IT Security Specialist — DevSecOps & Risk Lead

Centers-For-Medicare-and-Medicaid-Services; Woodlawn (MD); On-site; USD 108,000 - 154,000; Full time

Job summary

The Centers for Medicare & Medicaid Services (CMS) within the Department of Health and Human Services seeks an IT Specialist (Security) at the GS-2210-13 level to review, analyze, develop, publish, promote, and implement enterprise-wide IT security policies and SDLC standards.

This role requires applying security policies and frameworks, integrating security controls into DevSecOps pipelines, and coordinating third-party security deliverables.

Qualifications

• IT-related experience at GS-12 level in federal government.
• Applying security policies, standards, and risk management frameworks (e.g., NIST SP 800-53, FISMA, FedRAMP).
• Experience with DevSecOps pipelines and compliance-as-code.
• Managing third-party security deliverables and remediation tracking.
• Contributing to incident response activities and system security documentation.

Responsibilities

• Review, analyze, develop, publish, promote, and implement enterprise-wide IT security policies and SDLC standards.
• Provide guidance on security governance and risk management across systems.
• Lead or support incident response and security control assessments.
• Develop or maintain system security documentation (SSPs, Contingency Plans, Risk Assessments).

Skills

Attention to Detail

Customer Service

Oral Communication

Problem Solving

Job description

The Centers for Medicare & Medicaid Services (CMS) within the Department of Health and Human Services seeks an IT Specialist (Security) at the GS-2210-13 level to review, analyze, develop, publish, promote, and implement enterprise-wide IT security policies and SDLC standards.

This role requires applying security policies and frameworks, integrating security controls into DevSecOps pipelines, and coordinating third-party security deliverables.