Senior DevOps Engineer

This is a fully remote position, open to applicants in Maryland.

📋 Description

• Design, develop, and sustain secure CI/CD pipelines utilizing GitHub Actions.

• Integrate security measures, SAST, DAST, SCA tools, and processes throughout the software development lifecycle.

• Oversee and secure AWS cloud infrastructure through Terraform and Terragrunt.

• Implement and safeguard security for applications that are containerized with Docker.

• Collaborate with development teams in Java, Python, and Django to identify and address security vulnerabilities in code and dependencies.

• Automate security monitoring, logging, and incident response protocols within AWS.

• Ensure that systems and applications comply with FISMA, NIST, and CMS-specific security standards.

• Assist in securing data platforms and services, including Databricks and Redshift.

• Work alongside cross-functional teams to promote security awareness and best practices.

• Provide support to the Centers for Medicare and Medicaid Services (CMS) in the protection of critical healthcare systems.

⛳️ Requirements

• Must successfully pass public trust clearance through the U.S. Federal Government.

• Must be a U.S. citizen or obtain clearance through the Foreign National Government System.

• Candidates under the Foreign National Government System must have resided in the United States for at least 3 of the last 5 years.

• Candidates under the Foreign National Government System must possess a valid, non-expired passport from their country of origin and appropriate visa/work permit documentation.

• Bachelor’s degree in Computer Science, Engineering, or a related technical discipline; or, in lieu of a degree, 10 additional years of pertinent professional experience and 8 years of specialized expertise.

• Over 8 years of experience as a DevOps Engineer.

• Demonstrated experience in a DevSecOps, DevOps, or Security Engineering capacity.

• Strong practical experience with AWS services and principles of cloud security.

• Proficient in Infrastructure as Code tools, particularly Terraform and Terragrunt.

• Experience in constructing and managing CI/CD pipelines, ideally with GitHub Actions.

• Understanding of containerization technologies, including security aspects of Docker.

• Proficient in at least one scripting language, such as Python or Bash.

• Familiarity with federal compliance frameworks such as FISMA and NIST.

• Experience with build tools like Maven.

• Knowledge of data platforms and warehousing solutions including Databricks and Redshift.

• Experience in securing web applications developed with frameworks like Django.

• Experience in administering/sizing clusters such as Redshift, Databricks, or Hadoop.

• Experience in configuring and maintaining DevSecOps tools, infrastructure automation, and security scanning solutions such as Nessus, BurpSuite, or OWASP.

• Expertise in AWS security best practices, including IAM policies/roles, security groups, and network security.

• Desired: Prior experience supporting CMS or other federal government entities.

• Desired: Familiarity with tools in the stack, including Chompy.

• Desired: Relevant industry certifications such as AWS Certified Security - Specialty, CISSP, or GSEC.

🏝️ Benefits

• Medical coverage.

• Dental coverage.

• Vision coverage.

• 401(k) retirement benefits.

• Paid time off.

• Paid holidays.

• Life insurance.

• Disability insurance.

• Wellness and employee support programs.

• Remote work environment.

• Occasional travel for training and project meetings, estimated at less than 5% per year.