DevSecOps Lead - Remote (WFH)

Cognitive Medical Systems; Northern (KY); Hybrid; USD 115,000 - 145,000; Full time

Job summary

Cognitive Medical Systems seeks a DevSecOps Lead to own the CI/CD pipeline, infrastructure as code, and security scanning for the CMS DDPS and PRS systems. This remote role supports a US-based contract with multi-AZ AWS environments and federal compliance requirements.

You will coach development teams on DevSecOps practices, maintain enterprise tools (GitHub, Jenkins, Artifactory/XRay, SonarQube, Snyk), and drive performance metrics and security controls across sprint teams.

Qualifications

• Bachelor's degree in Computer Science or related field; 8+ years in DevOps/DevSecOps.
• 4+ years owning CI/CD for a production federal system.
• Hands-on with Jenkins/CloudBees, JFrog Artifactory/XRay, SonarQube, Snyk, and GitHub.
• AWS CloudFormation for IaC across multi-AZ production environments; EC2, Lambda, SSM, VPC, IAM, Secrets Manager.
• Monitoring tools: CloudWatch, Splunk, Splunk On-Call, New Relic, DataDog.
• Experience with federal ATO, FISMA, and CMS ARS compliance processes.
• Scripting in Bash, Groovy, YAML; Linux environments (RHEL/CentOS/Amazon Linux 2).
• SAFe environment including PI Planning and Agile Release Train.

Responsibilities

• Own the CI/CD pipeline, IaC, and security scanning across all environments.
• Maintain pipelines using CMS enterprise tools: GitHub, Jenkins/CloudBees, JFrog Artifactory/XRay, SonarQube, and Snyk.
• Maintain infrastructure as code using AWS CloudFormation across multi-AZ production environments (EC2, Lambda, VPC).
• Automate integration, testing, and deployments; support BDD/TDD practices and post-implementation validation testing.
• Track real-time metrics via CloudWatch, Splunk, New Relic, DataDog.
• Coordinate security scanning and ATO compliance with Nessus, TrendMicro, CrowdStrike, AWS Inspector, SecurityHub, GuardDuty, CloudTrail.
• Lead DevSecOps coaching and ensure timely release deliverables.

Skills

CI/CD ownership

Jenkins/CloudBees

Artifactory/XRay

SonarQube

Snyk

AWS CloudFormation

CloudWatch

Splunk

New Relic

DataDog

FISMA compliance

Bash/Groovy

YAML scripting

SAFe Agile

Public trust background

Education

Bachelor's degree in Computer Science or related field

Tools

GitHub

Jenkins/CloudBees

JFrog Artifactory/XRay

SonarQube

Snyk

AWS CloudFormation

CloudWatch

Splunk

New Relic

DataDog

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full-Time US

Salary Range: $115,000.00 To $145,000.00 Annually

About Cognitive:

Cognitive is an IT and software engineering services company dedicated to elevating the quality, speed and delivery of today’s US government healthcare programs. With a wealth of clinical expertise and hands-on experience, our team understands the significant challenges our government clients—and their customers—face every day. This real-world experience equips us to develop IT solutions that seamlessly connect all facets of healthcare delivery. At Cognitive, we’re guiding government agencies to the forefront of technology innovation in healthcare delivery.

Position Overview:

*This position is contingent upon contract award*

The DevSecOps Lead is responsible for the CI/CD pipeline, infrastructure as code, and security scanning for the CMS Drug Data Processing System (DDPS) and Payment Reconciliation System (PRS). This individual owns the end-to-end DevSecOps capability, enabling continuous integration and delivery using CMS enterprise tools, maintaining the ATO compliance chain, and driving DevSecOps standardization across all sprint teams within the CMS Lean-Agile Release Train.

This is a remote position; however, Cognitive hires only in the following designated U.S. states based on contract and business requirements: VA, DC, MD, TN, FL, AZ, CO, OR, and TX.

Key Responsibilities:

• Own the CI/CD pipeline, infrastructure as code, and security scanning across all DDPS/PRS environments.
• Maintain andoptimize CI/CD pipelines using CMS enterprise tools: GitHub, Jenkins/CloudBees, JFrog Artifactory/XRay, SonarQube, and Snyk.
• Maintain infrastructure as code using AWS CloudFormation across multi-AZ Production and Non-Production VPCs including EC2, Lambda, and VPC configurations.
• Automate integration, testing, and deployments across environments; support BDD and TDD practices and post-implementation validation testing.
• Track real-time operational metrics like PDE volumes, error rates, reconciliation accuracy, & uptime via CloudWatch, Splunk, Splunk On-Call, New Relic, and DataDog .
• Coordinate security scanning and ATO compliance with Nessus, TrendMicro, CrowdStrike, AWS Inspector,SecurityHub, GuardDuty, and CloudTrail.
• Support CMS ATO compliance including SSP maintenance and vulnerability remediation within CMS-defined timelines.
• Lead coaching of development teams on DevSecOps practices; adhere to project schedule and submit Release Deliverables as required.

Qualifications:

• Bachelor's degree in Computer Scienceor related field; 8 or more years in DevOps orDevSecOps, including 4 or more years owning CI/CD for aproduction federal system.
• Hands-on expertise with Jenkins/CloudBees, JFrog Artifactory/XRay, SonarQube, Snyk, and GitHub.
• Hands-on AWS CloudFormation for infrastructure as code across multi-AZ production environments; experience with EC2, Lambda, Systems Manager, VPC, IAM, and Secrets Manager.
• Experience with monitoring tools: AWS CloudWatch, Splunk, Splunk On-Call/VictorOps, New Relic, andDataDog.
• Working knowledge of federal ATO, FISMA, and CMS ARS compliance processes including vulnerability remediation timelines.
• Experience with Bash, Groovy, and YAML scripting; Linux environments (RHEL, CentOS, Amazon Linux 2).
• Experience within a SAFe environment including PI Planning and Agile Release Train delivery.
• Ability to pass CMS and internal required background checks for public trust.
• Preferred certification - AWS Certified DevOps Engineer – Professional

Why Join Us?

• Be part of a mission-driven organization making a difference in healthcare IT.
• Collaborate with innovative and passionate professionals that are there to support you at every turn.
• Enjoy a supportive work/life balance with the flexibility of a 100% remote company.
• Benefit from opportunities for growth and development in a dynamic environment.