Job Description

Job Title: DevSecOps Engineer

Position Summary

The DevSecOps Engineer supports the Operations & Maintenance Systems Development Manager in maintaining the security, reliability, and performance of CMS MESH project

This role focuses on implementing and supporting CI/CD pipelines, AWS cloud infrastructure, monitoring, and security practices across mission-critical systems. The engineer will also provide limited support to emerging initiatives leveraging Salesforce, including CI/CD and release processes using Copado.

Key Responsibilities

Support the implementation and maintenance of CI/CD pipelines using Jenkins and GitHub Actions.
Assist with release management activities, including deployments, validation, and rollback support across environments.
Maintain and support AWS cloud environments using services and frameworks such as AWS Cloud Development Kit.
Monitor system health, performance, and availability using Datadog, Splunk, and Amazon CloudWatch, and respond to alerts and incidents.
Assist in implementing security controls within CI/CD pipelines, including code scanning, dependency checks, and vulnerability remediation.
Support identity and access management integrations using Okta, AWS Cognito, and Security Assertion Markup Language (SAML).
Participate in incident response, troubleshooting, and root-cause analysis to maintain system reliability.
Assist with infrastructure-as-code (IaC) development and maintenance under guidance from senior engineers.
Collaborate with DevOps, security, and development teams on system integration and migration efforts.
Provide secondary support for Salesforce-related DevOps activities, including assisting with deployments and version control processes using Copado.
Participate in Agile and SAFe ceremonies such as daily standups, sprint planning, and retrospectives.
Maintain documentation for operational procedures, deployment processes, and security controls.

Required Skills And Qualifications

10 years of experience in DevOps, DevSecOps, cloud engineering, or a related role.
Hands-on experience or familiarity with CI/CD tools such as Jenkins and/or GitHub Actions.
Experience working with AWS cloud services and infrastructure-as-code tools such as AWS Cloud Development Kit, Terraform, or CloudFormation.
Exposure to monitoring and logging tools such as Datadog, Splunk, or Amazon CloudWatch.
Understanding of DevSecOps principles, including secure coding and vulnerability management.
Familiarity with authentication technologies such as Okta, AWS Cognito, or Security Assertion Markup Language (SAML).
Experience with scripting (Python, Bash, or similar).
Basic understanding of containerization (Docker) and/or orchestration (Kubernetes).
Familiarity with Agile methodologies.

Preferred Qualifications

Exposure to Salesforce environments and DevOps tools such as Copado.
Experience supporting federal or regulated environments (e.g., CMS, healthcare, or financial systems).
Familiarity with security frameworks (NIST, FISMA) and ATO processes.
Experience with Linux/Unix environments.
Relevant certifications (nice to have):

AWS Certified Developer or Cloud Practitioner
CompTIA Security+
Certified Scrum Master (CSM) or SAFe certification

Reporting Structure

Works under guidance from senior DevSecOps engineers and alongside DevOps, security, and development teams
Supports cross-functional collaboration across CMS stakeholders and contractor teams

??? people applied to this job

Report Job

Had a job search go strangely, or terribly? Tell us. We publish stories without names. Tell your story →