Edifecs DevSecOps Engineer

Location: Remote | Department: Veterans Affairs (VA) | Type: Full Time | Min. Experience: Experienced | Security Clearance Level: Public Trust (MBI)

Responsibilities

• Spearhead the migration to the cloud
• Create data flow diagrams, cloud diagrams, transition diagrams, and high-level architecture diagrams on Cloud Infrastructure, applications, and systems
• Design, develop, deploy, and operate automation technologies for continuous integration and continuous delivery (CI/CD)
• Manage and control permissions in the cloud service provider for each cloud application, storage, and service being hosted
• Implement, manage, and design monitoring capabilities for cloud architecture and cloud-hosted systems and applications to ensure optimal performance and compliance with VA and federal policies
• Provide customer-focused support for Product lines and Services, including setup, configuration, and provision of VA Enterprise Cloud (VAEC) environments
• Provide cloud support services for systems and applications in the VAEC Amazon Web Services (AWS) GovCloud environments, ensuring compliance with Veterans Independence Program (VIP) development, release, and documentation requirements
• Adopt a DevOps mindset with an understanding of CI/CD practices and tooling
• Provide Cloud Security Provider Documentation
• Design VAEC/cloud-hosted solutions and address cloud-readiness gaps

Requirements

• A proven track record of designing, deploying, and managing AWS infrastructure and services
• Experience with large-scale, high-availability, and scalable cloud architecture
• Expertise in core AWS services such as Elastic Compute Cloud (EC2), Simple Storage Service (S3), Relational Database Service (RDS), Virtual Private Cloud (VPC), Lambda, Identity and Access Management (IAM), CloudFormation, CloudWatch, and Route 53
• Experience with AWS security practices and services including AWS IAM, AWS Shield, and AWS Web Application Firewall (WAF)
• Proficiency with AWS networking components like VPC peering, Direct Connect, and Virtual Private Network (VPN)
• An ability to design, deploy, and manage scalable and secure AWS cloud infrastructures
• Experience in setting up and managing multi-account AWS environments using AWS Organizations
• Knowledge of best practices and strategies for cloud cost management and optimization
• Proficiency in scripting languages such as Python, Bash, PowerShell, or NodeJS for automation
• Experience with Infrastructure-as-Code (IaC) tools like AWS CloudFormation, Terraform, or AWS Cloud Development Kit (CDK)
• Proficiency in monitoring or logging tools such as CloudWatch, CloudTrail, AWS Config, and third-party tools (e.g., Prometheus, Grafana, New Relic)
• Experience in performance optimization and troubleshooting AWS resources
• A strong understanding of AWS security best practices and compliance frameworks (e.g., Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR), Payment Card Industry Data Security Standard (PCI DSS))
• Experience implementing encryption, key management, and identity and access management solutions within AWS
• Knowledge of AWS database services such as Amazon RDS, DynamoDB, Aurora, and Redshift
• Experience in database performance tuning and backup/recovery strategies
• Familiarity with CI/CD tools and practices (e.g., Jenkins, GitLab CI, AWS CodePipeline, and AWS CodeBuild)
• Experience with containerization and orchestration tools like Docker, Kubernetes, Elastic Container Service (ECS), and Elastic Kubernetes Service (EKS)
• Strong analytical and problem-solving abilities to troubleshoot complex cloud-related issues
• Excellent verbal and written communication skills with the ability to explain technical concepts to non-technical stakeholders
• Skilled in prioritizing tasks, managing time effectively, and meeting deadlines
• Strong attention to detail to ensure system stability, security, and data integrity
• Capability to mentor and provide technical