IT Senior Architect - DevSecOps

Maximus; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Maximus is seeking an IT Senior Architect – DevSecOps to serve as the principal technical authority for enterprise DevSecOps engineering, pipeline strategy, and secure software delivery across Maximus. This remote, high-visibility role reports within the HO ET Architecture & Automation organization and supports 1,000+ government programs under FedRAMP, HIPAA, SOC 2, and PCI requirements.

The role requires deep technical ownership, cross-functional influence with senior peers, and leadership in

Qualifications

• Bachelor's degree plus 7+ years of professional experience.
• Experience leading DevSecOps architecture for enterprise-scale CI/CD platforms.
• Proven ability to implement security guardrails and compliance controls (FedRAMP, HIPAA, SOC 2, PCI).

Responsibilities

• Define reference architectures and pipeline standards for enterprise DevSecOps.
• Lead security integration across CI/CD pipelines and toolchains.
• Collaborate with ISO and governance bodies on architecture reviews and compliance.

Skills

DevSecOps

Jenkins

Groovy

Terraform

Crossplane

Cloud platforms

Security

Architecture

Education

Bachelor's degree in relevant field

Tools

Dependency Track

Splunk

RapidFort

Axway MFT

Job description

Description & Requirements

Requirements

Maximus is currently seeking an IT Senior Architect – DevSecOps. The IT Senior Architect – DevSecOps / Tools Engineering serves as the senior-most individual contributor technical authority for DevSecOps engineering, pipeline strategy, and secure software delivery across Maximus Enterprise Technology. Operating within the HO ET Architecture & Automation organization, this role provides principal-level guidance for the enterprise CI/CD platform (Jenkins Shared Libraries / Groovy), embedded security tooling, and end-to-end application delivery practices supporting 1,000+ government programs under FedRAMP, HIPAA, SOC 2, and PCI compliance requirements.

This is a high-visibility, enterprise-wide role requiring deep technical ownership, cross-functional influence with VP/Sr Director-level peers, and direct contribution to Maximus's $5B+ government services delivery mission.

This is a remote position.

Essential Duties and Responsibilities

• Oversee the automation processes for daily activities, build activities and new feature and functionality with public and private cloud
• Interact with other team members and groups within the IT organization
• Help enforce the standards for server builds and services deployed in AWS and the private cloud by the cloud solutions teams
• Perform other duties assigned by leadership.

Job-Specific Essential Duties and Responsibilities

DevSecOps Architecture & Platform Leadership

• Serve as the principal architect for the Maximus enterprise DevSecOps platform, defining reference architectures, pipeline standards, and security guardrails across commercial, federal, and GovCloud deployment targets, with primary delivery via Jenkins Shared Libraries (Groovy), Terraform and Crossplane-based infrastructure provisioning.
• Establish and maintain the canonical CI/CD pipeline model, from source control through cloud deployment, inclusive of static code analysis, SAST/DAST security scans, artifact management, and policy-gated release gates.
• Provide authoritative architecture decisions for multi-environment deployment strategies (dev, staging, production) on AWS, Azure, and GCP.

Security Integration & Compliance

• Embed automated security controls and vulnerability management into CI/CD pipelines, including integration with Dependency Track, Splunk, RapidFort (container hardening and CVE remediation), and Axway Managed File Transfer (MFT) solutions.
• Ensure all pipeline architectures align with NIST SSDF, FedRAMP, HIPAA, SOC 2, and PCI compliance requirements.
• Collaborate with the Information Security Office (ISO) on security architecture reviews, risk acceptance decisions, and continuous compliance monitoring.
• Champion "security left" practices across the Maximus developer community (300+ DevSecOps practitioners).

Technical Leadership & Governance

• Participate in and provide technical authority within enterprise governance bodies, including SCM/Change Management governance groups alongside VP-level and Sr Director-level peers.
• Author and maintain enterprise-level architecture documents, white papers, and technical standards for OCDIO-wide consumption.
• Serve as a named technical reviewer and subject-matter authority for DevSecOps capability sections in business development and proposal content at the capture/pre-award stage.
• Provide technical mentorship and upskilling guidance to T3/T4 architects and engineers across the tools and automation practice.

Platform Adoption & Community Enablement

• Lead the internal DevSecOps community of practice, driving platform adoption, knowledge sharing, and standardized delivery patterns across business lines.
• Define and maintain golden-path pipeline templates and launchpad configurations enabling 65–75% portfolio reuse.
• Partner with project teams on onboarding, consulting engagements, escalated platform support, and day-to-day developer support across the Tools Engineering practice.
• Represent the Tools Engineering practice in cross-organizational forums, OCDIO steering committees, and customer-facing briefings.

Minimum Requirements

• Bachelor's degree in relevant field of study and 7+ years of relevant professional experience required, or equivalent combination of education and experience.