Senior DevSecOps Engineer: Secure CI/CD & Kubernetes

metron as.; San Diego (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental and Vision Insurance

Paid Time Off

9 Holidays & 2 Floating Holidays

Tuition Reimbursement

Professional Development Reimbursement

Profit Sharing

401(k) Options

Job summary

Metron, based in San Diego, seeks a DevSecOps Engineer to embed security, quality, and software-supply chain controls into CI/CD workflows across Azure DevOps and related tooling. You will partner with engineering, cybersecurity, and program teams to deliver secure software delivery at scale.

The role emphasizes hands-on pipeline design, secure release patterns, and tooling like Nexus, SonarQube, and Kubernetes/K3s.

Qualifications

• 5+ years of experience in DevOps, DevSecOps, platform engineering, software delivery, systems engineering, or related technical roles.
• Hands-on experience with Azure DevOps pipelines, YAML, build/release workflows, repositories, artifacts, permissions, or agent-based builds.
• Experience implementing security, quality, or compliance controls in CI/CD workflows.
• Experience with SAST, SCA, dependency scanning, secrets handling, code-quality gates, artifact controls, or container scanning.
• Experience troubleshooting CI/CD failures, build issues, deployment problems, permissions issues, or dependency-related errors.
• Experience with Kubernetes, K3s, containers, Helm, or similar deployment technologies.
• Experience with scripting or automation using PowerShell, Bash, Python, or similar languages.
• Ability to write clear technical documentation, runbooks, onboarding guides, and troubleshooting procedures.
• Active U.S. Secret Clearance and eligible for TS/SCI Clearance.
• Willing and able to work in regulated, secure environments.

Responsibilities

• Design, implement, and improve secure CI/CD patterns in Azure DevOps, including YAML templates, quality gates, artifact controls, and release safeguards.
• Support secure release workflows across development, test, integration, staging, and production environments.
• Troubleshoot pipeline failures, permissions issues, dependency problems, scan failures, and release blockers.
• Integrate security and quality checks into build and release workflows (SAST, SCA, dependency scanning, secrets scanning, code-quality gates, container scanning, artifact validation).
• Partner with cybersecurity to align CI/CD controls with SSP, RMF, NIST, CMMC, STIG, Zero Trust, audits, and program requirements.
• Collaborate with platform engineering on secure Kubernetes/K3s deployment standards, namespaces, RBAC, Helm, ingress, TLS, storage, quotas, and workload security.
• Create documentation, runbooks, onboarding materials for secure pipeline and deployment workflows.
• Track and address recurring developer pain points, pipeline health, scan outcomes, release blockers, and control gaps.

Skills

DevSecOps

Platform engineering

CI/CD

Scripting

Documentation

Tools

Azure DevOps

Nexus

SonarQube

Kubernetes/K3s

Helm

Terraform

Ansible

Bicep

CloudFormation

Job description

Metron, based in San Diego, seeks a DevSecOps Engineer to embed security, quality, and software-supply chain controls into CI/CD workflows across Azure DevOps and related tooling. You will partner with engineering, cybersecurity, and program teams to deliver secure software delivery at scale.

The role emphasizes hands-on pipeline design, secure release patterns, and tooling like Nexus, SonarQube, and Kubernetes/K3s.