DevSecOps Lead - Remote (WFH)
About The Position
This position is contingent upon contract award. The Solution Architect is responsible for technical architecture, cloud infrastructure, and the DevSecOps pipeline for the CMS Drug Data Processing System (DDPS) and Payment Reconciliation System (PRS). This individual is the AWS and data platform anchor for the program, owning the overall DDPS/PRS technical architecture including multi-AZ VPC topology, Snowflake/Redshift/Databricks/Athena data platform, Airflow orchestration, IDR/BEQ interfaces, and cloud modernization strategy and ensuring all solutions align with CMS Technical Reference Architecture (TRA) and Acceptable Risk Safeguards (ARS). This is a remote position; however, Cognitive hires only in the following designated U.S. states based on contract and business requirements: VA, DC, MD, TN, FL, AZ, CO, OR, and TX.
Requirements
- Bachelor's degree in Computer Science, Engineering, or related field; 10 or more years in solution or enterprise architecture, including 5 or more years architecting on AWS.
- AWS Solutions Architect Professional certification or demonstrated equivalent depth of AWS expertise.
- Hands-on production fluency across the DDPS data platform stack: Snowflake, AWS Redshift Serverless, Databricks (Notebooks, Jobs, AutoML), Amazon Athena, AWS MWAA/Apache Airflow, Amazon S3, AWS Lambda, and VPC/PrivateLink networking.
- Deep expertise in AWS computes services: EC2, EBS, Lambda, Systems Manager, VPC, IAM, and Secrets Manager.
- Experience with AWS messaging and orchestration services: EventBridge, SQS, SNS, and SES.
- Demonstrated experience ensuring solutions comply with CMS TRA, ARS, FISMA, and NIST standards in a federal cloud environment.
- Experience with multi-AZ, high-availability AWS architectures supporting high-volume batch processing systems.
- Experience designing API integrations and multi-cloud data sharing solutions for federal programs.
- Experience with AWS security and compliance tools: GuardDuty, SecurityHub, Inspector, CloudTrail, Config, and CloudFormation.
- Ability to pass CMS and internal required background checks for public trust.
Responsibilities
- Own DDPS/PRS technical architecture, cloud infrastructure design, and DevSecOps pipeline oversight; ensure all solutions align with CMS Technical Reference Architecture (TRA), Acceptable Risk Safeguards (ARS), FISMA, and NIST standards.
- Architect and maintain the full CMS AWS environment including multi-AZ VPC topology, AWS PrivateLink endpoints, EC2 App Servers and Worker Nodes, Lambda Serverless, S3, SQS, Route 53, and Systems Manager across Production and Non-Production VPCs.
- Design, optimize, and maintain the DDPS data platform: Snowflake (IDRC data), AWS Redshift Serverless (ODS), Amazon Athena, AWS MWAA/Apache Airflow, and Databricks (Data Plane and Control Plane).
- Drive cloud optimization and cost strategy; recommend service substitutions and consolidations; architect API and multi-cloud data sharing integrations for CMS and downstream stakeholders.
- Maintain IDR compatibility, AWS networking and security services (WAF, GuardDuty, SecurityHub, Inspector, CloudTrail, Config, CloudFormation), and collaborate with the DevSecOpsLead on ATO compliance.
- Support CMS AI/ML initiatives including data preparation, model implementation, and validation within CMS AI governance requirements; participate in CMS-led proofs of concept and architectural evaluations.
- Ensure high-availability, multi-AZ architecture for a system processing 9–10 million PDE transactions daily; integrate with AWS messaging services including EventBridge, SQS, SNS, and SES.
Benefits
- Opportunities for growth and development in a dynamic environment.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
