Sr. DevSecOps Engineer I (6737)

About the role

As a DevSecOps Engineer I, you’ll play a critical role in designing, implementing, and maintaining secure and efficient software development and deployment pipelines. You will collaborate with cross-functional teams to integrate security practices seamlessly into the development and operations lifecycle, ensuring the delivery of high-quality, secure, and reliable software solutions. We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.

Responsibilities

• Provide technical support to development teams working across multiple classification environments by responding to tickets, troubleshooting issues, and onboarding teams to the various managed DevSecOps tools.
• Support CI/CD pipeline operations across GitLab CI and Jenkins for dozens of development teams, ensuring adherence to automated security scanning and STIG compliance validation.
• Maintain and update Infrastructure as Code (IaC) templates using primarily CloudFormation to manage DevSecOps tool infrastructure across AWS environments, including patching, backup and recovery, and hardening.
• Analyze system and application logs using Linux command-line tools (e.g., grep, awk, tail) to troubleshoot customer-reported issues and service problems, including AWS resource monitoring (EC2, RDS, Security Groups) and infrastructure troubleshooting.
• Support identity and access management operations using Keycloak, assist with user onboarding, troubleshooting authentication issues, and maintaining user and group access for managed DevSecOps tools.
• Maintain and develop technical documentation and user guide for managed DevSecOps tools, utilizing GitLab wikis and Pages to support team and customer knowledge sharing.
• Support containerized tool deployments in OpenShift by troubleshooting container issues, monitoring Prisma security scan results, and maintaining existing Docker image builds and OpenShift configurations using console and CLI tools.

Requirements

• Active TS/SCI with CI Poly security clearance.
• Certification to satisfy IAT Level 2 (e.g., Security+, GSEC, SSCP, or similar).
• 7+ years of experience as a DevSecOps Engineer or similar role, with a strong focus on infrastructure automation, scalability, and reliability across the software development lifecycle; and delivering DevSecOps services across multiple classified domains (e.g., IL5, IL6+).
• Experience with DevOps practices, CI/CD pipelines, containerization, and other automation tools (e.g., Jenkins, GitLab CI/CD, Artifactory, SonarQube, and/or Prisma Cloud).
• Experience with scripting languages (e.g., Python, Bash), in a Linux environment (e.g., RHEL, Oracle Linux, or similar).
• Experience with infrastructure as code (IaC) tools (e.g., Terraform and/or CloudFormation, Ansible).
• Experience with Tier 1-3 customer support and ticketing systems (e.g., GitLab Service Desk or ServiceNow).
• Understanding of AWS capabilities (e.g., EC2, S3, IAM, RDS, etc) and architecting secure cloud-based infrastructure and services.
• Hands-on experience configuring applications and systems to comply with Secure Technical Implementation Guides (STIG) and Security Requirements Guide (SRG) by implementing security best practices.
• Knowledge of security best practices, common vulnerabilities, and exposure to security frameworks (e.g., OWASP, NIST, OpenSCAP).
• Ability to work independently and communicate with stakeholders across a global enterprise and cross-functional teams to drive project completion.

Pay

The salary range for this position is $17