---
title: 'DevSecOps Engineer at Metron'
canonical: 'https://feeny.ai/job/devsecops-engineer-metron-reston-7s7dkfdscg7q'
type: 'job'
last_seen: '2026-09-11'
---

# DevSecOps Engineer at Metron

- **Company:** Metron
- **Location:** Reston, VA
- **Posted:** 2026-06-09
- **Last confirmed live:** 2026-09-11
- **Apply:** https://job-boards.greenhouse.io/metron/jobs/5158482007

## Job description

## About Metron

Metron is an employee-owned company dedicated to delivering innovative solutions for the most challenging national security problems. For over 40 years, our principled approach to problem-solving has yielded creative solutions at the intersection of advanced mathematics, computer science, physics, and engineering. Our people are leaders in their technical fields and are passionate about solving challenging problems. We look for individuals who share this same passion and can apply their experience in real-world settings.

Job Description:

Our Reston, VA office is seeking a DevSecOps Engineer to help secure and improve software delivery across the enterprise. This role focuses on embedding security, quality, compliance, and software supply-chain controls into CI/CD workflows while partnering with software development, cybersecurity, platform engineering, systems engineering, and program teams.

This is an engineering role, not a pure governance or vulnerability-management position. The DevSecOps Engineer will work across Azure DevOps Server, Nexus, SonarQube, Kubernetes/K3s deployment workflows, artifact controls, and secure release patterns to help teams deliver software securely and reliably.

Occasional after-hours/weekend maintenance and emergency response may be required.

Key Responsibilities:

Secure CI/CD & Release Workflows

- Design, implement, and improve secure CI/CD patterns in Azure DevOps, including reusable YAML templates, quality gates, artifact controls, and release safeguards
- Support secure release workflows across development, test, integration, staging, and production environments
- Troubleshoot pipeline failures, permissions issues, dependency problems, scan failures, and release blockers

Software Supply Chain & Security Controls

- Integrate security and quality checks into build and release workflows, including SAST, SCA, dependency scanning, secrets scanning, code-quality gates, container scanning, and artifact validation
- Support tools such as Nexus, SonarQube, Azure DevOps artifacts, and related code-quality or artifact-management platforms
- Partner with cybersecurity to align CI/CD controls with SSP, RMF, NIST, CMMC, STIG, Zero Trust, audit, and program requirements

Kubernetes Guardrails & Developer Enablement

- Partner with platform engineering on secure Kubernetes/K3s deployment standards, including namespaces, RBAC, ServiceAccounts, Helm, ingress, TLS, storage, quotas, and workload security
- Create documentation, examples, runbooks, and onboarding materials for secure pipeline and deployment workflows
- Track recurring developer pain points, pipeline health, scan outcomes, release blockers, and control gaps; turn findings into automation, templates, documentation, or improved guardrails

Required Qualifications:

- 5+ years of experience in DevOps, DevSecOps, platform engineering, software delivery, systems engineering, or a closely related technical role
- Hands-on experience with Azure DevOps pipelines, YAML, build/release workflows, repositories, artifacts, permissions, or agent-based builds
- Experience implementing security, quality, or compliance controls in CI/CD workflows
- Experience with secure software delivery practices such as SAST, SCA, dependency scanning, secrets handling, code-quality gates, artifact controls, or container scanning
- Experience troubleshooting CI/CD failures, build issues, deployment problems, permissions issues, or dependency-related errors
- Experience with Kubernetes, K3s, containers, Helm, or similar deployment technologies
- Experience with scripting or automation using PowerShell, Bash, Python, or similar languages
- Ability to write clear technical documentation, runbooks, onboarding guides, and troubleshooting procedures
- Eligible to obtain and maintain a U.S. security clearance
- Willing and able to work in regulated, secure, or compliance-bounded environments

Preferred Qualifications:

