DevSecops Engineer (Salesforce)

Job Title: DevSecOps Engineer

Position Summary

The DevSecOps Engineer supports the Operations & Maintenance Systems Development Manager in maintaining the security, reliability, and performance of CMS MESH project

This role focuses on implementing and supporting CI/CD pipelines, AWS cloud infrastructure, monitoring, and security practices across mission-critical systems. The engineer will also provide limited support to emerging initiatives leveraging Salesforce, including CI/CD and release processes using Copado.

Key Responsibilities

• Support the implementation and maintenance of CI/CD pipelines using Jenkins and GitHub Actions.
• Assist with release management activities, including deployments, validation, and rollback support across environments.
• Maintain and support AWS cloud environments using services and frameworks such as AWS Cloud Development Kit.
• Monitor system health, performance, and availability using Datadog, Splunk, and Amazon CloudWatch, and respond to alerts and incidents.
• Assist in implementing security controls within CI/CD pipelines, including code scanning, dependency checks, and vulnerability remediation.
• Support identity and access management integrations using Okta, AWS Cognito, and Security Assertion Markup Language (SAML).
• Participate in incident response, troubleshooting, and root-cause analysis to maintain system reliability.
• Assist with infrastructure-as-code (IaC) development and maintenance under guidance from senior engineers.
• Collaborate with DevOps, security, and development teams on system integration and migration efforts.
• Provide secondary support for Salesforce-related DevOps activities, including assisting with deployments and version control processes using Copado.
• Participate in Agile and SAFe ceremonies such as daily standups, sprint planning, and retrospectives.
• Maintain documentation for operational procedures, deployment processes, and security controls.

Required Skills and Qualifications

• 10 years of experience in DevOps, DevSecOps, cloud engineering, or a related role.
• Hands-on experience or familiarity with CI/CD tools such as Jenkins and/or GitHub Actions.
• Experience working with AWS cloud services and infrastructure-as-code tools such as AWS Cloud Development Kit, Terraform, or CloudFormation.
• Exposure to monitoring and logging tools such as Datadog, Splunk, or Amazon CloudWatch.
• Understanding of DevSecOps principles, including secure coding and vulnerability management.
• Familiarity with authentication technologies such as Okta, AWS Cognito, or Security Assertion Markup Language (SAML).
• Experience with scripting (Python, Bash, or similar).
• Basic understanding of containerization (Docker) and/or orchestration (Kubernetes).
• Familiarity with Agile methodologies.

Preferred Qualifications

• Exposure to Salesforce environments and DevOps tools such as Copado.
• Experience supporting federal or regulated environments (e.g., CMS, healthcare, or financial systems).
• Familiarity with security frameworks (NIST, FISMA) and ATO processes.
• Experience with Linux/Unix environments.
• Relevant certifications (nice to have):
  • AWS Certified Developer or Cloud Practitioner
  • CompTIA Security+
  • Certified Scrum Master (CSM) or SAFe certification

Reporting Structure

• Works under guidance from senior DevSecOps engineers and alongside DevOps, security, and development teams
• Supports cross-functional collaboration across CMS stakeholders and contractor teams