Hybrid Senior DevSecOps Engineer

at MetroStar

• Job title: Senior DevSecOps Engineer
• Job type: Full Time
• Experience level: Senior
• Salary: $138,000 - $147,000 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security, Docker, NGINX
• Location requirements: Hybrid, Washington D C, United States

About the role

• DevSecOps Engineer supporting AI-enabled financial compliance initiative for the Department of War. Responsible for designing secure infrastructure and collaborating with cross-disciplinary teams.

Responsibilities

• Design, deploy, and maintain secure, containerized multi-service environments supporting AI-enabled compliance platforms
• Configure reproducible, vendored dependency management for air-gapped or restricted network deployments
• Implement production-grade identity and access controls across frontend and backend services
• Build and enforce secure CI/CD pipelines with automated code quality and security validation
• Harden infrastructure and application layers for secure DoW production environments
• Partner closely with Data Engineers, AI/ML Engineers, Cybersecurity specialists, and Financial SMEs to ensure secure and scalable deployment

Requirements

• Active Secret clearance required
• Bachelor’s degree in Computer Science, Engineering, or related field
• Minimum 5 years of DevSecOps or security engineering experience
• Experience supporting secure deployments within DoD or similarly regulated environments
• Experience with containerized multi-service deployments using Docker Compose, including support for air-gapped or restricted network environments
• Proficiency administering identity providers such as Keycloak, including OIDC/SSO flows, JWT validation, key rotation, and secure credential management
• Hands-on experience implementing and maintaining SAST pipelines and dependency vulnerability scanning tools such as pip-audit and npm audit
• Experience enforcing baseline-driven CI/CD quality gates for security and code integrity
• Knowledge of production hardening practices including reverse proxy configuration with Nginx, CORS policy management, and infrastructure scripting

Benefits

• Health, dental, and vision insurance
• 401(k) retirement plan with company match
• Paid time off (PTO) and holidays
• Parental Leave and dependent care
• Flexible work arrangements
• Professional development opportunities
• Employee assistance and wellness programs