Edifecs DevSecOps Engineer

About the role

Syms Strategic Group (SSG) is seeking a talented Edifecs DevSecOps Engineer. This is a full‑time, 100% U.S.-based remote position supporting the Veterans Affairs (VA) department. The role requires U.S. citizenship and a Public Trust (MBI) security clearance. Military veterans are encouraged to apply.

Responsibilities

• Spearhead the migration to the cloud
• Create data flow diagrams, cloud diagrams, transition diagrams, and high‑level architecture diagrams for cloud infrastructure, applications, and systems
• Design, develop, deploy, and operate automation technologies for continuous integration and continuous delivery (CI/CD)
• Manage and control permissions in the cloud service provider for each cloud application, storage, and service being hosted
• Implement, manage, and design monitoring capabilities for cloud architecture and cloud‑hosted systems and applications to ensure optimal performance and compliance with VA and federal policies
• Provide customer‑focused support for product lines and services, including setup, configuration, and provision of VA Enterprise Cloud (VAEC) environments
• Provide cloud support services for systems and applications in the VAEC Amazon Web Services (AWS) GovCloud environments, ensuring compliance with Veterans Independence Program (VIP) development, release, and documentation requirements
• Adopt a DevOps mindset with an understanding of CI/CD practices and tooling
• Provide Cloud Security Provider Documentation
• Design VAEC/cloud‑hosted solutions and address cloud‑readiness gaps

Required Skills and Experience

• Proven track record of designing, deploying, and managing AWS infrastructure and services
• Experience with large‑scale, high‑availability, and scalable cloud architecture
• Expertise in core AWS services: EC2, S3, RDS, VPC, Lambda, IAM, CloudFormation, CloudWatch, Route 53
• Experience with AWS security practices and services: AWS IAM, AWS Shield, AWS WAF
• Proficiency with AWS networking components: VPC peering, Direct Connect, VPN
• Ability to design, deploy, and manage scalable and secure AWS cloud infrastructures
• Experience setting up and managing multi‑account AWS environments using AWS Organizations
• Knowledge of best practices and strategies for cloud cost management and optimization
• Proficiency in scripting languages such as Python, Bash, PowerShell, or NodeJS for automation
• Experience with Infrastructure‑as‑Code (IaC) tools: AWS CloudFormation, Terraform, AWS CDK
• Proficiency in monitoring or logging tools: CloudWatch, CloudTrail, AWS Config, and third‑party tools (e.g., Prometheus, Grafana, New Relic)
• Experience in performance optimization and troubleshooting AWS resources
• Strong understanding of AWS security best practices and compliance frameworks (HIPAA, GDPR, PCI DSS)
• Experience implementing encryption, key management, and identity and access management solutions within AWS
• Knowledge of AWS database services: Amazon RDS, DynamoDB, Aurora, Redshift
• Experience in database performance tuning and backup/recovery strategies
• Familiarity with CI/CD tools and practices: Jenkins, GitLab CI, AWS CodePipeline, AWS CodeBuild
• Experience with containerization and orchestration tools: Docker, Kubernetes, ECS, EKS
• Strong analytical and problem‑solving abilities to troubleshoot complex cloud‑related issues
• Excellent verbal and written communication skills; ability to explain technical concepts to non‑technical stakeholders
• Skilled in prioritizing tasks,