Sr. DevSecOps Engineer I (6724)

MetroStar
Reston, VA
Career-pivot friendly

Who this role is best for

Aimed at mid-to-senior level DevSecOps professionals with strong security and infrastructure automation skills, working in classified environments and collaborating closely with development and operations teams in Reston, VA.

Best fit for

  • Candidates with 5+ years of DevSecOps experience and a background in government or classified systems
    — “5+ years as a DevSecOps Engineer, DevOps Engineer, or similar”
  • Individuals with hands-on experience in CloudFormation and STIG compliance for AWS GovCloud environments
    — “architect highly available, resilient, and secure DevSecOps tool infrastructure across AWS environments (GovCloud, C2S, TC2S) while ensuring STIG compliance”
  • Professionals skilled in Kubernetes automation and advanced log analysis for root cause resolution
    — “Lead advanced troubleshooting by analyzing system and application logs via Linux command-line tools”

Things to consider

  • Security clearance is a mandatory requirement for this role, not a preference
    — “Active TS/SCI with CI Poly security clearance”
  • The role may involve working in multiple classification environments, which could require specialized handling
    — “designing, implementing, and maintaining secure and efficient software development and deployment pipelines”

How to stand out

  • Emphasize experience with STIG compliance and pipeline automation in classified environments
    — “integrated security scanning and STIG compliance validation”
  • Highlight your ability to mentor junior engineers and provide technical guidance
    — “mentoring junior engineers through code reviews, IaC best practices, and technical documentation”
  • Showcase your expertise in creating production-grade infrastructure with CloudFormation and Terraform
    — “Create and maintain Infrastructure as Code (IaC) templates, primarily using CloudFormation”
  • Demonstrate your hands-on Linux skills and log analysis capabilities in troubleshooting scenarios
    — “analyzing system and application logs via Linux command-line tools”
  • Position yourself as an expert in secure coding practices and vulnerability remediation
    — “expert guidance to development teams on secure coding practices, STIG compliance, and vulnerability remediation”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • designed and implemented CI/CD pipelines
  • created IaC templates
  • led advanced troubleshooting
Typical background
DevSecOpsDevOpscloud infrastructure

Skills & requirements

Required

DevSecOpsCi/cd PipelinesInfrastructure As CodeKubernetesLinux

Preferred

STIG ComplianceHelm Chart Development

Stack & domain

LinuxKubernetesOpenshiftAnsibleTerraformCloudformationCi/cd PipelinesGitLabJenkinsInfrastructure As CodeSTIG ComplianceHelm Chart DevelopmentSecurity+Dod 8140/8570DevSecOpsSecure Coding PracticesVulnerability RemediationATO Efforts

About the role

Original posting from MetroStar

As a Sr. DevSecOps Engineer I, you’ll play a critical role in designing, implementing, and maintaining secure and efficient software development and deployment pipelines. You will collaborate with cross-functional teams to integrate security practices seamlessly into the development and operations lifecycle, ensuring the delivery of high-quality, secure, and reliable software solutions.

We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.

What you’ll do:

Collaborate with customers and internal teams to design and implement technical solutions across multiple classification environments, working independently or collaboratively to address complex requirements.

Develop CI/CD pipelines from scratch in GitLab and Jenkins with integrated security scanning and STIG compliance validation, providing expert guidance on pipeline troubleshooting and DevSecOps best practices.

Create and maintain Infrastructure as Code (IaC) templates, primarily using CloudFormation, to architect highly available, resilient, and secure DevSecOps tool infrastructure across AWS environments (GovCloud, C2S, TC2S) while ensuring STIG compliance.

Lead advanced troubleshooting by analyzing system and application logs via Linux command-line tools, conducting root cause analysis, and developing mitigation strategies for service degradation.

Provide expert guidance to development teams on secure coding practices, STIG compliance, and vulnerability remediation in support of ATO efforts, while mentoring junior engineers through code reviews, IaC best practices, and technical documentation.

What you’ll need to succeed:

Active TS/SCI with CI Poly security clearance.

Certification to satisfy DoD 8140/8570 (e.g., Security+, or equivalent).

5+ years as a DevSecOps Engineer, DevOps Engineer, or similar.

Strong hands-on Linux experience.

Experience with designing, deploying, and managing production-grade Kubernetes (K8s) or OpenShift clusters via automation with Ansible and Terraform and/or CloudFormation in on-prem and cloud environments.

Experience with CI/CD pipelines (e.g. GitLab, or equivalent) and containerization.

Experience with Helm chart development and STIGs (preferred).

SALARY RANGE: $200,000 - $210,000

The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including: 

The candidate's professional background and relevant work experience

The specific responsibilities of the role and organizational needs

Internal equity and alignment with current team compensation

This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:

Performance-based bonuses

Company-paid training and/or certifications

Referral bonuses

Application Deadline:  Applications will be accepted on a rolling basis until the position is filled; candidates are encouraged to apply as early as possible for full consideration.

Additional Compensation: This role may also be eligible for bonuses and/or additional incentives based on individual and company performance.

Benefits: All full-time employees are eligible to participate in our benefits programs:

Health, dental, and vision insurance

401(k) retirement plan with company match

Paid time off (PTO) and holidays

Parental Leave and dependent care

Flexible work arrangements

Professional development opportunities

Employee assistance and wellness programs

Like we said, we are big fans of our people. That’s why we offer a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits. Plus, check out our accolades.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment based on merit and without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.

 What we want you to know:

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

 Not ready to apply now? 

Sign up to join our newsletter here.

Source: MetroStar careers

Similar roles