DevSecOps Engineer: Secure CI/CD & Kubernetes

Metron; Reston (OR); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

FSA/HSA options

Paid Time Off

Holidays

Job summary

Metron in Reston, VA is seeking a DevSecOps Engineer to secure software delivery and embed security into CI/CD. The role collaborates across software development, cybersecurity, and platform teams to implement governance, artifact controls, and automated safeguards.

The candidate will work with Azure DevOps, Nexus, SonarQube, and Kubernetes/K3s, applying SSP, RMF, and NIST guidelines while ensuring on-site, regulated environments are supported. Occasional after-hours work may be required.

Qualifications

• 5+ years in DevOps/DevSecOps, platform engineering, or related roles.
• Hands-on experience with Azure DevOps pipelines, YAML, artifacts, and releases.
• Experience implementing security, quality, or compliance controls in CI/CD.
• Experience with SAST, SCA, dependency scanning, secrets handling, or container scanning.
• Experience troubleshooting CI/CD failures and deployment issues.
• Eligible to obtain and maintain a U.S. security clearance.
• Willing to work in regulated or secure environments.

Responsibilities

• Design, implement, and improve secure CI/CD patterns in Azure DevOps.
• Support secure release workflows across development, test, integration, staging, and production.
• Troubleshoot pipeline failures, permissions issues, dependency problems, scan failures, and blockers.
• Integrate security and quality checks (SAST, SCA, dependencies) into build workflows.
• Partner with cybersecurity to align controls with SSP, RMF, NIST, CMMC, and related standards.
• Collaborate with platform engineering on secure Kubernetes/K3s deployment standards.
• Create runbooks and onboarding materials; document troubleshooting procedures.

Skills

Azure DevOps

Kubernetes

CI/CD security

Scripting

Python/Bash

Documentation

Security clearance eligibility

Tools

Nexus

SonarQube

Terraform

K3s

Job description

Metron in Reston, VA is seeking a DevSecOps Engineer to secure software delivery and embed security into CI/CD. The role collaborates across software development, cybersecurity, and platform teams to implement governance, artifact controls, and automated safeguards.

The candidate will work with Azure DevOps, Nexus, SonarQube, and Kubernetes/K3s, applying SSP, RMF, and NIST guidelines while ensuring on-site, regulated environments are supported. Occasional after-hours work may be required.