DevSecOps Engineer - Vulnerability Management Location: United States Job Description: Piper Companies is seeking a DevSecOps Engineer (Vulnerability Management) to join a leading government-focused technology organization. This DevSecOps Engineer (Vulnerability Management) role is ideal for a candidate with a strong DevSecOps mindset and hands-on expertise in AWS GovCloud, Kubernetes (EKS), and modern web applications built with React and NodeJS. The DevSecOps Engineer (Vulnerability Management) role is a long term open ended contract opportunity and allows you to work remote in EST time zone. Responsibilities of the DevSecOps Engineer (Vulnerability Management): - Analyze and triage vulnerability findings, prioritizing remediation based on risk, exploitability, and operational impact. - Partner with engineering teams to remediate vulnerabilities through patching, configuration updates, and secure coding practices across React and NodeJS applications. - Manage and improve container and Kubernetes (EKS) security, including image scanning, RBAC, and workload hardening. - Ensure remediation efforts align with compliance standards such as FedRAMP and NIST 800-53 within AWS GovCloud. - Develop automation to streamline vulnerability remediation and support incident response investigations when needed. Requirements of the DevSecOps Engineer (Vulnerability Management): - Hands-on experience in AWS GovCloud with a strong understanding of cloud security and compliance requirements. - Strong expertise in Kubernetes security (EKS), including RBAC, network policies, and container security best practices. - Experience remediating vulnerabilities in JavaScript-based applications, specifically React and NodeJS. - Familiarity with vulnerability management tools such as Tenable, Qualys, Aqua, or similar platforms. - Ability to communicate security findings clearly and translate them into actionable remediation tasks. Compensation for the DevSecOps Engineer (Vulnerability Management): - $120,000 - $140,000 - Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law. Keywords: Vulnerability management, remediation engineering, DevSecOps, AWS GovCloud, Kubernetes, EKS security, React, NodeJS, FedRAMP, NIST 800-53, container security, vulnerability scanning, CI/CD security, Terraform, CloudFormation, security automation, Tenable, Qualys, Aqua, incident response #LI-AG1 #REMOTE

• Implementar y optimizar controles de seguridad en pipelines CI/CD • Integrar herramientas SAST, SCA, Secret Detection y Container Scanning • Analizar y priorizar vulnerabilidades según riesgo e impacto • Acompañar a equipos de desarrollo en procesos de remediación • Aplicar hardening en contenedores, servidores y plataformas cloud • Construir dashboards y métricas de seguridad para la toma de decisiones • Participar en iniciativas de automatización y mejora continua • Crear documentación y buenas prácticas para equipos de ingeniería

Role Description - Lead the DevOps/platform squad; own Definition of Done/Ready; track velocity and flag risks. - Own and evolve CI/CD pipelines; implement blue/green, canary, and feature-flag progressive delivery. - Manage AKS clusters: node pool sizing, upgrades, namespace isolation, network policies, cost optimisation. - Author and maintain Terraform modules for all Azure infrastructure; enforce IaC review and state lock. - Design and operate observability stack: Prometheus, per-squad Grafana dashboards, distributed tracing. - Manage Kafka clusters and Azure Service Bus; drive pipeline security automation (SAST, scanning, secrets). - Maintain Elasticsearch cluster health; tune ILM policies for 52M+ invoice documents. - Lead on-call rotation; own post-incident reviews; mentor DevOps engineers and run knowledge-sharing sessions. - Coordinate with software delivery squads on platform enablement and pipeline improvements. Qualifications - 8+ yrs DevOps / Platform Engineering / SRE; 2+ yrs in a team lead or tech lead role. - Expert Kubernetes (CKA or equivalent) and Helm; strong Terraform on Azure or AWS. - Production Kafka operations and Elasticsearch cluster management. - CI/CD pipeline design (Jenkins / GitLab CI / GitHub Actions) and GitOps (ArgoCD or Flux). - Python for operational automation; FCA/PCI-DSS cloud security understanding essential. - Fintech or financial services background advantageous; Azure certs (AZ-104, AZ-400, CKA) a plus. - Nice to have: RabbitMQ; Groovy pipeline scripting; GitHub Actions. Requirements - Technical Leadership: Platform squad oversight; sprint task definition; infrastructure architectural decisions. - Containers & Orchestration: Docker; Kubernetes/AKS (RBAC, HPA/KEDA, PDB); Helm (chart authoring, library charts). - IaC: Terraform (Azure — AKS, PostgreSQL, Service Bus, Key Vault, APIM); Atlantis/Terraform Cloud. - CI/CD & GitOps: Jenkins, GitLab CI, GitHub Actions; ArgoCD/Flux; Trivy, Checkov, OWASP dep-check. - Cloud & Observability: Azure AKS/Service Bus/Monitor; Prometheus + Grafana; OpenTelemetry; ELK/OpenSearch. - Messaging & Security: Kafka; RabbitMQ; Azure Key Vault / HashiCorp Vault; mTLS; Trivy/Snyk; FCA/PCI-DSS. - Scripting: Python, Bash, Groovy — pipelines, runbooks, automated incident response. - People: Mentoring/line management of 3–6 DevOps engineers; 1:1s, onboarding, performance reviews. Benefits - We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. - We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace.

• Build and operate CI/CD pipelines in GitLab (pipelines-as-code, runners, templates, caching, artifact strategies). • Manage container platforms with Kubernetes (deployments, ingress, services, HPA, troubleshooting). • Maintain container build and runtime workflows with Docker (image optimization, multi-stage builds, registries). • Embed DevSecOps practices into delivery: SAST/DAST/dependency scanning, secrets scanning policy gates, approvals, compliance-friendly pipelines hardening images and runtime controls. • Improve reliability and performance: monitoring/alerting, log aggregation, incident response capacity planning, scaling, resilience improvements. • Collaborate on architecture decisions and document standards/runbooks.