Job description

About Us: eSimplicity is a modern digital services company that partners with government agencies to improve the lives and protect the well-being of all Americans, from veterans and service members to children, families, and seniors. Our engineers, designers, and strategists cut through complexity to create intuitive products and services that equip federal agencies with solutions to courageously transform today for a better tomorrow. We are seeking an experienced Senior DevOps Engineer to join our team supporting the Centers for Medicare and Medicaid Services (CMS). In this role, you will be responsible for integrating security best practices and automation into our CI/CD pipelines and cloud infrastructure. You will work within a large-scale AWS environment that supports Big Data processing, web applications, and various reporting tools, ensuring the security and compliance of critical healthcare systems. Responsibilities: · Design, build, and maintain secure CI/CD pipelines using GitHub Actions to deliver applications and infrastructure. · Embed security controls, tools (SAST, DAST, SCA), and processes throughout the software development lifecycle. · Manage and secure cloud infrastructure using Infrastructure as Code (IaC) with Terraform and Terragrunt. · Implement and manage security for containerized applications using Docker. · Collaborate with development teams (Java, Python, Django) to identify and remediate security vulnerabilities in code and dependencies. · Automate security monitoring, logging, and incident response procedures within the AWS cloud environment. · Ensure systems and applications meet federal compliance standards (e.g., FISMA, NIST) and CMS-specific security requirements. · Support the security of data platforms and services, including Databricks and Redshift. · Work with cross-functional teams to foster a culture of security awareness and best practices. Requirements • All candidates must pass public trust clearance through the U.S. Federal Government. This requires candidates to either be U.S. citizens or pass clearance through the Foreign National Government System which will require that candidates have lived within the United States for at least 3 out of the previous 5 years, have a valid and non-expired passport from their country of birth and appropriate VISA/work permit documentation. • Bachelor’s degree in Computer Science, Engineering, or a related technical field; OR • In lieu of a degree, 10 additional years of relevant professional experience AND 8 years of specialized experience may be substituted. • 8+ years of DevOps Engineer experience. • Proven experience in a DevSecOps, DevOps, or Security Engineering role. • Strong hands-on experience with AWS services and cloud security principles. • Proficiency with Infrastructure as Code (IaC) tools, specifically Terraform and Terragrunt. • Demonstrated experience building and managing CI/CD pipelines, preferably with GitHub Actions. • Solid understanding of containerization technologies, including Docker security. • Proficiency in at least one scripting language, such as Python or Bash. Desired Qualifications: • Prior experience supporting CMS or other federal government agencies. • Familiarity with federal compliance frameworks like FISMA and NIST. • Experience with build tools such as Maven. • Knowledge of data platforms and warehousing solutions like Databricks and Redshift. • Experience securing web applications built with frameworks like Django. • Familiarity with tools in our stack, including Chompy. • Relevant industry certifications (e.g., AWS Certified Security - Specialty, CISSP, GSEC) • Experience Administering/Sizing Clusters, such as Redshift/DataBricks/Hadoop. • Experience configuring and maintaining DevSecOps tools, infrastructure automation, and security scanning solutions (e.g., Nessus, BurpSuite, OWASP, etc.). • Expertise in security best practices with an emphasis on AWS: IAM policies/Roles, security groups and network security. Working Environment: eSimplicity supports a remote work environment operating within the Eastern time zone so we can work with and respond to our government clients. Expected hours are 9:00 AM to 5:00 PM Eastern unless otherwise directed by your manager. Occasional travel for training and project meetings. It is estimated to be less than 5% per year. Benefits: eSimplicity offers a comprehensive benefits package, including medical, dental, and vision coverage, 401(k) retirement benefits, paid time off, paid holidays, life and disability insurance, and additional wellness and employee support programs. Eligibility may vary based on employment status and applicable plan terms. Reasonable Accommodation: eSimplicity is committed to providing reasonable accommodations to qualified individuals with disabilities during the application and hiring process. Applicants who need assistance or an accommodation should contact Human Resources. Equal Employment Opportunity: eSimplicity is an Equal Opportunity Employer, including disability and protected veteran status. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran status, disability, or any other legally protected status.

Requirements

Must-haves

Design, build, and maintain secure CI/CD pipelines using GitHub Actions to deliver applications and infrastructure.
Embed security controls, tools (SAST, DAST, SCA), and processes throughout the software development lifecycle.
Manage and secure cloud infrastructure using Infrastructure as Code (IaC) with Terraform and Terragrunt.
Implement and manage security for containerized applications using Docker.
Collaborate with development teams (Java, Python, Django) to identify and remediate security vulnerabilities in code and dependencies.
Automate security monitoring, logging, and incident response procedures within the AWS cloud environment.
Ensure systems and applications meet federal compliance standards (e.g., FISMA, NIST) and CMS-specific security requirements.
Support the security of data platforms and services, including Databricks and Redshift.
Work with cross-functional teams to foster a culture of security awareness and best practices.
Bachelor’s degree in Computer Science, Engineering, or a related technical field; OR
In lieu of a degree, 10 additional years of relevant professional experience AND 8 years of specialized experience may be substituted.
8+ years of DevOps Engineer experience.
Proven experience in a DevSecOps, DevOps, or Security Engineering role.
Strong hands-on experience with AWS services and cloud security principles.

Nice-to-haves

Prior experience supporting CMS or other federal government agencies.
Familiarity with federal compliance frameworks like FISMA and NIST.
Experience with build tools such as Maven.
Knowledge of data platforms and warehousing solutions like Databricks and Redshift.
Experience securing web applications built with frameworks like Django.
Familiarity with tools in our stack, including Chompy.
Relevant industry certifications (e.g., AWS Certified Security - Specialty, CISSP, GSEC)
Experience Administering/Sizing Clusters, such as Redshift/DataBricks/Hadoop.
Experience configuring and maintaining DevSecOps tools, infrastructure automation, and security scanning solutions (e.g., Nessus, BurpSuite, OWASP, etc.).
Expertise in security best practices with an emphasis on AWS: IAM policies/Roles, security groups and network security.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

ci/cdawsdockerjavapython

Platform: paylocity
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Wellness