Edifecs DevSecOps Engineer

About the role

Syms Strategic Group (SSG) is seeking a talented Edifecs DevSecOps Engineer. This is a full‑time, remote position supporting the Veterans Affairs (VA) department. The role requires a Public Trust (MBI) security clearance and U.S. citizenship.

Responsibilities

• Spearhead the migration to the cloud
• Create data flow diagrams, cloud diagrams, transition diagrams, and high‑level architecture diagrams on Cloud Infrastructure, applications, and systems
• Design, develop, deploy, and operate automation technologies for continuous integration and continuous delivery (CI/CD)
• Manage and control permissions in the cloud service provider for each cloud application, storage, and service being hosted
• Implement, manage, and design monitoring capabilities for cloud architecture and cloud‑hosted systems and applications to ensure optimal performance and compliance with VA and federal policies
• Provide customer‑focused support for Product lines and Services, including setup, configuration, and provision of VA Enterprise Cloud (VAEC) environments
• Provide cloud support services for systems and applications in the VAEC Amazon Web Services (AWS) GovCloud environments, ensuring compliance with Veterans Independence Program (VIP) development, release, and documentation requirements
• Adopt a DevOps mindset with an understanding of CI/CD practices and tooling
• Provide Cloud Security Provider Documentation
• Design VAEC/cloud‑hosted solutions and address cloud‑readiness gaps

Requirements

• Proven track record of designing, deploying, and managing AWS infrastructure and services
• Experience with large‑scale, high‑availability, and scalable cloud architecture
• Expertise in core AWS services such as EC2, S3, RDS, VPC, Lambda, IAM, CloudFormation, CloudWatch, and Route 53
• Experience with AWS security practices and services including AWS IAM, AWS Shield, and AWS WAF
• Proficiency with AWS networking components like VPC peering, Direct Connect, and VPN
• Ability to design, deploy, and manage scalable and secure AWS cloud infrastructures
• Experience in setting up and managing multi‑account AWS environments using AWS Organizations
• Knowledge of best practices and strategies for cloud cost management and optimization
• Proficiency in scripting languages such as Python, Bash, PowerShell, or NodeJS for automation
• Experience with Infrastructure‑as‑Code (IaC) tools like AWS CloudFormation, Terraform, or AWS CDK
• Proficiency in monitoring or logging tools such as CloudWatch, CloudTrail, AWS Config, and third‑party tools (e.g., Prometheus, Grafana, New Relic)
• Experience in performance optimization and troubleshooting AWS resources
• Strong understanding of AWS security best practices and compliance frameworks (e.g., HIPAA, GDPR, PCI DSS)
• Experience implementing encryption, key management, and identity and access management solutions within AWS
• Knowledge of AWS database services such as Amazon RDS, DynamoDB, Aurora, and Redshift
• Experience in database