DevSecOps Lead Engineer

Mass Virtual • Orlando, FL

1d

About The Position

At Mass Virtual, we don’t just build virtual reality—we use it to solve real-world problems at scale. From transforming how people train, learn, and operate to pushing immersive technology where it hasn’t gone before, we’re redefining what “work” looks like inside a headset. If you want to create what’s next (not maintain what’s already been done), you’re in the right place. The DevSecOps Lead Engineer is responsible for establishing and formalizing DevSecOps practices that support secure, consistent, and scalable software delivery across the organization. This role will design and implement baseline standards, tooling, and workflows across the software development lifecycle, integrating security, quality, and operational controls into build, test, and release activities. As the organization evolves its development and delivery capabilities, the DevSecOps Lead Engineer will work closely with Developers, IT Operations, Cyber Security, and Program teams to standardize development pipelines, improve build and release consistency, and ensure software deliverables meet internal, customer and government requirements. This role requires a hands-on leader who can define foundational practices while enabling teams to deliver efficiently and reliably.

Requirements

• DevSecOps Practice Establishment
• Design and implement DevSecOps practices, standards, and operating procedures
• Establish baseline development, build, test, and release workflows
• Define roles, responsibilities, and handoffs across Development, Cyber Security, and Operations
• Ensure practices are scalable and adaptable as delivery needs evolve
• Development Pipeline Design & Governance
• Establish standardized build and deployment pipelines
• Define versioning, artifact management, and release traceability requirements
• Ensure pipelines support repeatable, auditable builds for customer and government deliverables
• Promote consistency across development environments and deployment targets
• Security Integration
• Integrate security controls into the software development lifecycle, including code analysis, dependency review, and build validation
• Define secure development standards and baseline controls
• Partner with Cyber Security teams to align development practices with organizational security requirements
• Ensure security findings are tracked, prioritized, and addressed in a timely manner
• Configuration & Release
• Coordinate with Configuration Management to ensure software builds align with approved baselines and configurations
• Ensure release artifacts are properly versioned, documented, and traceable
• Support release readiness reviews and deployment approvals
• Tooling & Automation
• Evaluate, select, and implement tools to support build, test, validation, and deployment activities
• Drive appropriate automation to improve consistency, efficiency, and reliability
• Establish metrics to assess pipeline health, delivery performance, and compliance
• Documentation & Standards
• Create and maintain documentation for DevSecOps standards, workflows, and pipelines
• Ensure documentation is accurate, current, and audit ready
• Develop guidance and onboarding materials for development teams
• Monitoring & Reporting
• Track and report on pipeline performance, build outcomes, and security-related findings
• Provide visibility into release readiness, delivery risks, and improvement opportunities
• Support internal reviews, customer engagements, and government assessments

Nice To Haves

• GitHub Actions
• Azure DevOps Pipelines
• Terraform Cloud Pipelines
• Ansible
• Packer
• Containerization & Orchestration
• Docker
• Kubernetes
• OpenShift
• Security Tooling
• SonarQube
• Trivy
• Monitoring
• Prometheus
• Grafana

Responsibilities

• Design and implement DevSecOps practices, standards, and operating procedures
• Establish baseline development, build, test, and release workflows
• Define roles, responsibilities, and handoffs across Development, Cyber Security, and Operations
• Ensure practices are scalable and adaptable as delivery needs evolve
• Establish standardized build and deployment pipelines
• Define versioning, artifact management, and release traceability requirements
• Ensure pipelines support repeatable, auditable builds for customer and government deliverables
• Promote consistency across development environments and deployment targets
• Integrate security controls into the software development lifecycle, including code analysis, dependency review, and build validation
• Define secure development standards and baseline controls
• Partner with Cyber Security teams to align development practices with organizational security requirements
• Ensure security findings are tracked, prioritized, and addressed in a timely manner
• Coordinate with Configuration Management to ensure software builds align with approved baselines and configurations
• Ensure release artifacts are properly versioned, documented, and traceable
• Support release readiness reviews and deployment approvals
• Evaluate, select, and implement tools to support build, test, validation, and deployment activities
• Drive appropriate automation to improve consistency, efficiency, and reliability
• Establish metrics to assess pipeline health, delivery performance, and compliance
• Create and maintain documentation for DevSecOps standards, workflows, and pipelines
• Ensure documentation is accurate, current, and audit ready
• Develop guidance and onboarding materials for development teams
• Track and report on pipeline performance, build outcomes, and security-related findings
• Provide visibility into release readiness, delivery risks, and improvement opportunities
• Support internal reviews, customer engagements, and government assessments

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed