Design, build, and maintain secure CI/CD pipelines using GitHub Actions to deliver applications and infrastructure
Embed security controls, tools (SAST, DAST, SCA), and processes throughout the software development lifecycle
Manage and secure cloud infrastructure using Infrastructure as Code (IaC) with Terraform and Terragrunt
Implement and manage security for containerized applications using Docker
Collaborate with development teams (Java, Python, Django) to identify and remediate security vulnerabilities in code and dependencies
Automate security monitoring, logging, and incident response procedures within the AWS cloud environment
Ensure systems and applications meet federal compliance standards (e.g., FISMA, NIST) and CMS-specific security requirements
Support the security of data platforms and services, including Databricks and Redshift
Work with cross-functional teams to foster a culture of security awareness and best practices

Requirements

8+ years of previous DevOps Engineer experience
Bachelor's degree in Computer Science, Engineering, or a related technical field; OR In lieu of a degree, 10 additional years of relevant professional experience and 8 years of specialized experience may be substituted
Proven experience in a DevSecOps, DevOps, or Security Engineering role
Strong hands-on experience with AWS services and cloud security principles
Proficiency with Infrastructure as Code (IaC) tools, specifically Terraform and Terragrunt
Demonstrated experience building and managing CI/CD pipelines, preferably with GitHub Actions
Solid understanding of containerization technologies, including Docker security
Proficiency in at least one scripting language, such as Python or Bash
Must be a U.S. Citizen or Green Card holder and able to obtain a Public Trust clearance.

Benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

CI/CD pipelinesGitHub ActionsSASTDASTSCAInfrastructure as CodeTerraformTerragruntDockerAWS

Soft Skills

collaborationsecurity awarenessbest practices

Certifications

Public Trust clearance