> Markdown version of [/jobs/ext/2548544-devsecops-lead-remote-wfh](https://www.wearedevelopers.com/jobs/ext/2548544-devsecops-lead-remote-wfh). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # DevSecOps Lead - Remote (WFH) - **Company:** Cognitive Medical Systems - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $115,000.0 - $145,000.0 - **Contract:** Permanent contract - **Skills:** Agile Methodology, Amazon Web Services, Amazon Elastic Compute Cloud, Bash Shell, Health Informatics, CentOS, Continuous Integration, DevOps, Github, Groovy, Monitoring of Systems, Identity and Access Management, Linux Kernel, Linux System Administration, Red Hat Enterprise Linux, SonarQube, Software Vulnerability Management, YAML, Datadog, Cloudbees, Data Processing, Scripting, Sonatype, Amazon Virtual Private Cloud (VPC), Cloudformation, Infrastructure Automation Frameworks, Nessus, Functional Programming, Cloudwatch, Splunk, New Relic (SaaS), Devsecops, Jenkins, Vulnerability Analysis, Artifactory - **Published:** August 10, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=741b5f6f9c506f30 ## About the Role * Bachelor's degree in Computer Scienceor related field; 8 or more years in DevOps orDevSecOps, including 4 or more years owning CI/CD for aproduction federal system. * Hands-on expertise with Jenkins/CloudBees, JFrog Artifactory/XRay, SonarQube, Snyk, and GitHub. * Hands-on AWS CloudFormation for infrastructure as code across multi-AZ production environments; experience with EC2, Lambda, Systems Manager, VPC, IAM, and Secrets Manager. * Experience with monitoring tools: AWS CloudWatch, Splunk, Splunk On-Call/VictorOps, New Relic, andDataDog. * Working knowledge of federal ATO, FISMA, and CMS ARS compliance processes including vulnerability remediation timelines. * Experience with Bash, Groovy, and YAML scripting; Linux environments (RHEL, CentOS, Amazon Linux 2). * Experience within a SAFe environment including PI Planning and Agile Release Train delivery. * Ability to pass CMS and internal required background checks for public trust. * Preferred certification - AWS Certified DevOps Engineer - Professional ## Description *This position is contingent upon contract award* The DevSecOps Lead is responsible for the CI/CD pipeline, infrastructure as code, and security scanning for the CMS Drug Data Processing System (DDPS) and Payment Reconciliation System (PRS). This individual owns the end-to-end DevSecOps capability, enabling continuous integration and delivery using CMS enterprise tools, maintaining the ATO compliance chain, and driving DevSecOps standardization across all sprint teams within the CMS Lean-Agile Release Train. This is a remote position; however, Cognitive hires only in the following designated U.S. states based on contract and business requirements: VA, DC, MD, TN, FL, AZ, CO, OR, and TX., * Own the CI/CD pipeline, infrastructure as code, and security scanning across all DDPS/PRS environments. * Maintain andoptimize CI/CD pipelines using CMS enterprise tools: GitHub, Jenkins/CloudBees, JFrog Artifactory/XRay, SonarQube, and Snyk. * Maintain infrastructure as code using AWS CloudFormation across multi-AZ Production and Non-Production VPCs including EC2, Lambda, and VPC configurations. * Automate integration, testing, and deployments across environments; support BDD and TDD practices and post-implementation validation testing. * Track real-time operational metrics like PDE volumes, error rates, reconciliation accuracy, & uptime via CloudWatch, Splunk, Splunk On-Call, New Relic, and DataDog. * Coordinate security scanning and ATO compliance with Nessus, TrendMicro, CrowdStrike, AWS Inspector,SecurityHub, GuardDuty, and CloudTrail. * Support CMS ATO compliance including SSP maintenance and vulnerability remediation within CMS-defined timelines. * Lead coaching of development teams on DevSecOps practices; adhere to project schedule and submit Release Deliverables as required. ## Related Videos - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Give your build some love, it will give it back!](https://www.wearedevelopers.com/videos/514-give-your-build-some-love-it-will-give-it-back) - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) - [AI-Native Enterprise Platforms: Interpreting Logic, Not Compiling Code](https://www.wearedevelopers.com/videos/1975-ai-native-enterprise-platforms-interpreting-logic-not-compiling-code) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Demystifying DevOps—Pros, cons, dos & don'ts](https://www.wearedevelopers.com/videos/338-demystifying-devops-pros-cons-dos-don-ts) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [DevOps Engineer Salary [2023]](https://www.wearedevelopers.com/magazine/203-devops-engineer-salary-2023) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)