← View all ZipStaff Inc. careers

ZipStaff Inc.

DevSecOps Engineer

Remote•United States•Contract
$38 - $40 hourly
Apply
About the Job
Title: DevSecOps Engineer
Location: Chapel Hill, NC, Remote
Type: Contract, 6 months
Overview:
ZipStaff is hiring a DevSecOps Engineer for our client, a global IT services and consulting firm. This is a fully remote, 6-month contract role. You will build products that automate and productize platform operations—starting with a unified service catalog that records what services run, who owns them, how they are deployed, and how they relate to each other. Security, reliability, and development teams use the catalog as their working view of the platform. You will build and extend the catalog, integrate it with source control, delivery infrastructure, and observability systems, and expose it through APIs, a CLI, and chat and web interfaces, including AI-assisted ones. Because the catalog is security-sensitive, implementing authorization, participating in threat modeling with security partners, and producing compliance-ready audit evidence are core to the role. You will use AI coding agents as part of your daily workflow and apply sound judgment about when an LLM is the right tool and when deterministic code is.
Responsibilities:
  • Build and extend the unified service catalog—implement the data model, APIs, and sync jobs that bring ownership, deployment, dependency, and compliance state from source control, delivery infrastructure, and observability systems into one queryable system.
  • Build integrations, webhooks, and event-driven processing with idempotent reconciliation against external systems and clean API contracts that other teams can build on.
  • Expose the catalog through CLI, chat, and web interfaces, and contribute to AI-assisted interfaces on top of it (for example, assistants that answer questions about services and ownership), with least-privilege identities, auditable actions, and prompt-injection as a first-class design consideration.
  • Implement the authorization model that security partners specify, controlling who can see and change catalog data across teams.
  • Produce compliance-ready audit evidence—ownership, change, and access records—as a built-in output of the catalog.
  • Participate in threat modeling with security partners and implement resulting controls such as least-privilege access, secrets hygiene, and policy checks in the catalog.
  • Ship production-quality software with tests, CI, observability, and runbooks for what you build.
  • Instrument what you ship (adoption, data freshness, and manual request volume) for the catalog.
  • Write clear documentation and support the teams that consume the catalog.
  • Participate in a light on-call rotation for the catalog (not a production streaming on-call).
Qualifications:
  • 3+ years of professional software engineering experience building backend services, internal tools, or data-backed systems that other engineers depend on.
  • Strong coding skills in Python, Go, or TypeScript/Node, including testing, code review, and CI/CD habits; experience shipping and maintaining services, not just scripts.
  • Experience implementing APIs and data models (REST or GraphQL), relational databases such as Postgres, and event-driven or webhook-based integrations with third-party systems.
  • Secure coding and identity fundamentals: working knowledge of authentication and authorization patterns (RBAC or ABAC), least-privilege access, and secrets handling.
  • An AI-native development approach: you use AI coding agents as part of daily work and validate what they produce against security, reliability, and quality standards before shipping.
  • Working familiarity with modern delivery: Git and a hosted source-control platform (e.g., GitHub) including webhooks and APIs, CI/CD systems, GitOps, and Kubernetes.
  • Good judgment about when to use an LLM versus deterministic code, a scheduled job, or a well-placed integration.
  • Clear written communication and the habit of turning feedback from engineers who use what you build into well-scoped changes.
Additional Qualifications:
  • Experience building an in-house service catalog, asset inventory, or ownership system that other teams depended on.
  • Hands-on experience building with LLM APIs (a bot, agent, retrieval pipeline, or automated analysis tool) and awareness of prompt injection and other agent-specific risks.
  • Experience evaluating nondeterministic LLM output (eval harnesses, prompt regression testing, or observability for AI features).
  • Experience building tools or integrations for AI coding agents (e.g., Model Context Protocol servers, agent skills, or tool definitions).
  • Experience producing compliance evidence and audit-ready records for security and reliability partners.
  • Hands-on experience with Kubernetes, Python, and Terraform.
Benefits:
  • Health Insurance
  • Dental Insurance
  • Vision Insurance
  • 401(k) + matching
  • Paid time off
  • Referral Program
About ZipStaff:
ZipStaff connects skilled technology professionals with leading organizations across the United States, matching top talent with impactful contract and full-time opportunities.
To apply, submit your resume through this posting. Qualified candidates will be contacted by a ZipStaff recruiter.
Apply