DevSecOps Engineer

Join us at Sparksoft, where we're not just another tech company—we're a catalyst for change. Our mission isn't just to offer IT solutions; it's to revolutionize the way you work. Here, passion isn't just a buzzword; it's the fuel behind groundbreaking ideas and transformative technologies. We serve a wide range of government clients, delivering impact that's felt across the nation. Our true strength lies in our people. They're the problem-solvers and innovators consistently delivering extraordinary outcomes. With Sparksoft, you're not stepping into a routine job; you're joining a team committed to innovation and excellence. Our innovation extends beyond just delivering projects. Through our specialized Innovation Centers, we continuously refine our methods, ensuring we remain industry leaders. We are Sparksoft! ROLE & RESPONSIBILITIES: The DevSecOps Engineer implements, automates, secures, and maintains the cloud infrastructure, CI/CD pipelines, and operational environments supporting the program. This role enables reliable, secure, and scalable acquisition, processing, validation, quality assessment, and delivery of provider data while ensuring compliance with CMS security, privacy, and operational requirements. The DevSecOps Engineer works closely with solution architect, data engineers, data scientists, quality teams, and security personnel to integrate security, automation, monitoring, and compliance throughout the delivery lifecycle. Cloud Infrastructure and Environment Management Design, deploy, configure, and maintain AWS cloud infrastructure supporting operations. Implement Infrastructure as Code (IaC) solutions to automate provisioning and configuration management. Manage development, test, staging, and production environments. Optimize system performance, scalability, reliability, and availability Support disaster recovery, backup, and business continuity objectives. Monitor infrastructure utilization and recommend capacity improvements. DevSecOps and CI/CD Design and maintain CI/CD pipelines supporting application, data, analytics, and infrastructure deployments. Automate build, test, security scanning, release, and deployment processes. Integrate automated quality gates and compliance checks into deployment pipelines. Support release management activities and deployment coordination across Agile teams. Implement version control and configuration management practices using CMS-approved repositories. Security and Compliance Implement security controls in accordance with CMS, FISMA, NIST, and organizational security requirements. Perform vulnerability scanning, configuration reviews, dependency management, and remediation activities. Support Authority to Operate (ATO), security assessments, POA&M remediation, and audit activities. Ensure protection of sensitive data and compliance with privacy requirements. Integrate security monitoring, logging, alerting, and incident response capabilities into operational environments. Data Platform and Operations Support Support secure ingestion, transformation, validation, storage, and delivery of complex datasets. Develop and maintain automated operational workflows supporting data acquisition and quality processes. Implement monitoring and alerting for data pipelines, batch jobs, APIs, and system services. Troubleshoot infrastructure, application, integration, and operational issues. Collaborate with teams to ensure reliable and secure data operations. Monitoring and Observability Develop dashboards, operational metrics, alerts, and performance reports. Analyze system health, availability, throughput, and operational trends. Identify and resolve performance bottlenecks and operational risks. Support continuous monitoring requirements and operational reporting. Agile and Continuous Improvement Participate in PI Planning, Sprint Planning, retrospectives, and demonstrations. Support DevSecOps best practices and continuous process improvement initiatives. Develop automation solutions that improve operational efficiency and reduce manual effort. Contribute to technical documentation, knowledge sharing, and operational runbooks. REQUIRED EXPEREINCE:  Minimum 5 years of experience supporting cloud infrastructure, system administration, DevOps, or DevSecOps environments. Minimum 3 years of experience implementing and maintaining CI/CD pipelines. Experience supporting AWS cloud environments. Experience with Infrastructure as Code tools such as Terraform, CloudFormation, or equivalent. Experience implementing automated deployment, testing, and monitoring capabilities. Experience supporting secure systems in a Federal or highly regulated environment. Experience with source code management and version control platforms. Experience troubleshooting complex infrastructure and application issues. Experience working within Agile development environments. Must be able to obtain and maintain a Public Trust clearance. Must have lived in the United States 3 out of the past 5 years. PREFERRED EXPEREINCE:  Experience supporting CMS, HHS, or other Federal healthcare programs. Experience supporting healthcare, provider, licensing, enrollment, or interoperability data systems. Experience supporting FedRAMP, FISMA, NIST 800-53, and ATO compliance activities. Experience with containerization technologies such as Docker and Kubernetes. Experience supporting AWS services including Lambda, ECS/EKS, S3, RDS, Glue, Athena, CloudWatch, IAM, and Step Functions. Experience implementing DevSecOps practices within SAFe Agile environments. Experience supporting data engineering, analytics, machine learning, or AI-enabled solutions. Experience working with Python-based data processing frameworks and automation tools. Experience integrating automated security testing and compliance validation into CI/