- Active U.S. security clearance
- Experience with Azure DevOps Server
- Experience integrating or administering Nexus, SonarQube, or similar artifact and code-quality platforms
- Experience with SBOM generation, SCA, container scanning, artifact signing, provenance, or software supply-chain security
- Experience with policy-as-code, OPA/Gatekeeper, Kubernetes admission controls, or secure workload policies
- Experience with Infrastructure-as-Code or Configuration-as-Code practices using Terraform, Ansible, Bicep, CloudFormation, or similar tools
- Experience with Prometheus, Grafana, Loki, or similar observability platforms
- Experience in defense contracting, government programs, CMMC, NIST 800-171, RMF, STIGs, or other compliance-driven environments

Position Location: Reston, VA (the selected individual will be expected to work onsite in the Reston, VA office)

## Perks and Benefits

- Medical, Dental and Vision Insurance
- Accompanying FSA and HSA options
- Additional Voluntary Benefits
- Paid Time Off
- 9 Observed Holidays and 2 Floating Holidays
- Paid Parental Leave
- Military Leave
- Tuition Reimbursement
- Professional Development Reimbursement
- Annual Salary Reviews
- Profit Sharing
- 401(k) Traditional and Roth Options
- Gym and Fitness Reimbursement
- Employee Assistance Program
- Employee Referral Program

Metron is an Equal Employment Opportunity (EEO) employer. It is the policy of the company to provide equal employment opportunities to all qualified applicants without regard to race, color, religious, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

VEVRAA Federal Contractor

## About Metron

## Company Overview
- **One-liner**: Metron delivers innovative scientific solutions to the toughest problems, specializing in data analytics, decision support, autonomy software, and applied mathematics for defense, maritime, aerospace, and other critical sectors.
- **Entity Type**: Private (100% employee-owned through an ESOP)
- **Headquarters**: Reston, Virginia, USA (commonly cited; not explicitly stated in provided materials)
- **Founded**: Approximately 1984 (over 40 years in business as of 2025)
- **Founders**: Not publicly available

## Core Business
- **Primary industries**: Defense, national security, maritime, aerospace, energy, search and rescue
- **Target customers**: Government agencies (U.S. Navy, Coast Guard, Air Force, etc.), defense contractors, energy exploration companies, air traffic management organizations
- **Mission**: “Deliver innovative solutions that make a difference for our clients’ most challenging problems” — grounded in a first‑principles approach to applied mathematics, physics, and engineering [metsci.com](https://www.metsci.com/who-we-are/metron-fundamentals/)

## Products & Services
- **ANCC (Autonomy, Navigation, Command & Control)**: Platform‑agnostic autonomy software for unmanned systems (UUVs, USVs) with real‑time mission planning and resilience in dynamic environments [metsci.com](https://www.metsci.com/what-we-do/)
- **Dynamo**: Decision support software that revolutionizes test and evaluation processes [metsci.com](https://www.metsci.com/what-we-do/)
- **Volans**: Simulation tools for UUV and USV systems, used in defense and energy programs for over 13 years [metsci.com](https://www.metsci.com/what-we-do/)
- **AirCue**: Real‑time safety intelligence for air traffic controllers and pilots, providing early near‑miss predictions and flight path anomaly cues [metsci.com](https://www.metsci.com/what-we-do/)
- **Red Sky**: Crowdsourced weather observations app for coastal mariners [metsci.com](https://www.metsci.com/what-we-do/)
- **Glimpse**: Open‑source Java library for creating interactive data visualization applications [metsci.com](https://www.metsci.com/what-we-do/)
- **SAROPS**: Search and Rescue Optimal Planning System used by the U.S. Coast Guard (credited with saving lives and locating Air France Flight 447) [metsci.com](https://www.metsci.com/)
- **Analytics & Decision Support**: Tailored data analytics, probabilistic modeling, and anomaly detection solutions for clients across multiple sectors [metsci.com](https://www.metsci.com/)

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private, employee‑owned)
- **Key Metric**: ~200 employees (stated on careers page) [metsci.com](https://www.metsci.com/careers/)
- **Notable Investors/Partners**: None (100% employee‑owned); key clients include U.S. Coast Guard, Aurania (mining exploration), and various defense agencies
- **Growth Signals**: 39+ years in business; expanding into AI, autonomy, and real‑time safety systems; multiple office locations across the U.S. [metsci.com](https://www.metsci.com/careers/)

