Staff Engineer, DevSecOps

Team you will be joining

The Centers for Medicare & Medicaid Services (CMS) is enhancing program integrity efforts to combat fraud, waste, and abuse (FWA) within Medicare and Medicaid. The Unified Case Management (UCM) system serves as a centralized application for Program Integrity Contractors, facilitating case tracking, audits, investigations, and workload management. UCM supports coordinated efforts to prevent FWA and ensure compliance through efficient lead management, investigative actions, and reporting. As part of CMS’s modernization initiative, we are transforming UCM into a modern, scalable architecture that enhances performance, security, and usability. This effort includes migrating to cloud-based solutions, improving system interoperability, and adopting cutting-edge technologies to streamline workflows and improve data-driven decision-making. Our goal is to ensure a more robust, efficient, and future-ready platform for program integrity operations.

As a DevSecOps Engineer, you will:

Influence: Make an impact across projects and products by improving security, reliability, and delivery.

Technology: Apply strong expertise in DevSecOps, AWS, CI/CD, Infrastructure as Code, containers, automation, and security.

System: Scope, design, and deliver medium-to-large initiatives while reducing technical debt, risk, and operational complexity.

People: Support and mentor team members by sharing knowledge and promoting collaboration.

Process: Follow and improve engineering and DevSecOps practices to enable a secure, reliable flow of features to production.

These are the types of things you’ll be working on

• Design, develop, test, deploy, and maintain scalable, secure, and high-quality software services, with an emphasis on backend systems, microservices, and APIs.

• Participate in architecture and design discussions, providing expertise on cloud architecture, application security, scalability, reliability, and appropriate technologies and frameworks.

• Build and maintain CI/CD pipelines that automate software build, test, security validation, deployment, and release processes across development and production environments.

• Implement and maintain Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or equivalent technologies to provision and manage AWS infrastructure consistently and securely.

• Develop and manage containerized applications and supporting platforms using technologies such as Docker and Kubernetes/EKS.

• Apply DevSecOps practices by integrating security controls, automated security testing, vulnerability scanning, secrets management, and compliance checks throughout the software development lifecycle.

• Deploy and maintain observability solutions for microservices and APIs, including centralized logging, metrics, distributed tracing, alerting, and performance monitoring.

• Troubleshoot complex application, infrastructure, deployment, and production issues; perform root-cause analysis and implement preventative improvements.

• Conduct code, architecture, infrastructure, and security reviews to identify risks, vulnerabilities, reliability concerns, and opportunities for improvement.

• Participate in vulnerability management, threat assessments, security reviews, and remediation activities across applications, containers, dependencies, and AWS infrastructure.

• Implement and maintain AWS security, compliance, governance, and access-control practices in accordance with organizational policies and applicable industry standards.

• Develop and maintain technical documentation, including architecture diagrams, deployment procedures, runbooks, API documentation, security controls, and operational procedures.

• Collaborate with software engineers, architects, security teams, infrastructure teams, and other stakeholders to establish secure and reliable engineering practices.

• Mentor engineers and promote a culture of automation, security, reliability, continuous improvement, and knowledge sharing.

• Evaluate emerging technologies and recommend tools and practices that improve engineering productivity, security, scalability, and operational efficiency.

• Contribute to technical estimation, prioritization, planning, and delivery of engineering initiatives.

Tech used, but not limited to:
Python & Kubernetes required
Groovy
Bash
Go
Maven
Jenkins
Terraform
Docker

Nice to have
Experience working on a large-scale, production-ready systems
PostgresSQL
Github Actions
Camunda
FHIR
AI/ML