Staff Engineer, DevSecOps

Bellese; United States; On-site; USD 110,000 - 160,000; Full time

Job summary

Bellese is hiring a DevSecOps Engineer to join a mission-driven digital services team focused on civic healthcare. You will help design secure, scalable systems for CMS modernization, emphasizing reliability, performance, and data-driven decision making.

You’ll lead security integration across pipelines, IaC provisioning, and containerized deployments, while mentoring teammates and improving engineering practices to reduce risk and complexity.

Responsibilities

• Influence security, reliability, and delivery across projects.
• Design, implement, and improve CI/CD pipelines for multiple environments.
• Configure and manage IaC to provision secure AWS infrastructure.
• Develop and operate containerized services with Docker and Kubernetes/EKS.
• Integrate automated security testing, threat modeling, and policy checks.
• Maintain observability: logging, metrics, tracing, and alerting.
• Mentor teammates and promote secure DevSecOps practices.

Skills

DevSecOps

AWS

CI/CD

Infrastructure as Code

Containers

Automation

Security

Tools

Terraform

CloudFormation

Docker

Kubernetes/EKS

Job description

Bellese is a mission-driven Digital Services Company committed to pioneering innovative technology solutions in civic healthcare. Our dedication lies in making a meaningful impact on public health outcomes.

Driven by service design, we strive to know the “Why” to understand the healthcare journey for patients, caregivers, providers, payers, and policymakers. Our goal is to design and build solutions that reduce confusion, provide clarity, support decision making, and streamline the process so that we and our partners can focus on providing better health outcomes by improving patient care and reducing costs and burden.

Team you will be joining

The Centers for Medicare & Medicaid Services (CMS) is enhancing program integrity efforts to combat fraud, waste, and abuse (FWA) within Medicare and Medicaid. The Unified Case Management (UCM) system serves as a centralized application for Program Integrity Contractors, facilitating case tracking, audits, investigations, and workload management. UCM supports coordinated efforts to prevent FWA and ensure compliance through efficient lead management, investigative actions, and reporting. As part of CMS’s modernization initiative, we are transforming UCM into a modern, scalable architecture that enhances performance, security, and usability. This effort includes migrating to cloud-based solutions, improving system interoperability, and adopting cutting-edge technologies to streamline workflows and improve data-driven decision-making. Our goal is to ensure a more robust, efficient, and future-ready platform for program integrity operations.

As a DevSecOps Engineer, you will:

Influence: Make an impact across projects and products by improving security, reliability, and delivery.

Technology: Apply strong expertise in DevSecOps, AWS, CI/CD, Infrastructure as Code, containers, automation, and security.

System: Scope, design, and deliver medium-to-large initiatives while reducing technical debt, risk, and operational complexity.

People: Support and mentor team members by sharing knowledge and promoting collaboration.

Process: Follow and improve engineering and DevSecOps practices to enable a secure, reliable flow of features to production.

These are the types of things you’ll be working on

• Design, develop, test, deploy, and maintain scalable, secure, and high-quality software services, with an emphasis on backend systems, microservices, and APIs.

• Participate in architecture and design discussions, providing expertise on cloud architecture, application security, scalability, reliability, and appropriate technologies and frameworks.

• Build and maintain CI/CD pipelines that automate software build, test, security validation, deployment, and release processes across development and production environments.

• Implement and maintain Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or equivalent technologies to provision and manage AWS infrastructure consistently and securely.

• Develop and manage containerized applications and supporting platforms using technologies such as Docker and Kubernetes/EKS.

• Apply DevSecOps practices by integrating security controls, automated security testing, vulnerability scanning, secrets management, and compliance checks throughout the software development lifecycle.

• Deploy and maintain observability solutions for microservices and APIs, including centralized logging, metrics, distributed tracing, alerting, and performance monitoring.