Responsibilities
- Design, implement, and improve secure Azure DevOps CI/CD patterns using reusable YAML templates, quality gates, artifact controls, and release safeguards.
- Support secure software releases across development, test, integration, staging, and production environments.
- Troubleshoot pipeline failures, permissions issues, dependency problems, scan failures, deployment issues, and release blockers.
- Integrate SAST, SCA, dependency scanning, secrets scanning, code-quality gates, container scanning, and artifact validation into build and release workflows.
- Support Nexus, SonarQube, Azure DevOps artifacts, and related artifact-management and code-quality platforms.
- Partner with platform engineering on secure Kubernetes and K3s deployment standards, including namespaces, RBAC, ServiceAccounts, Helm, ingress, TLS, storage, quotas, and workload security.
- Create technical documentation, examples, runbooks, and onboarding materials for secure pipeline and deployment workflows.
- Track pipeline health, scan outcomes, recurring developer pain points, release blockers, and control gaps, and convert findings into automation, templates, documentation, or guardrails.
- Coordinate with cybersecurity and other technical teams to align CI/CD controls with security, compliance, audit, and program requirements.
- Participate in occasional after-hours or weekend maintenance and emergency response.
Requirements
- At least 5 years of experience in DevOps, DevSecOps, platform engineering, software delivery, systems engineering, or a closely related technical role.
- Hands-on experience with Azure DevOps pipelines, YAML, build and release workflows, repositories, artifacts, permissions, or agent-based builds.
- Experience implementing security, quality, or compliance controls in CI/CD workflows.
- Experience with secure software delivery practices including SAST, SCA, dependency scanning, secrets handling, code-quality gates, artifact controls, or container scanning.
- Experience troubleshooting CI/CD failures, build issues, deployment problems, permissions issues, or dependency-related errors.
- Experience with Kubernetes, K3s, containers, Helm, or similar deployment technologies.
- Experience with scripting or automation using PowerShell, Bash, Python, or similar languages.
- Ability to write clear technical documentation, runbooks, onboarding guides, and troubleshooting procedures.
- Eligibility to obtain and maintain a U.S. security clearance.
- Willingness and ability to work in regulated, secure, or compliance-bounded environments.
- Preferred experience includes Azure DevOps Server; Nexus, SonarQube, or similar platforms; SBOM generation; artifact signing; provenance; software supply-chain security; policy-as-code; OPA/Gatekeeper; Kubernetes admission controls; Infrastructure-as-Code or Configuration-as-Code; observability platforms; and defense or compliance-driven environments.
- Preferred experience includes Terraform, Ansible, Bicep, CloudFormation, Prometheus, Grafana, or Loki.
Benefits
- Medical, dental, and vision insurance.
- FSA and HSA options and additional voluntary benefits.
- Paid time off, nine observed holidays, and two floating holidays.
- Paid parental leave and military leave.
- Tuition reimbursement and professional development reimbursement.
- Annual salary reviews and profit sharing.
- Traditional and Roth 401(k) options.
- Gym and fitness reimbursement.
- Employee Assistance Program and employee referral program.
- Onsite work in the Reston, Virginia office is required; occasional after-hours or weekend maintenance and emergency response may be required.
Tech Stack
About Metron
METRON is a French Cleantech, leader of energy performance, energy cost & carbon footprint reduction for international groups, thanks to its digital platform of energy management and optimization. Thanks to its Energy Management & Optimization System (EMOS) platform, METRON provides the transparency necessary for industrial and service sector groups to standardize, operate and measure their energy performance and carbon neutrality strategy across their sites. Through its 9 subsidiaries in EMEA, APAC, NORAM and LATAM, supported by nearly 100 employees, METRON supports the greening of more than 25,000 commercial sites and 200 international industrial groups such as Danone, ArcelorMittal, SGD Pharma, Imerys... In 2021 and 2022, the company joined the prestigious FrenchTech Green20 rankings in France and the "CleanTech 100" in San Francisco, and was awarded by Bloomberg NEF in New York in 2019. METRON's solution has also received the Solar Impulse Efficient Solution for the World certification.