DevSecOps Lead - Remote (WFH)

About Cognitive:

Cognitive is an IT and software engineering services company dedicated to elevating the quality, speed and delivery of today’s US government healthcare programs. With a wealth of clinical expertise and hands-on experience, our team understands the significant challenges our government clients—and their customers—face every day. This real-world experience equips us to develop IT solutions that seamlessly connect all facets of healthcare delivery. At Cognitive, we’re guiding government agencies to the forefront of technology innovation in healthcare delivery.

Position Overview:

*This position is contingent upon contract award*

The Solution Architect is responsible for technical architecture, cloud infrastructure, and the DevSecOps pipeline for the CMS Drug Data Processing System (DDPS) and Payment Reconciliation System (PRS). This individual is the AWS and data platform anchor for the program, owning the overall DDPS/PRS technical architecture including multi-AZ VPC topology, Snowflake/Redshift/Databricks/Athena data platform, Airflow orchestration, IDR/BEQ interfaces, and cloud modernization strategy and ensuring all solutions align with CMS Technical Reference Architecture (TRA) and Acceptable Risk Safeguards (ARS).

This is a remote position; however, Cognitive hires only in the following designated U.S. states based on contract and business requirements: VA, DC, MD, TN, FL, AZ, CO, OR, and TX.

Key Responsibilities:

• Own DDPS/PRS technical architecture, cloud infrastructure design, and DevSecOps pipeline oversight; ensure all solutions align with CMS Technical Reference Architecture (TRA), Acceptable Risk Safeguards (ARS), FISMA, and NIST standards.
• Architect and maintain the full CMS AWS environment including multi-AZ VPC topology, AWS PrivateLink endpoints, EC2 App Servers and Worker Nodes, Lambda Serverless, S3, SQS, Route 53, and Systems Manager across Production and Non-Production VPCs.
• Design, optimize, and maintain the DDPS data platform: Snowflake (IDRC data), AWS Redshift Serverless (ODS), Amazon Athena, AWS MWAA/Apache Airflow, and Databricks (Data Plane and Control Plane).
• Drive cloud optimization and cost strategy; recommend service substitutions and consolidations; architect API and multi-cloud data sharing integrations for CMS and downstream stakeholders.
• Maintain IDR compatibility, AWS networking and security services (WAF, GuardDuty, SecurityHub, Inspector, CloudTrail, Config, CloudFormation), and collaborate with the DevSecOpsLead on ATO compliance.
• Support CMS AI/ML initiatives including data preparation, model implementation, and validation within CMS AI governance requirements; participate in CMS-led proofs of concept and architectural evaluations.
• Ensure high-availability, multi-AZ architecture for a system processing 9–10 million PDE transactions daily; integrate with AWS messaging services including EventBridge, SQS, SNS, and SES.

Qualifications:

• Bachelor's degree in Computer Science, Engineering, or related field; 10 or more years in solution or enterprise architecture, including 5 or more years architecting on AWS.
• AWS Solutions Architect Professional certification ordemonstratedequivalent depth of AWSexpertise.
• Hands-on production fluency across the DDPS data platform stack: Snowflake, AWS Redshift Serverless, Databricks (Notebooks, Jobs, AutoML), Amazon Athena, AWS MWAA/Apache Airflow, Amazon S3, AWS Lambda, and VPC/PrivateLinknetworking.
• Deepexpertisein AWScomputeservices: EC2, EBS, Lambda, Systems Manager, VPC, IAM, and Secrets Manager.
• Experience with AWS messaging and orchestration services:EventBridge, SQS, SNS, and SES.
• Demonstrated experience ensuring solutionscomply withCMS TRA, ARS, FISMA, and NIST standards in a federal cloud environment.
• Experience with multi-AZ, high-availability AWS architectures supporting high-volume batch processing systems.
• Experience designing API integrations and multi-cloud data sharing solutions for federal programs.
• Experience with AWS security and compliance tools:GuardDuty,SecurityHub, Inspector, CloudTrail, Config, and CloudFormation.
• Ability to pass CMS and internal required background checks for public trust.

Why Join Us? 

• Be part of a mission-driven organization making a difference in healthcare IT.
• Collaborate with innovative and passionate professionals that are there to support you at every turn.
• Enjoy a supportive work/life balance with the flexibility of a 100% remote company.
• Benefit from opportunities for growth and development in a dynamic environment.