DevOps Engineer

Baltimore, United States | Posted on 09/10/2026

Own the paved road from pull request to production for a High Value Asset that cannot go down during a statutory Medicare collection window.

This position is contingent upon contract award.

The CMS Fee-for-Service Data Collection System (FFSDCS) is the mission system through which the Centers for Medicare & Medicaid Services collects statutorily mandated data from drug manufacturers, clinical laboratories, ground ambulance organizations and hospitals. You will engineer and operate the CI/CD pipeline, Kubernetes platform and cloud infrastructure underneath it.

The distinguishing constraint here is the calendar. Collection windows are set by statute and cannot slip, so release discipline, change freezes and capacity planning are keyed to a reporting calendar rather than to a team's convenience.

• Four statutory collections:
  Average Sales Price, Clinical Laboratory Fee Schedule, Ground Ambulance, and Off-Campus Hospital Outpatient acquisition data
• Approximately 17,800 registered reporting users
• High Value Asset, FISMA Moderate application in the CMS Cloud (AWS Gov Cloud)
• Multiple production releases per month on a two-week sprint cadence
• CMS-furnished tooling:
  Git Hub, JIRA, Confluence, Splunk, New Relic, Snyk, Sonar Qube
• 24/7 on-call rotation with one-hour incident-reporting readiness

Hybrid role. Baltimore, Maryland area strongly preferred for proximity to the CMS Woodlawn campus. Eastern Time core hours in support of a Monday to Friday, 9:00 AM to 6:00 PM ET service window. All work is performed within the United States.

• Build and maintain the Dev Sec Ops  pipeline in government-furnished Git Hub: automated build, test, SAST/SCA scanning with Snyk and Sonar Qube, accessibility checks, artifact signing and SBOM, and deployment automation
• Operate and tune the Kubernetes platform and Amazon Aurora databases in AWS Gov Cloud, including autoscaling profiles keyed to the collection calendar and capacity planning for concurrent-window load
• Implement observability with New Relic and Splunk: dashboards, SLO-based alerting and anomaly detection; participate in the 24/7 on-call rotation for production and security response
• Execute environment management across dev, test, impl and prod; enforce per-module change freezes; own release runbooks and rollback procedures
• Drive cloud cost optimization through right-sizing, Compute Optimizer and storage lifecycle policies
• Maintain infrastructure-as-code coverage across the platform

This position is contingent upon contract award. Candidates selected will receive a contingent offer and will begin the federal suitability and credentialing process, which can take several weeks to several months. Employment begins only upon award and successful adjudication.

• U.S. work authorization, and residence in the United States for at least three of the last five years — a CMS background-investigation eligibility requirement
• Ability to obtain and maintain a CMS Public Trust suitability determination (e-QIP application, fingerprinting, favorable adjudication) prior to system access
• All work performed within the United States
• Completion of HHS/CMS security, privacy and records-management training before performance and annually thereafter; signed non-disclosure agreement

• 6+ years of Dev Ops or platform engineering experience, including 3+ years running Kubernetes in production and strong AWS experience (Gov Cloud preferred)
• Hands-on CI/CD ownership with Git Hub Actions or equivalent, infrastructure-as-code with Terraform or Cloud Formation, and container security practices
• Production operations experience with observability stacks such as Splunk, New Relic or Cloud…