Senior DevOps Engineer

Role Overview

Senior DevOps Engineer supporting the Centers for Medicare and Medicaid Services (CMS). You will integrate security best practices and automation into CI/CD pipelines and cloud infrastructure within a large-scale AWS environment for healthcare systems.

Responsibilities

• Design, build, and maintain secure CI/CD pipelines using GitHub Actions.
• Embed security controls across the SDLC, including SAST, DAST, and SCA.
• Manage and secure cloud infrastructure using Infrastructure as Code (IaC) with Terraform and Terragrunt.
• Implement and manage security for containerized applications using Docker.
• Collaborate with development teams (e.g., Java, Python, Django) to remediate security vulnerabilities in code and dependencies.
• Automate security monitoring, logging, and incident response in AWS.
• Ensure compliance with federal requirements (e.g., FISMA, NIST) and CMS security requirements.
• Support security for data platforms and services, including Databricks and Redshift.
• Work with cross-functional teams to promote security awareness and best practices.

Requirements

• Public Trust clearance required (U.S. citizenship and ability to obtain clearance; also references green card eligibility and U.S. residency/history for foreign national clearance paths).
• 8+ years of DevOps Engineer experience.
• Proven experience in DevSecOps/DevOps/Security Engineering.
• Strong hands-on experience with AWS and cloud security principles.
• Proficiency with IaC: Terraform and Terragrunt.
• Experience building/managing CI/CD pipelines, preferably with GitHub Actions.
• Solid understanding of containerization and Docker security.
• Proficiency in scripting (e.g., Python or Bash).

Nice-to-haves

• Experience supporting CMS or other federal agencies.
• Familiarity with FISMA and NIST.
• Experience with build tools such as Maven.
• Knowledge of data platforms/warehousing: Databricks and Redshift.
• Experience securing web applications (e.g., Django).
• Familiarity with tools in the stack (mentions Chompy).
• Relevant certifications (e.g., AWS Certified Security – Specialty, CISSP, GSEC).
• Cluster administration/sizing experience (Redshift/DataBricks/Hadoop).
• Experience with DevSecOps tools and security scanning (e.g., Nessus, BurpSuite, OWASP).