Senior DevOps Engineer

eSimplicity is a modern digital services company that partners with government agencies to improve the lives and protect the well-being of all Americans. The company is seeking an experienced Senior DevOps Engineer to support the Centers for Medicare and Medicaid Services by integrating security practices and automation into CI/CD pipelines and AWS cloud infrastructure. The role focuses on securing healthcare systems, ensuring federal compliance, and supporting cloud, containerized, and data platforms.

Responsibilities:

• Design, build, and maintain secure CI/CD pipelines using GitHub Actions to deliver applications and infrastructure
• Embed security controls, tools (SAST, DAST, SCA), and processes throughout the software development lifecycle
• Manage and secure cloud infrastructure using Infrastructure as Code (IaC) with Terraform and Terragrunt
• Implement and manage security for containerized applications using Docker
• Collaborate with development teams (Java, Python, Django) to identify and remediate security vulnerabilities in code and dependencies
• Automate security monitoring, logging, and incident response procedures within the AWS cloud environment
• Ensure systems and applications meet federal compliance standards (e.g., FISMA, NIST) and CMS-specific security requirements
• Support the security of data platforms and services, including Databricks and Redshift
• Work with cross-functional teams to foster a culture of security awareness and best practices

Requirements:

• All candidates must pass public trust clearance through the U.S. Federal Government
• This requires candidates to either be U.S. citizens or pass clearance through the Foreign National Government System which will require that candidates have lived within the United States for at least 3 out of the previous 5 years, have a valid and non-expired passport from their country of birth and appropriate VISA/work permit documentation
• Bachelor's degree in Computer Science, Engineering, or a related technical field; OR
• In lieu of a degree, 10 additional years of relevant professional experience AND 8 years of specialized experience may be substituted
• 8+ years of DevOps Engineer experience
• Proven experience in a DevSecOps, DevOps, or Security Engineering role
• Strong hands-on experience with AWS services and cloud security principles
• Proficiency with Infrastructure as Code (IaC) tools, specifically Terraform and Terragrunt
• Demonstrated experience building and managing CI/CD pipelines, preferably with GitHub Actions
• Solid understanding of containerization technologies, including Docker security
• Proficiency in at least one scripting language, such as Python or Bash
• Occasional travel for training and project meetings. It is estimated to be less than 5% per year
• Prior experience supporting CMS or other federal government agencies
• Familiarity with federal compliance frameworks like FISMA and NIST
• Experience with build tools such as Maven
• Knowledge of data platforms and warehousing solutions like Databricks and Redshift
• Experience securing web applications built with frameworks like Django
• Familiarity with tools in our stack, including Chompy
• Relevant industry certifications (e.g., AWS Certified Security - Specialty, CISSP, GSEC)
• Experience Administering/Sizing Clusters, such as Redshift/DataBricks/Hadoop
• Experience configuring and maintaining DevSecOps tools, infrastructure automation, and security scanning solutions (e.g., Nessus, BurpSuite, OWASP, etc.)
• Expertise in security best practices with an emphasis on AWS: IAM policies/Roles, security groups and network security