IaC security scanning
• Enforce security gates, artifact signing, provenance verification, and SBOM generation to ensure secure software delivery
• Secure and harden Kubernetes and containerized environments through RBAC, network policies, admission controls, secrets management, and vulnerability remediation
• Develop and maintain policy-as-code and infrastructure security guardrails using tools such as OPA/Rego, Kyverno, and cloud-native security solutions
• Partner with platform, application, and DevOps teams to remediate vulnerabilities, support incident response activities, and generate security evidence for compliance and authorization requirements

Requirements:

• 4+ years of experience with DevSecOps, cybersecurity engineering, cloud security, or application security
• Hands-on experience with CI/CD security tools including SAST, DAST, software composition analysis, container scanning, and vulnerability management solutions
• Experience securing Kubernetes environments, containerized workloads, secrets management platforms, and cloud infrastructure (AWS and/or Azure)
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent combination of education and experience)
• Ability to obtain and maintain a Public Trust clearance