DevSecOps Engineer (Active Secret Clearance Required)

Zachary Piper Solutions is seeking a DevSecOps Engineer to support a cutting-edge defense technology program developing secure software solutions for the DOD. This DevSecOps Engineer will play a critical role in designing and maintaining the secure delivery infrastructure that enables software to move rapidly from development to deployment while meeting stringent cybersecurity and compliance requirements. The ideal candidate brings a strong background in Kubernetes, GitLab CI/CD, Infrastructure as Code, and DevSecOps practices within secure, compliance-driven environments.

Responsibilities of the DevSecOps Engineer include:

• Design, implement, and maintain automated GitLab CI/CD pipelines that support software delivery from development through security validation and deployment.
• Build, administer, and harden Kubernetes environments (RKE2/K3S preferred) in accordance with DISA STIG requirements.
• Automate security processes including SBOM generation, vulnerability scanning, CVE remediation, and continuous compliance validation.
• Develop and maintain Infrastructure as Code (Terraform) and GitOps workflows to standardize infrastructure deployments.
• Author and maintain Helm charts for Kubernetes application deployment and lifecycle management.
• Leverage AI-powered engineering tools to accelerate pipeline development, vulnerability remediation, documentation, and operational workflows.
• Collaborate closely with software engineers, systems engineers, and Information System Security Engineers (ISSEs) to integrate security throughout the software development lifecycle.
• Maintain deployment infrastructure across cloud, classified, and air-gapped environments.
• Support Authority to Operate (ATO) efforts through automated evidence collection, documentation-as-code, and compliance automation.
• Establish best practices for container security, secrets management, deployment consistency, and pipeline governance.
• Contribute to application feature development when needed, applying secure software development principles.
• Create and maintain version-controlled operational documentation, deployment guides, architecture diagrams, and runbooks.

Qualifications of the DevSecOps Engineer include:

• Bachelor's degree with 4+ years of professional DevSecOps or DevOps engineering experience.
• Hands-on experience designing and maintaining CI/CD pipelines using GitLab CI (additional pipeline platforms are a plus).
• Strong Kubernetes administration experience, preferably with RKE2 or K3S clusters.
• Experience implementing DISA STIG compliance within Kubernetes and Linux (RHEL/Rocky Linux) environments.
• Proficiency with Infrastructure as Code, particularly Terraform.
• Experience developing and maintaining Helm charts.
• Experience with automated security scanning, SBOM generation, vulnerability management, and CVE remediation.
• Scripting experience with Python and/or Bash.
• Demonstrated experience using AI tools (e.g., Copilot, ChatGPT, Cursor) to improve engineering productivity.
• Experience supporting both infrastructure engineering and application development.
• Ability to independently prioritize work within a fast-paced engineering environment.
• Active Secret Security Clearance required.

Preferred Qualifications include:

• Experience supporting deployments in air-gapped or disconnected environments.
• Experience supporting RMF/ATO processes through automation and compliance documentation.
• Security+ or equivalent IAT Level II certification.
• Experience with secrets management solutions such as HashiCorp Vault, Sealed Secrets, or SOPS.
• Familiarity with Prometheus, Grafana, or similar observability platforms.
• Certified Kubernetes Administrator (CKA) certification or willingness to obtain.
• Experience implementing GitOps, Policy-as-Code, Configuration-as-Code, Documentation-as-Code, or other modern automation practices.

Compensation for the Software Engineer includes:

• Salary: $95,000-$100,000 **depending on experience**
• Benefits: Medical, Dental, Vision, 401k Plan, Holidays, PTO, sick leave as required by law

Keywords: DevSecOps, DevOps, GitLab CI/CD, Kubernetes, RKE2, K3S, Docker, Terraform, Helm, GitOps, Infrastructure as Code, Python, Bash, Linux, RHEL, Rocky Linux, DISA STIG, RMF, ATO, SBOM, CVE, Container Security, Vault, Sealed Secrets, SOPS, Prometheus, Grafana, AI Engineering, Security Automation, Secret Clearance

#LI-SW1 #LI-ONSITE