Sr. DevSecOps Engineer I (6437)

As Sr. DevSecOps Engineer I, you’ll support a high-visibility, enterprise AI-enabled financial compliance initiative for the Department of War.  This mission-critical program modernizes financial system compliance and audit workflows across more than 180 systems. You will architect and secure the deployment infrastructure powering AI-assisted compliance validation, semantic search, and enterprise governance in restricted DoW environments.
This is a remote role with preference for candidates local to the DMV area who can attend in-person meetings as required.

We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.

If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!

What you’ll do:

• Design, deploy, and maintain secure, containerized multi-service environments supporting AI-enabled compliance platforms
• Configure reproducible, vendored dependency management for air-gapped or restricted network deployments
• Implement production-grade identity and access controls across frontend and backend services
• Build and enforce secure CI/CD pipelines with automated code quality and security validation
• Harden infrastructure and application layers for secure DoW production environments
• Partner closely with Data Engineers, AI/ML Engineers, Cybersecurity specialists, and Financial SMEs to ensure secure and scalable deployment

What you’ll need to succeed:

• Active Secret clearance required
• Bachelor’s degree in Computer Science, Engineering, or related field
• Minimum 5 years of DevSecOps or security engineering experience
• Experience supporting secure deployments within DoD or similarly regulated environments
• Experience with containerized multi-service deployments using Docker Compose, including support for air-gapped or restricted network environments
• Proficiency administering identity providers such as Keycloak, including OIDC/SSO flows, JWT validation, key rotation, and secure credential management
• Hands-on experience implementing and maintaining SAST pipelines and dependency vulnerability scanning tools such as pip-audit and npm audit
• Experience enforcing baseline-driven CI/CD quality gates for security and code integrity
• Knowledge of production hardening practices including reverse proxy configuration with Nginx, CORS policy management, and infrastructure scripting

SALARY RANGE: $138,000 - $147,000 

The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including: 

• The candidate's professional background and relevant work experience
• The specific responsibilities of the role and organizational needs
• Internal equity and alignment with current team compensation
• This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:
• Performance-based bonuses
• Company-paid training and/or certifications
• Referral bonuses