## Competitive Advantages
- **First‑principles approach**: Builds mathematical models from the ground up rather than relying on black‑box methods, ensuring robust and defensible solutions
- **100% employee‑owned**: ESOP structure attracts and retains top technical talent by aligning company success with employee wealth
- **Proven impact**: High‑stakes successes such as locating Air France Flight 447, rescuing a fisherman after 12 hours in the water, and guiding search for lost gold cities in Ecuador
- **Deep expertise**: Specialists in applied mathematics, operations research, statistical inference, signal processing, and autonomy

## Strategic Focus
- **Autonomy & AI**: Continued investment in unmanned systems autonomy (ANCC) and advanced decision‑support tools (Dynamo, AirCue)
- **National security & defense**: Primary focus on solving mission‑critical problems for defense and intelligence clients
- **Commercial expansion**: Leveraging core capabilities into energy, maritime, and aviation safety markets
- **Talent & culture**: Recruiting experts in applied math, software engineering, and AI; promoting employee ownership and career development

## Why Work Here
- **100% employee‑owned** – profit sharing through ESOP; become fully vested after three years [metsci.com](https://www.metsci.com/careers/)
- **Impactful work** – projects directly affect national security, air safety, search and rescue, and scientific discovery
- **Small teams** – collaborative, cross‑disciplinary environment with a “small company feel + large company stability” [metsci.com](https://www.metsci.com/careers/)
- **Work/Life balance** – flexible culture with competitive salaries and benefits
- **Diversity & inclusion** – actively seeks under‑represented groups in STEM and military veterans [metsci.com](https://www.metsci.com/careers/)
- **Career development** – project leadership opportunities, training, and a path for growth; roles range from Research Scientist to Software Engineer
- **Remote/hybrid policy**: Not explicitly stated; 9 work sites across the U.S. suggest a mix of onsite and possibly hybrid arrangements

## Sources
1. [Metron Corporate Site](https://www.metsci.com/)
2. [Who We Are – Metron](https://www.metsci.com/who-we-are/)
3. [Careers at Metron](https://www.metsci.com/careers/)
4. [What We Do – Products & Tools](https://www.metsci.com/what-we-do/)
5. [Metron Fundamentals](https://www.metsci.com/who-we-are/metron-fundamentals/)
6. [Greenhouse Careers Page](https://job-boards.greenhouse.io/metron)

## Other roles at Metron

- [Technical Summer Internship](https://feeny.ai/job/technical-summer-internship-metron-reston-7p741rbtehf6) — Reston, VA
- [Business Intelligence Analyst](https://feeny.ai/job/business-intelligence-analyst-metron-reston-wxegkajc8z2b) — Reston, VA
- [Mid-Level Software Engineer](https://feeny.ai/job/mid-level-software-engineer-metron-reston-y135swdj7eec) — Reston, VA
- [Rust Software Engineer](https://feeny.ai/job/rust-software-engineer-metron-reston-9mqt77qy9ahj) — Reston, VA
- [Software Engineer, Infrastructure](https://feeny.ai/job/software-engineer-infrastructure-metron-reston-npbd2sgb270s) — Reston, VA
- [Software Development Engineer in Test (SDET)](https://feeny.ai/job/software-development-engineer-in-test-sdet-metron-reston-zaj5rbjtheyt) — Reston, VA
- [Associate Software Engineer](https://feeny.ai/job/associate-software-engineer-metron-reston-vxp7ef0zf0fv) — Reston, VA
- [Senior Manager - Joint Military & Space Planning Subject Matter Expert](https://feeny.ai/job/senior-manager-joint-military-space-planning-subject-matter-expert-metron-hawaii-7c1pq3bam4d5) — Hawaii, HI
- [Software Engineer - Frontend Development](https://feeny.ai/job/software-engineer-frontend-development-metron-reston-sfjpx22cyvjh) — Reston, VA
- [Network Engineer](https://feeny.ai/job/network-engineer-metron-crane-52jv794bsd34) — Crane, IN