DevSecOps Engineer

Role Overview

Oddball is hiring a DevSecOps Engineer to join its CMS BDAMAX team, supporting a federal program that improves the Medicare experience. You’ll help embed security into engineering workflows, automate security/compliance responses, and support secure infrastructure and CI/CD practices.

What You’ll Be Doing

• Develop automated response patterns for security alerts and compliance drift.
• Integrate vulnerability findings into remediation workflows.
• Support audit readiness, control validation, and remediation tracking for regulated data environments.
• Assist with security incident response, including root cause analysis and preventative automation.
• Embed security controls into CI/CD pipelines, including:
  • automated scanning
  • secrets detection
  • compliance validation
• Provision and manage infrastructure using Terraform, emphasizing reusable modules and secure configuration baselines.
• Apply security best practices for enterprise adoption of AI engineering platforms, including Amazon Bedrock, GitHub Copilot, Gemini, and Cursor.
• Implement governance controls for secure AI usage (sensitive data handling, prompt security standards, and access control boundaries).
• Partner with DevOps, Security, Architecture, and Development teams to implement secure engineering patterns.
• Contribute to internal tooling that supports development and operational workflows.

What You’ll Bring

• Hands-on experience with AWS and related services, including EKS, ECS, Fargate, EC2, S3, RDS (Aurora PostgreSQL), and Secrets Manager.
• Experience building and maintaining CI/CD pipelines with Jenkins.
• Proficiency with Terraform for infrastructure provisioning and environment management.
• Familiarity with Argo Workflows in containerized environments.
• Experience with AWS Security Hub, certificate management, and secure access practices.
• Understanding of AWS VPC networking, Route 53, and cross-account access.
• Familiarity with federal security compliance frameworks such as FISMA and FedRAMP.
• Enjoys remote, collaborative Agile work and communicates clearly with cross-functional teams.
• Must be authorized to work in the United States; some roles may require U.S. citizenship and the ability to obtain/maintain a federal background investigation and/or security clearance.

Location / Work Model

• Fully remote

Compensation

• $90,000 – $135,000 USD (annual wage range)