Staff DevSecOps Engineer

Salary Range: 150000 to 182400 (Currency: USD) (Pay period: per-year-salary)

Team you will be joining

The Centers for Medicare & Medicaid Services (CMS) is enhancing program integrity efforts to combat fraud, waste, and abuse (FWA) within Medicare and Medicaid. The Unified Case Management (UCM) system serves as a centralized application for Program Integrity Contractors, facilitating case tracking, audits, investigations, and workload management. UCM supports coordinated efforts to prevent FWA and ensure compliance through efficient lead management, investigative actions, and reporting. As part of CMS’s modernization initiative, we are transforming UCM into a modern, scalable architecture that enhances performance, security, and usability. This effort includes migrating to cloud-based solutions, improving system interoperability, and adopting cutting-edge technologies to streamline workflows and improve data-driven decision-making. Our goal is to ensure a more robust, efficient, and future-ready platform for program integrity operations.

As a DevSecOps Engineer, you will: 

Influence: Make an impact across projects and products by improving security, reliability, and delivery.

Technology: Apply strong expertise in DevSecOps, AWS, CI/CD, Infrastructure as Code, containers, automation, and security.

System: Scope, design, and deliver medium-to-large initiatives while reducing technical debt, risk, and operational complexity.

People: Support and mentor team members by sharing knowledge and promoting collaboration.

Process: Follow and improve engineering and DevSecOps practices to enable a secure, reliable flow of features to production.

These are the types of things you’ll be working on 

• Design, develop, test, deploy, and maintain scalable, secure, and high-quality software services, with an emphasis on backend systems, microservices, and APIs.

• Participate in architecture and design discussions, providing expertise on cloud architecture, application security, scalability, reliability, and appropriate technologies and frameworks.

• Build and maintain CI/CD pipelines that automate software build, test, security validation, deployment, and release processes across development and production environments.

• Implement and maintain Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or equivalent technologies to provision and manage AWS infrastructure consistently and securely.

• Develop and manage containerized applications and supporting platforms using technologies such as Docker and Kubernetes/EKS.

• Apply DevSecOps practices by integrating security controls, automated security testing, vulnerability scanning, secrets management, and compliance checks throughout the software development lifecycle.

• Deploy and maintain observability solutions for microservices and APIs, including centralized logging, metrics, distributed tracing, alerting, and performance monitoring.

• Troubleshoot complex application, infrastructure, deployment, and production issues; perform root-cause analysis and implement preventative improvements.

• Conduct code, architecture, infrastructure, and security reviews to identify risks, vulnerabilities, reliability concerns, and opportunities for improvement.

• Participate in vulnerability management, threat assessments, security reviews, and remediation activities across applications, containers, dependencies, and AWS infrastructure.

• Implement and maintain AWS security, compliance, governance, and access-control practices in accordance with organizational policies and applicable industry standards.

• Develop and maintain technical documentation, including architecture diagrams, deployment procedures, runbooks, API documentation, security controls, and operational procedures.

• Collaborate with software engineers, architects, security teams, infrastructure teams, and other stakeholders to establish secure and reliable engineering practices.

• Mentor engineers and promote a culture of automation, security, reliability, continuous improvement, and knowledge sharing.

• Evaluate emerging technologies and recommend tools and practices that improve engineering productivity, security, scalability, and operational efficiency.

• Contribute to technical estimation, prioritization, planning, and delivery of engineering initiatives.

Tech used, but not limited to:
Python & Kubernetes required
Groovy
Bash
Go
Maven
Jenkins
Terraform
Docker


Nice to have
Experience working on a large-scale, production-ready systems
PostgresSQL
Github Actions
Camunda
FHIR
AI/ML

Security Clearance Requirements

• US Citizenship or Green Card only - we do not offer Sponsorship
• US Residency for at least the past 3 years
• Able to meet the requirements to hold a position of Public Trust, including successful completion of a US Government background investigation
• Disclaimer: Medical or recreational marijuana use is considered illegal at the federal level, regardless of state laws allowing such, and may affect your ability to obtain Public Trust. See article

Work that matters, with perks that deliver. Discover how Bellese Technologies invests in you through a benefits suite that makes every day better

• Remote First, Remote Only Culture
• Four weeks paid time off yearly (prorated based on start date for the first year)
• 10 paid floatingcompany holidays
• Flexible schedule
• Work from home setup including a Macbook 
• Collaborative, learning environment
• Medical, dental, and company-paid vision insurance
• Optional HSA account with some medical plans and a company contribution
• Company paid basic life and AD&D insurance coverages
• Company paid short and long term life insurance
• Optional critical illness and accident insurance
• 401K plan with 3% safe harbor contribution
• Wellness resources and virtual care
• Perks Plus employee discounts

You will like it here if

• You foster a collaborative ethos, driven by the mission to deliver exceptional customer service to clients. You are passionate about Healthcare and changing the healthcare landscape. You’re an out of the box thinker, always striving to know the “why” when it comes to building solutions. You excel in a team-oriented, remote-first environment characterized by mutual respect and open communication. Your adaptability and ability to navigate challenges ensure your success in any situation.