DevSecOps Engineer
Metron · Reston, VA
—
Jul 23, 2026
Reston, VA
Jul 24, 2026
What this job asks for AI summary
A hands-on engineering role focused on embedding security and compliance controls into CI/CD pipelines and software delivery workflows. Day-to-day work spans building and maintaining Azure DevOps pipelines with YAML templates, integrating tools like SonarQube and Nexus for code quality and artifact management, and establishing secure Kubernetes deployment standards. Suits engineers with a background in DevSecOps or platform engineering who are comfortable working in compliance-driven, defense-adjacent environments.
Senior level · 5+ years · Washington-Arlington-Alexandria, DC-VA-MD-WV · Secret clearance · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $158,337 (middle half $126,441–$180,105).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
SOC classification is Medium confidence: the role writes and ships CI/CD automation, YAML pipeline templates, and Kubernetes guardrails (pointing to 15-1252 Software Developers), but also has a meaningful operational/administration dimension around Nexus, SonarQube, and platform tooling (15-1244). The engineering/build emphasis tips the call to 15-1252.
Clearance: the JD hard-gates on eligibility to obtain a U.S. security clearance; an active clearance is listed only as preferred. The minimum gate is mapped to Secret (the lowest clearance typically required in defense contracting contexts where TS/SCI is not specified). Candidates with an active clearance are preferred.
PowerShell, Bash, and Python are listed together as interchangeable scripting options in the required section ('PowerShell, Bash, Python, or similar languages'). They are emitted as separate skills with each other as alternatives to reflect that any one satisfies the gate.
SAST and SCA are listed as required practices/controls rather than specific named tools; they are retained as skills because the JD explicitly names them as required capabilities.
Nexus and SonarQube appear in both the narrative/responsibilities section and the preferred qualifications; they are marked preferred based on their explicit placement under 'Preferred Qualifications'.
No compensation figures are provided in the posting.
The role is explicitly onsite in Reston, VA — remote is not offered.
Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.