DevSecOps Engineer (6297)

MetroStar•Hanscom AFB, MA

6d•$106,000 - $118,000

About The Position

As a DevSecOps Engineer , you’ll build and maintain the automation, pipelines, and containerized environments that deliver C2SET modeling and simulation capabilities. This role manages GitLab based CI and CD workflows, supports container hosting in Kubernetes on AWS and hybrid networks, and applies security controls required for DoD environments. The position ensures the M and S Platform remains reliable, secure, observable, and ready for operational use. We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers. If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!

Requirements

Active U.S. Government issued Secret security clearance
Bachelor’s degree in Computer Science, Engineering, Information Systems, or related field, or equivalent experience
Minimum of 4 years of experience in cloud engineering or DevSecOps supporting containerized applications
Hands on experience building and maintaining CI or CD pipelines using GitLab or a comparable toolchain
Experience operating Docker and Kubernetes environments in production or mission settings
Working knowledge of security automation and compliance in cloud platforms, including applying STIGs, RMF controls, or Zero Trust concepts
Familiarity with observability stacks for logging, metrics, and tracing
Ability to integrate automated testing, vulnerability scanning, and code quality checks into CI or CD pipelines

Responsibilities

Design, implement, and maintain GitLab CI / CD pipelines for M&S applications and services
Integrate automated testing, code quality checks, SAST or DAST tools, vulnerability scanning, and deployment controls
Build and manage Docker and Kubernetes clusters supporting simulation platforms on AWS and hybrid environments
Operate secure cloud environments using IaC, configuration as code, and automated security controls
Produce SBOMs, scan findings, and pipeline documentation to support RMF and ATO compliance
Implement observability frameworks for logging, metrics, and tracing and resolve performance bottlenecks
Provide remediation guidance for findings triggered by automated code and container scanning
Support platform deployment and readiness events that may require TDY travel
Work closely with developers, security engineers, and PMO to standardize and modernize legacy delivery workflows