Lead DevSecOps Engineer

Job Id: 0000176126Job Category: Information TechnologyJob Location: Gaithersburg, MarylandSecurity Clearance: No ClearanceBusiness Unit: Zachary PiperPosition Owner: Mark McMullenZachary Piper Solutions is seeking a Lead DevSecOps Engineer to support the design, development, and optimization of secure cloud infrastructure and CI/CD environments in Gaithersburg, MD. The Lead DevSecOps Engineer will build and maintain automated deployment pipelines, Kubernetes environments, infrastructure-as-code, and security tooling while helping improve developer platforms and software delivery processes. This position will be hybrid in Gaithersburg, MD and requires the ability to obtain and maintain a Public Trust clearance!Responsibilities of the Lead DevSecOps Engineer:Design, build, and maintain secure CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions, or similar technologiesBuild, deploy, and support cloud infrastructure within AWS environmentsManage Kubernetes clusters and container orchestration environments supporting enterprise applicationsDevelop and maintain infrastructure-as-code using Terraform or equivalent automation toolsBuild and manage Docker containers and containerized application environmentsAutomate infrastructure, deployment, and operational processes using Python and Bash scriptingIntegrate security scanning and automated security controls throughout the software development lifecycleImplement DevSecOps practices across build, test, deployment, and release processesSupport software supply chain security, including SBOM generation, build provenance, artifact integrity, and dependency managementImplement and support software supply chain security technologies such as Sigstore and SLSAManage artifact repositories and establish secure artifact management and build provenance processesSupport Linux systems administration, troubleshooting, configuration, and performance optimizationSupport networking, load balancing, and service mesh technologies within cloud-native environmentsDevelop and improve internal developer platforms, automation capabilities, and developer experiencePartner with software engineering, cloud, security, and infrastructure teams to improve deployment reliability and securitySupport Agile/SAFe delivery environments and promote DevOps best practices across technical teamsQualifications for the Lead DevSecOps Engineer:Bachelor's degree in Computer Science, Information Technology, or a related discipline with 4+ years of relevant experience; Master's degree with 2+ years of experience; equivalent professional experience may be considered in lieu of a degreeExperience building and maintaining CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions, or similar platformsHands-on experience with AWS cloud environmentsExperience managing Kubernetes clusters and container orchestration platformsStrong experience with Docker and containerization technologiesExperience developing infrastructure-as-code with Terraform or equivalent technologiesStrong Linux systems administration experienceProficiency with Python and/or Bash scripting for automationExperience implementing security scanning tools and DevSecOps practices within CI/CD pipelinesUnderstanding of networking, load balancing, and service mesh conceptsExperience with software supply chain security, including Sigstore, SLSA, SBOM generation, or similar technologiesKnowledge of artifact management systems and build provenance trackingExperience supporting internal developer platforms and developer experience initiativesFamiliarity with Agile/SAFe methodologies and DevOps delivery practicesAbility to obtain and maintain a Public Trust clearanceCompensation for the Lead DevSecOps Engineer includes:Salary: $145,000 - $160,000Comprehensive Benefits Package including Medical, Dental, Vision, 401(k), PTO, and Paid Holidays#LI-MM1 #LI-HYBRIDKeywords: Lead DevSecOps Engineer, DevSecOps Engineer, Senior DevSecOps Engineer, DevOps Engineer, Platform Engineer, Cloud Engineer, AWS, Amazon Web Services, Kubernetes, K8s, Docker, Terraform, Infrastructure as Code, IaC, CI/CD, Continuous Integration, Continuous Deployment, Jenkins, GitLab CI, GitHub Actions, Python, Bash, Linux, Containerization, Container Orchestration, DevSecOps, Security Automation, Security Scanning, Software Supply Chain Security, Sigstore, SLSA, SBOM, Software Bill of Materials, Artifact Management, Build Provenance, Internal Developer Platform, IDP, Developer Experience, Platform Engineering, Service Mesh, Load Balancing, Cloud Native, Agile, SAFe, Public Trust, Gaithersburg MD, Maryland