Senior DevOps Engineer

eSimplicity•Columbia, MD

2d•Remote

About The Position

eSimplicity is a modern digital services company that partners with government agencies to improve the lives and protect the well-being of all Americans, from veterans and service members to children, families, and seniors. Our engineers, designers, and strategists cut through complexity to create intuitive products and services that equip federal agencies with solutions to courageously transform today for a better tomorrow. We are seeking an experienced Senior DevOps Engineer to join our team supporting the Centers for Medicare and Medicaid Services (CMS). In this role, you will be responsible for integrating security best practices and automation into our CI/CD pipelines and cloud infrastructure. You will work within a large-scale AWS environment that supports Big Data processing, web applications, and various reporting tools, ensuring the security and compliance of critical healthcare systems.

Requirements

All candidates must pass public trust clearance through the U.S. Federal Government. This requires candidates to either be U.S. citizens or pass clearance through the Foreign National Government System which will require that candidates have lived within the United States for at least 3 out of the previous 5 years, have a valid and non-expired passport from their country of birth and appropriate VISA/work permit documentation.
8+ years of previous DevOps Engineer experience.
Bachelor’s degree in Computer Science, Engineering, or a related technical field; OR In lieu of a degree, 10 additional years of relevant professional experience and 8 years of specialized experience may be substituted.
Proven experience in a DevSecOps, DevOps, or Security Engineering role.
Strong hands-on experience with AWS services and cloud security principles.
Proficiency with Infrastructure as Code (IaC) tools, specifically Terraform and Terragrunt.
Demonstrated experience building and managing CI/CD pipelines, preferably with GitHub Actions.
Solid understanding of containerization technologies, including Docker security.
Proficiency in at least one scripting language, such as Python or Bash.
Must be a U.S. Citizen or Green Card holder and able to obtain a Public Trust clearance.

Nice To Haves

Prior experience supporting CMS or other federal government agencies.
Familiarity with federal compliance frameworks like FISMA and NIST.
Experience with build tools such as Maven.
Knowledge of data platforms and warehousing solutions like Databricks and Redshift.
Experience securing web applications built with frameworks like Django.
Familiarity with tools in our stack, including Chompy.
Relevant industry certifications (e.g., AWS Certified Security - Specialty, CISSP, GSEC)
Experience Administering/Sizing Clusters, such as Redshift/DataBricks/Hadoop.
Experience configuring and maintaining DevSecOps tools, infrastructure automation, and security scanning solutions (e.g., Nessus, BurpSuite, OWASP, etc.).
Expertise in security best practices with an emphasis on AWS: IAM policies/Roles, security groups and network security.

Responsibilities

Design, build, and maintain secure CI/CD pipelines using GitHub Actions to deliver applications and infrastructure.
Embed security controls, tools (SAST, DAST, SCA), and processes throughout the software development lifecycle.
Manage and secure cloud infrastructure using Infrastructure as Code (IaC) with Terraform and Terragrunt.
Implement and manage security for containerized applications using Docker.
Collaborate with development teams (Java, Python, Django) to identify and remediate security vulnerabilities in code and dependencies.
Automate security monitoring, logging, and incident response procedures within the AWS cloud environment.
Ensure systems and applications meet federal compliance standards (e.g., FISMA, NIST) and CMS-specific security requirements.
Support the security of data platforms and services, including Databricks and Redshift.
Work with cross-functional teams to foster a culture of security awareness and best practices.