Lead DevSecOps Engineer

Zachary Piper Solutions is seeking a Lead DevSecOps Engineer to support the design, development, and optimization of secure cloud infrastructure and CI/CD environments in Gaithersburg, MD. The Lead DevSecOps Engineer will build and maintain automated deployment pipelines, Kubernetes environments, infrastructure-as-code, and security tooling while helping improve developer platforms and software delivery processes. This position will be hybrid in Gaithersburg, MD and requires the ability to obtain and maintain a Public Trust clearance!

Responsibilities of the Lead DevSecOps Engineer:

• Design, build, and maintain secure CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions, or similar technologies
• Build, deploy, and support cloud infrastructure within AWS environments
• Manage Kubernetes clusters and container orchestration environments supporting enterprise applications
• Develop and maintain infrastructure-as-code using Terraform or equivalent automation tools
• Build and manage Docker containers and containerized application environments
• Automate infrastructure, deployment, and operational processes using Python and Bash scripting
• Integrate security scanning and automated security controls throughout the software development lifecycle
• Implement DevSecOps practices across build, test, deployment, and release processes
• Support software supply chain security, including SBOM generation, build provenance, artifact integrity, and dependency management
• Implement and support software supply chain security technologies such as Sigstore and SLSA
• Manage artifact repositories and establish secure artifact management and build provenance processes
• Support Linux systems administration, troubleshooting, configuration, and performance optimization
• Support networking, load balancing, and service mesh technologies within cloud-native environments
• Develop and improve internal developer platforms, automation capabilities, and developer experience
• Partner with software engineering, cloud, security, and infrastructure teams to improve deployment reliability and security
• Support Agile/SAFe delivery environments and promote DevOps best practices across technical teams

Qualifications for the Lead DevSecOps Engineer:

• Bachelor's degree in Computer Science, Information Technology, or a related discipline with 4+ years of relevant experience; Master's degree with 2+ years of experience; equivalent professional experience may be considered in lieu of a degree
• Experience building and maintaining CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions, or similar platforms
• Hands-on experience with AWS cloud environments
• Experience managing Kubernetes clusters and container orchestration platforms
• Strong experience with Docker and containerization technologies
• Experience developing infrastructure-as-code with Terraform or equivalent technologies
• Strong Linux systems administration experience
• Proficiency with Python and/or Bash scripting for automation
• Experience implementing security scanning tools and DevSecOps practices within CI/CD pipelines
• Understanding of networking, load balancing, and service mesh concepts
• Experience with software supply chain security, including Sigstore, SLSA, SBOM generation, or similar technologies
• Knowledge of artifact management systems and build provenance tracking
• Experience supporting internal developer platforms and developer experience initiatives
• Familiarity with Agile/SAFe methodologies and DevOps delivery practices
• Ability to obtain and maintain a Public Trust clearance

Compensation for the Lead DevSecOps Engineer includes:

• Salary: $145,000 - $155,000
• Comprehensive Benefits Package including Medical, Dental, Vision, 401(k), PTO, and Paid Holidays

#LI-MM1 #LI-HYBRID

Keywords: Lead DevSecOps Engineer, DevSecOps Engineer, Senior DevSecOps Engineer, DevOps Engineer, Platform Engineer, Cloud Engineer, AWS, Amazon Web Services, Kubernetes, K8s, Docker, Terraform, Infrastructure as Code, IaC, CI/CD, Continuous Integration, Continuous Deployment, Jenkins, GitLab CI, GitHub Actions, Python, Bash, Linux, Containerization, Container Orchestration, DevSecOps, Security Automation, Security Scanning, Software Supply Chain Security, Sigstore, SLSA, SBOM, Software Bill of Materials, Artifact Management, Build Provenance, Internal Developer Platform, IDP, Developer Experience, Platform Engineering, Service Mesh, Load Balancing, Cloud Native, Agile, SAFe, Public Trust, Gaithersburg MD, Maryland