DevOps Engineer

GD Information Technology, Inc. is hiring a DevOps Engineer to support the Centers for Medicare & Medicaid Services (CMS) ATLAS program. The role operates and automates secure CI/CD platforms and cloud infrastructure, maintains DevOps tools, and supports application teams and platform reliability.

Responsibilities:

• You will install, configure, operate and maintain DevOps tools, CI/CD build agents and supporting server, container and cloud infrastructure under the direction of senior engineering staff
• Perform tool upgrades, patching, backups, user and access provisioning, and license management
• Monitor system health, utilization and logs, and respond to alerts and incidents, escalating complex issues as required
• You will also develop scripts to automate routine tasks, maintain system documentation and runbooks, and support application teams onboarding to tools and pipelines
• Collaborating with developers, senior engineers, security teams, and CMS stakeholders to improve platform reliability, developer experience, and software-delivery outcomes
• Operating and optimizing CloudBees CI on AWS EKS, including Jenkins controllers, Kubernetes build agents, GitHub integrations, and pipelines supporting approximately 70,000 builds per month
• Administering Grafana, Prometheus, SonarQube, JMaaS, and Structurizr while maintaining dashboards, alerts, quality gates, performance tests, access controls, and platform integrations
• Automating infrastructure, configuration, testing, security scanning, and deployments; monitoring platform health and resolving build, deployment, telemetry, and environment issues
• Applying CMS and NIST security requirements, supporting continuous ATO activities, and maintaining runbooks, architecture diagrams, pipeline documentation, and release and change records

Requirements:

• 5 + years of related experience
• Ability to obtain and maintain a Public Trust clearance
• Bachelor's degree in computer science, information technology, engineering, or a related field; additional relevant experience may be considered in place of a degree
• 5+ years of experience in DevOps, DevSecOps, CI/CD engineering, cloud operations, platform engineering, or systems administration
• Experience building and operating CI/CD pipelines using CloudBees CI, Jenkins, or a comparable enterprise platform
• Experience with AWS, Linux, Docker, Kubernetes or EKS, GitHub integrations, and dynamically provisioned build agents
• Experience with infrastructure as code and automation using Terraform, CloudFormation, Ansible, Packer, Python, Bash, or comparable technologies
• Experience integrating automated testing, code-quality controls, vulnerability scanning, and container security into CI/CD pipelines
• Experience with monitoring, logging, alerting, incident response, patching, secure configurations, and vulnerability remediation
• Understanding of CMS or federal security requirements, NIST guidance, FISMA controls, and ATO processes
• Strong analytical and troubleshooting skills across pipelines, applications, containers, observability platforms, and cloud infrastructure
• Relevant AWS, CloudBees, Kubernetes, Grafana, SonarQube, DevOps, or security certification
• Experience administering CloudBees Jenkins Operations Center, managed controllers, and Kubernetes-based build agents at enterprise scale
• Experience with Grafana, Prometheus, SonarQube, JMeter/JMaaS, Structurizr, Artifactory, Xray, or test-management platforms
• Experience creating dashboards, Prometheus scrape targets, alerting rules, SonarQube Quality Gates, and performance-test integrations
• Familiarity with SSO, SAML, LDAP, RBAC, secrets management, and least-privilege access
• Experience with high availability, zero-downtime upgrades, SRE practices, DORA metrics, and AWS cost optimization
• Experience supporting CMS or another federal agency within continuous A&A, FISMA, and ATO boundaries
• Experience supporting CMS, federal healthcare, or another federal government environment
• Familiarity with CMS information security requirements and federal security and compliance frameworks