eSimplicity is seeking an experienced DevSecOps Engineer to join their team supporting the Centers for Medicare and Medicaid Services (CMS). The role involves integrating security best practices and automation into CI/CD pipelines and cloud infrastructure within a large-scale AWS environment to ensure the security and compliance of critical healthcare systems.
Requirements
- Strong hands-on experience with AWS services and cloud security principles.
- Proficiency with Infrastructure as Code (IaC) tools, specifically Terraform and Terragrunt.
- Demonstrated experience building and managing CI/CD pipelines, preferably with GitHub Actions.
- Solid understanding of containerization technologies, including Docker security.
- Proficiency in at least one scripting language, such as Python or Bash.
- Familiarity with federal compliance frameworks like FISMA and NIST.
- Expertise in security best practices with an emphasis on AWS: IAM policies/Roles, security groups and network security.
Responsibilities
- Design, build, and maintain secure CI/CD pipelines using GitHub Actions to deliver applications and infrastructure.
- Embed security controls, tools (SAST, DAST, SCA), and processes throughout the software development lifecycle.
- Manage and secure cloud infrastructure using Infrastructure as Code (IaC) with Terraform and Terragrunt.
- Implement and manage security for containerized applications using Docker.
- Collaborate with development teams (Java, Python, Django) to identify and remediate security vulnerabilities in code and dependencies.
- Automate security monitoring, logging, and incident response procedures within the AWS cloud environment.
- Ensure systems and applications meet federal compliance standards (e.g., FISMA, NIST) and CMS-specific security requirements.
Other
- All candidates must pass public trust clearance through the U.S. Federal Government.
- Minimum of 8 years of previous DevOps Engineer experience.
- Proven experience in a DevSecOps, DevOps, or Security Engineering role.
- Must be a U.S. Citizen or Green Card holder and able to obtain a Public Trust clearance.
- Occasional travel for training and project meetings. It is estimated to be less than 25% per year.
