Environment variables with different values for each deployment environment

We'd like the ability to define environment variables with more granularity than at the repository level.

Ideally we'd like the option to specify environment variables at a step level and a pipeline level. Something akin to CIrcleCI - https://circleci.com/docs/2.0/env-vars/

This would support having secure environment variables with different credentials for each deployment environment.