Remote DevSecOps Lead: CI/CD & Cloud Security

COGNITIVE MEDICAL SYSTEMS INC; United States; Remote; USD 115,000 - 145,000; Full time

Job summary

Cognitive is seeking a DevSecOps Lead to own the CI/CD pipeline, IaC, and security scanning for CMS DDPS/PRS. You will enable continuous integration and delivery using CMS tools, maintain ATO compliance, and drive standardization across sprint teams.

Remote with state restrictions (VA, DC, MD, TN, FL, AZ, CO, OR, TX) required. Responsibilities include implementing pipelines, IaC, and security tooling, tracking key metrics, supporting ATO timelines, and coaching teams in DevSecOps practices

Qualifications

• Bachelor's degree in Computer Science or related field plus 8+ years in DevOps/DevSecOps.
• 4+ years owning CI/CD for a production federal system.
• Hands-on with Jenkins/CloudBees and Artifactory/XRay, SonarQube, Snyk, GitHub.
• Experience with AWS CloudFormation across multi-AZ production environments.
• Familiarity with monitoring: CloudWatch, Splunk, New Relic, DataDog; security tooling.

Responsibilities

• Own the CI/CD pipeline, infrastructure as code, and security scanning across all environments.
• Maintain and optimize pipelines using CMS enterprise tools and ensure security controls.
• Maintain AWS infrastructure: EC2, Lambda, VPC, IAM, Secrets Manager; multi-AZ configs.
• Automate integration, testing, and deployments; support BDD/TDD and validation testing.
• Track real-time metrics via CloudWatch, Splunk, New Relic, and DataDog; ensure uptime.
• Coordinate security scanning and ATO compliance with Nessus, TrendMicro, CrowdStrike, AWS Inspector, SecurityHub, GuardDuty, CloudTrail.
• Lead DevSecOps coaching across teams; deliver releases on schedule.

Skills

CI/CD

DevSecOps

Security scanning

Infrastructure as code

GitHub

Jenkins/CloudBees

JFrog Artifactory/XRay

SonarQube

Snyk

AWS CloudFormation

EC2

Lambda

VPC

CloudWatch

Splunk

New Relic

DataDog

Bash

Groovy

YAML

RHEL/CentOS/Amazon Linux 2

SAFe

PI Planning

Agile Release Train

Education

Bachelor's degree in Computer Science or related field

Tools

Jenkins/CloudBees

JFrog Artifactory/XRay

SonarQube

Snyk

GitHub

AWS CloudFormation

EC2

Lambda

VPC

S3/Secrets Manager/IAM

AWS CloudWatch

Splunk

New Relic

DataDog

Bash

Groovy

YAML

Job description

Cognitive is seeking a DevSecOps Lead to own the CI/CD pipeline, IaC, and security scanning for CMS DDPS/PRS. You will enable continuous integration and delivery using CMS tools, maintain ATO compliance, and drive standardization across sprint teams.

Remote with state restrictions (VA, DC, MD, TN, FL, AZ, CO, OR, TX) required. Responsibilities include implementing pipelines, IaC, and security tooling, tracking key metrics, supporting ATO timelines, and coaching teams in DevSecOps practices