DevOps Engineer

Job Description

Own the paved road from pull request to production for a High Value Asset that cannot go down during a statutory Medicare collection window.

This position is contingent upon contract award.

About the role

The CMS Fee-for-Service Data Collection System (FFSDCS) is the mission system through which the Centers for Medicare & Medicaid Services collects statutorily mandated data from drug manufacturers, clinical laboratories, ground ambulance organizations and hospitals. You will engineer and operate the CI/CD pipeline, Kubernetes platform and cloud infrastructure underneath it.

The distinguishing constraint here is the calendar. Collection windows are set by statute and cannot slip, so release discipline, change freezes and capacity planning are keyed to a reporting calendar rather than to a team's convenience.

Scale and context

• Four statutory collections: Average Sales Price, Clinical Laboratory Fee Schedule, Ground Ambulance, and Off-Campus Hospital Outpatient acquisition data
• Approximately 17,800 registered reporting users
• High Value Asset, FISMA Moderate application in the CMS Cloud (AWS GovCloud)
• Java/Spring Boot microservices, ReactJS, Amazon Aurora, Kubernetes
• Multiple production releases per month on a two-week sprint cadence
• CMS-furnished tooling: GitHub, JIRA, Confluence, Splunk, New Relic, Snyk, SonarQube
• 24/7 on-call rotation with one-hour incident-reporting readiness

Location and schedule

Hybrid role. Baltimore, Maryland area strongly preferred for proximity to the CMS Woodlawn campus. Eastern Time core hours in support of a Monday to Friday, 9:00 AM to 6:00 PM ET service window. All work is performed within the United States.

What you will do

• Build and maintain the DevSecOps pipeline in government-furnished GitHub: automated build, test, SAST/SCA scanning with Snyk and SonarQube, accessibility checks, artifact signing and SBOM, and deployment automation
• Operate and tune the Kubernetes platform and Amazon Aurora databases in AWS GovCloud, including autoscaling profiles keyed to the collection calendar and capacity planning for concurrent-window load
• Implement observability with New Relic and Splunk: dashboards, SLO-based alerting and anomaly detection; participate in the 24/7 on-call rotation for production and security response
• Execute environment management across dev, test, impl and prod; enforce per-module change freezes; own release runbooks and rollback procedures
• Drive cloud cost optimization through right-sizing, Compute Optimizer and storage lifecycle policies
• Maintain infrastructure-as-code coverage across the platform

Award contingency

This position is contingent upon contract award. Candidates selected will receive a contingent offer and will begin the federal suitability and credentialing process, which can take several weeks to several months. Employment begins only upon award and successful adjudication.

Eligibility

• U.S. work authorization, and residence in the United States for at least three of the last five years — a CMS background-investigation eligibility requirement
• Ability to obtain and maintain a CMS Public Trust suitability determination (e-QIP application, fingerprinting, favorable adjudication) prior to system access
• All work performed within the United States
• Completion of HHS/CMS security, privacy and records-management training before performance and annually thereafter; signed non-disclosure agreement

Requirements

What you need

• 6+ years of DevOps or platform engineering experience, including 3+ years running Kubernetes in production and strong AWS experience (GovCloud preferred)
• Hands-on CI/CD ownership with GitHub Actions or equivalent, infrastructure-as-code with Terraform or CloudFormation, and container security practices
• Production operations experience with observability stacks such as Splunk, New Relic or CloudWatch, and participation in on-call and incident response

Minimum education

Bachelor's degree and 6+ years of relevant experience.

Preferred qualifications

• CMS Cloud, batCAVE or FedRAMP-boundary experience
• FISMA Moderate control implementation
• Amazon Aurora PostgreSQL operations
• Java/Spring Boot build ecosystems

Benefits

Benefits

Standard Employee Benefits.

50% Health Insurance Paid by Innosoft, Paid Vacation, 401K Match, STD LTD and AD&D paid by Innosoft.

Compensation

The salary range for this position is $140,000 to $145,000 annually. Actual compensation is determined by experience, qualifications, skills, location and internal equity. This range reflects the anticipated base salary and does not include bonus, benefits or other compensation.

Equal Employment Opportunity

Innosoft Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, physical or mental disability, genetic information, marital status, protected veteran status, or any other characteristic protected by applicable federal, state or local law.

As a federal contractor, Innosoft Corporation complies with its applicable equal employment opportunity and affirmative action obligations, including Section 503 of the Rehabilitation Act of 1973 and the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA).

Reasonable accommodation. If you need a reasonable accommodation to complete any part of the application or interview process, please contact recruitment@innosoft.com and we will work with you.

Employment is contingent upon successful completion of a background investigation, drug screening and reference checks in accordance with Innosoft Corporation policy.

Requirements
• Bachelor’s degree and 6+ years of DevOps/platform engineering experience, including 3+ years running Kubernetes in production and strong AWS experience (GovCloud preferred). • Hands-on CI/CD ownership (GitHub Actions or equivalent), infrastructure-as-code (Terraform/CloudFormation), and container security practices. • Production operations experience with observability stacks (Splunk, New Relic, CloudWatch) and participation in on-call/incident response.