Remote DevSecOps Lead: Federal CI/CD & Cloud Security

Cognitive Medical Systems; Northern (KY); Hybrid; USD 115,000 - 145,000; Full time

Job summary

Cognitive Medical Systems seeks a DevSecOps Lead to own the CI/CD pipeline, infrastructure as code, and security scanning for the CMS DDPS and PRS systems. This remote role supports a US-based contract with multi-AZ AWS environments and federal compliance requirements.

You will coach development teams on DevSecOps practices, maintain enterprise tools (GitHub, Jenkins, Artifactory/XRay, SonarQube, Snyk), and drive performance metrics and security controls across sprint teams.

Qualifications

• Bachelor's degree in Computer Science or related field; 8+ years in DevOps/DevSecOps.
• 4+ years owning CI/CD for a production federal system.
• Hands-on with Jenkins/CloudBees, JFrog Artifactory/XRay, SonarQube, Snyk, and GitHub.
• AWS CloudFormation for IaC across multi-AZ production environments; EC2, Lambda, SSM, VPC, IAM, Secrets Manager.
• Monitoring tools: CloudWatch, Splunk, Splunk On-Call, New Relic, DataDog.
• Experience with federal ATO, FISMA, and CMS ARS compliance processes.
• Scripting in Bash, Groovy, YAML; Linux environments (RHEL/CentOS/Amazon Linux 2).
• SAFe environment including PI Planning and Agile Release Train.

Responsibilities

• Own the CI/CD pipeline, IaC, and security scanning across all environments.
• Maintain pipelines using CMS enterprise tools: GitHub, Jenkins/CloudBees, JFrog Artifactory/XRay, SonarQube, and Snyk.
• Maintain infrastructure as code using AWS CloudFormation across multi-AZ production environments (EC2, Lambda, VPC).
• Automate integration, testing, and deployments; support BDD/TDD practices and post-implementation validation testing.
• Track real-time metrics via CloudWatch, Splunk, New Relic, DataDog.
• Coordinate security scanning and ATO compliance with Nessus, TrendMicro, CrowdStrike, AWS Inspector, SecurityHub, GuardDuty, CloudTrail.
• Lead DevSecOps coaching and ensure timely release deliverables.

Skills

CI/CD ownership

Jenkins/CloudBees

Artifactory/XRay

SonarQube

Snyk

AWS CloudFormation

CloudWatch

Splunk

New Relic

DataDog

FISMA compliance

Bash/Groovy

YAML scripting

SAFe Agile

Public trust background

Education

Bachelor's degree in Computer Science or related field

Tools

GitHub

Jenkins/CloudBees

JFrog Artifactory/XRay

SonarQube

Snyk

AWS CloudFormation

CloudWatch

Splunk

New Relic

DataDog

Job description

Cognitive Medical Systems seeks a DevSecOps Lead to own the CI/CD pipeline, infrastructure as code, and security scanning for the CMS DDPS and PRS systems. This remote role supports a US-based contract with multi-AZ AWS environments and federal compliance requirements.

You will coach development teams on DevSecOps practices, maintain enterprise tools (GitHub, Jenkins, Artifactory/XRay, SonarQube, Snyk), and drive performance metrics and security controls across sprint teams.