Senior DevOps Engineer

About Us

• eSimplicity is a modern digital services company partnering with government agencies to improve lives and protect well-being.
• Engineers, designers, and strategists create intuitive products and services for federal agencies.
• Seeking Senior DevOps Engineer to support Centers for Medicare and Medicaid Services (CMS).
• Role involves integrating security best practices and automation into CI/CD pipelines and cloud infrastructure.
• Work within large-scale AWS environment supporting Big Data processing, web applications, and reporting tools.

Responsibilities

• Design, build, and maintain secure CI/CD pipelines using GitHub Actions.
• Embed security controls, tools (SAST, DAST, SCA), and processes throughout software development lifecycle.
• Manage and secure cloud infrastructure using Infrastructure as Code (IaC) with Terraform and Terragrunt.
• Implement and manage security for containerized applications using Docker.
• Collaborate with development teams (Java, Python, Django) to identify and remediate security vulnerabilities.
• Automate security monitoring, logging, and incident response within AWS cloud environment.
• Ensure systems and applications meet federal compliance standards (FISMA, NIST) and CMS-specific requirements.
• Support security of data platforms and services including Databricks and Redshift.
• Work with cross-functional teams to foster security awareness and best practices.

Requirements

• Must pass public trust clearance through U.S. Federal Government; requires U.S. citizenship or specific residency and documentation.
• Bachelor's degree in Computer Science, Engineering, or related field; or 10 additional years relevant experience in lieu of degree.
• 8+ years DevOps Engineer experience.
• Proven experience in DevSecOps, DevOps, or Security Engineering.
• Strong hands-on experience with AWS services and cloud security principles.
• Proficiency with Infrastructure as Code tools: Terraform and Terragrunt.
• Experience building and managing CI/CD pipelines, preferably with GitHub Actions.
• Solid understanding of containerization technologies including Docker security.
• Proficiency in scripting languages such as Python or Bash.
• Must be U.S. Citizen or Green Card holder able to obtain Public Trust clearance.

Desired Qualifications

• Experience supporting CMS or other federal agencies.
• Familiarity with federal compliance frameworks like FISMA and NIST.
• Experience with build tools such as Maven.
• Knowledge of data platforms and warehousing solutions like Databricks and Redshift.
• Experience securing web applications built with Django.
• Familiarity with tools including Chompy.
• Relevant certifications (AWS Certified Security - Specialty, CISSP, GSEC).
• Experience administering/sizing clusters (Redshift, Databricks, Hadoop).
• Experience configuring and maintaining DevSecOps tools and security scanning solutions (Nessus, BurpSuite, OWASP).
• Expertise in AWS security best practices: IAM policies/roles, security groups, network security.

Working Environment

• Remote work environment within Eastern time zone.
• Expected hours 9:00 AM to 5:00 PM Eastern unless directed otherwise.
• Occasional travel for training and meetings, less than 5% per year.

Benefits

• Medical, dental, and vision coverage.
• 401(k) retirement benefits.
• Paid time off and paid holidays.
• Life and disability insurance.
• Wellness and employee support programs.

Reasonable Accommodation

• Commitment to providing reasonable accommodations to qualified individuals with disabilities during application and hiring.

Equal Employment Opportunity

• Equal Opportunity Employer including disability and protected veteran status.
• All qualified applicants considered without regard to legally protected status.