DevSecOps Lead Engineer

At Mass Virtual, we don’t just build virtual reality—we use it to solve real-world problems at scale. From transforming how people train, learn, and operate to pushing immersive technology where it hasn’t gone before, we’re redefining what “work” looks like inside a headset. If you want to create what’s next (not maintain what’s already been done), you’re in the right place.

The DevSecOps Lead Engineer is responsible for establishing and formalizing DevSecOps practices that support secure, consistent, and scalable software delivery across the organization. This role will design and implement baseline standards, tooling, and workflows across the software development lifecycle, integrating security, quality, and operational controls into build, test, and release activities.

As the organization evolves its development and delivery capabilities, the DevSecOps Lead Engineer will work closely with Developers, IT Operations, Cyber Security, and Program teams to standardize development pipelines, improve build and release consistency, and ensure software deliverables meet internal, customer and government requirements. This role requires a hands-on leader who can define foundational practices while enabling teams to deliver efficiently and reliably.

DevSecOps Practice Establishment • Design and implement DevSecOps practices, standards, and operating procedures

• Establish baseline development, build, test, and release workflows
• Define roles, responsibilities, and handoffs across Development, Cyber Security, and Operations
• Ensure practices are scalable and adaptable as delivery needs evolve

Development Pipeline Design & Governance • Establish standardized build and deployment pipelines

• Define versioning, artifact management, and release traceability requirements
• Ensure pipelines support repeatable, auditable builds for customer and government deliverables
• Promote consistency across development environments and deployment targets

Security Integration • Integrate security controls into the software development lifecycle, including code analysis, dependency review, and build validation

• Define secure development standards and baseline controls
• Partner with Cyber Security teams to align development practices with organizational security requirements
• Ensure security findings are tracked, prioritized, and addressed in a timely manner

Configuration & Release • Coordinate with Configuration Management to ensure software builds align with approved baselines and configurations

• Ensure release artifacts are properly versioned, documented, and traceable
• Support release readiness reviews and deployment approvals

Tooling & Automation • Evaluate, select, and implement tools to support build, test, validation, and deployment activities

• Drive appropriate automation to improve consistency, efficiency, and reliability
• Establish metrics to assess pipeline health, delivery performance, and compliance

Documentation & Standards • Create and maintain documentation for DevSecOps standards, workflows, and pipelines

• Ensure documentation is accurate, current, and audit ready
• Develop guidance and onboarding materials for development teams

Monitoring & Reporting • Track and report on pipeline performance, build outcomes, and security-related findings

• Provide visibility into release readiness, delivery risks, and improvement opportunities
• Support internal reviews, customer engagements, and government assessments

Preferred Tooling Experience

• GitHub Actions
• Azure DevOps Pipelines
• Terraform Cloud Pipelines
• Ansible
• Packer

Containerization & Orchestration

• Docker
• Kubernetes
• OpenShift

Security Tooling

• SonarQube
• Trivy

Monitoring

• Prometheus
• Grafana