Senior DevSecOps Engineer: Secure CI/CD & Cloud IaC Lead

metrostarsystems; Reston (VA); On-site; USD 200,000 - 220,000; Full time

Job summary

MetroStar is seeking a Sr. DevSecOps Engineer III to design, implement, and maintain secure software pipelines and infrastructure across AWS environments. You will automate deployment, enforce STIG compliance, and guide teams on best security practices throughout the SDLC.

Expect to lead advanced troubleshooting, perform root cause analysis, and collaborate with cross‑functional teams to deliver secure, reliable solutions at scale. A TS/SCI clearance with CI poly is required.

Qualifications

• Active TS/SCI Clearance with CI poly is required.
• 10+ years of DevSecOps or equivalent experience across SDLC.
• Proven expertise in CI/CD, containerization, and automation tools.
• Strong Linux scripting experience in a cloud context.
• Experience with Terraform, CloudFormation, or Ansible for IaC.
• Familiarity with STIG/SRG security compliance and cloud security.
• Knowledge of OWASP, NIST, OpenSCAP standards.

Responsibilities

• Design, implement, and maintain secure software pipelines and IaC.
• Develop CI/CD pipelines in GitLab CI and Jenkins with security scans.
• Architect DevSecOps tooling across AWS environments with STIG compliance.
• Lead troubleshooting, root cause analysis, and incident mitigation.
• Provide security guidance on secure coding and vulnerability remediation.
• Build secure containerized solutions and guide teams on best practices.
• Perform code reviews and maintain technical documentation.

Skills

TS/SCI clearance

DevSecOps experience

CI/CD pipelines

Linux scripting

IaC tooling

Cloud: AWS

Security best practices

Automation tools

Tools

GitLab CI/CD

Jenkins

Artifactory

SonarQube

Prisma Cloud

Terraform

CloudFormation

Ansible

OpenShift

Job description

MetroStar is seeking a Sr. DevSecOps Engineer III to design, implement, and maintain secure software pipelines and infrastructure across AWS environments. You will automate deployment, enforce STIG compliance, and guide teams on best security practices throughout the SDLC.

Expect to lead advanced troubleshooting, perform root cause analysis, and collaborate with cross‑functional teams to deliver secure, reliable solutions at scale. A TS/SCI clearance with CI poly is required.