Type of Requisition:
Regular
Clearance Level Must Currently Possess:
Other
Clearance Level Must Be Able to Obtain:
Confidential
Public Trust/Other Required:
Other
Job Family:
Software Engineering
Job Qualifications:
Skills:
Agile Methodology, Agile Tools, AWS CloudFormation, DevSecOps, Security Architecture DesignCertifications:
NoneExperience:
10 + years of related experienceUS Citizenship Required:
No
Job Description:
GDIT is seeking a DevOps Lead Architect to help support the Agile Tools, Licensing and Shared Services (ATLAS) program. NOTE: This position is contingent upon contract award.
Role Overview:
Serve as the enterprise DevOps/DevSecOps Architect and Platform Lead for the Centers for Medicare & Medicaid Services (CMS) Agile Tools, Licensing and Shared Services (ATLAS) program. You’ll operate and evolve the end‑to‑end toolchain - CI/CD, artifact management and security scanning, test case management, observability/dashboarding, performance testing, and code quality - while owning platform security, compliance, reliability, and automation across the SDLC. Define and govern the enterprise architecture for DevOps toolchains and CI/CD platforms, including source code management, build automation, artifact repositories, code quality and security scanning, infrastructure-as-code, containerization, orchestration and observability. Develop target-state architectures, roadmaps and reusable reference pipelines and templates that application teams can adopt at scale. Evaluate and recommend tools and integrations, and ensure solutions are scalable, highly available and compliant with the CMS enterprise architecture, Technical Reference Architecture (TRA), Acceptable Risk Safeguards (ARS), NIST SP 800-53 and FedRAMP requirements. Lead architecture reviews, set standards for cloud and hybrid deployment, and provide authoritative technical guidance to engineering teams and Government leadership.
In this role, a typical day will include:
- Take accountability for platform performance, resilience, risk, documentation, and ensure continuous improvement to help teams deliver high-quality digital services.
- Evaluate technical tradeoffs and make sound decisions balancing security, reliability, scalability, cost, and usability.
- Provide enterprise leadership and develop scalable target architectures, roadmaps, standards, and reusable DevSecOps patterns.
- Lead platform operations across the DevOps suite, including CI/CD, JFrog Artifactory/Xray, TestRail, Grafana/Prometheus, JMaaS, and SonarQube.
- Administer artifact management by overseeing repository design, retention, RBAC/SSO, vulnerability policies (OWASP/CVE/CWE), alerting and remediation workflows, and backups and restores.
- Run test management using TestRail and Jira integration, and enable automated result ingestion and coverage and progress analytics.
- Own observability by configuring Prometheus and Grafana, standardizing dashboard design and governance, managing alert rules and data retention, and enabling self-service visualization.
- Operate performance testing with JMaaS by ensuring availability, CI/CD integration, and real-time performance dashboards.
- Enforce code quality with SonarQube by managing Quality Gates, PR decoration, upgrades/plugins, database maintenance, security hardening, and technical debt reporting.
- Own platform security and compliance by managing security architecture, hardening, and continuous ATO maintenance within FISMA boundaries, performing platform-level security testing, and coordinating with product security teams under joint operating agreements.
- Automate infrastructure with IaC by designing repeatable provisioning using Terraform and CloudFormation, validating with Packer, Ansible, and Selenium, and integrating security scanning (OWASP/Nessus/Docker image scanning).
- Standardize containerization and orchestration using Docker, Kubernetes/EKS, and Helm, and manage AWS VPC configuration, validation, and automated certificate rotation.
- Manage enterprise tools and identity services across Jira, Confluence, GitHub Enterprise, Slack, Jira Service Management, and Okta/IDM SSO/MFA, and serve as the subject-matter expert for identity integrations.
- Publish APIs & documentation, such as maintain catalogs (e.g., Kong), runbooks, SOPs, and knowledge bases for user self‑service.
- Drive delivery excellence through Agile, DevOps, HCD, and Data Architecture handbooks, and enable open-source reuse patterns, minimal customization, and government publishing.
- Report and govern platform performance using DORA metrics, apply SRE practices such as SLOs, SLIs, and incident response, integrate ChatOps, and implement FinOps tagging, rightsizing, and monthly cost reporting.
- Lead transitions of tools and pipelines by coordinating configurations, managing historical data and artifacts, administering RBAC, and running parallel operations or mitigations to prevent production disruptions.
- Communicate upgrades and changes to users, and deliver sprint, monthly, and PI reports with references to live dashboards.
WHAT YOU’LL NEED TO SUCCEED - REQUIRED:
Clearance: Ability to obtain and maintain Public Trust Education: Master’s degree in computer science, information technology, engineering, or a related discipline; additional relevant experience may be considered in place of a degree.
Experience:
- 10+ years in DevOps/Platform Engineering
- 3–5+ years architecting enterprise toolchains in AWS.
Technical Skills:
· Technical depth across CI/CD, cloud, containers, IaC, security, observability, and automation. · Knowledge of security compliance with CMS TRA, ARS, NIST SP 800-53, FedRAMP, and continuous compliance into platform decisions. · Hands‑on administration of Artifactory/Xray, SonarQube, TestRail, Grafana/Prometheus, Jenkins/CloudBees CI, and performance testing platforms. · Strong security background: platform hardening, compliance implementation, and ATO sustainment in FISMA environments. · Proven IaC expertise (Terraform/CloudFormation) and automation using Ansible, Packer, Selenium; CI integrations and release governance. · Solid understanding of Kubernetes/EKS, Helm, Docker, AWS networking (VPC), and certificate management. · Experience in integrating enterprise tools with Okta/IDM and enabling RBAC/SSO/MFA across the DevOps suite. · Excellent stakeholder engagement and communication; success leading complex transitions with zero‑downtime outcomes. Schedule: CMS business hours (9:00 AM–5:00 PM ET) for non-production support; on-call rotation for 24×7 production support Location: Remote (CONUS), with the ability to travel to CMS Headquarters in Bethesda, MD several times a year.
DESIRED QUALIFICATIONS:
- Prior leadership on CMS or other federal digital programs; familiarity with SAFe.
- Demonstrated FinOps achievements in AWS and proactive cost hygiene across platforms.
- Experience publishing API catalogs and developer portals (e.g., Kong).
- Strong track record enabling open‑source reuse and inner‑source collaboration.
GDIT IS YOUR PLACE:
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
- Growth: AI-powered career tool that identifies career steps and learning opportunities
- Support: An internal mobility team focused on helping you achieve your career goals
- Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
- Flexibility: Full-flex work week to own your priorities at work and at home
- Community: Award-winning culture of innovation and a military-friendly workplace
- undefined
OWN YOUR OPPORTUNITY:
Explore a career in program management at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your passion for the mission and delivering results.
#GDITcareers #OpportunityOwned #WeAreGDIT #transitioningmilitary #veterans #GDITFedHealthJobs
The likely salary range for this position is $187,000 - $253,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Scheduled Weekly Hours:
40
Travel Required:
10-25%
Telecommuting Options:
Remote
Work Location:
USA VA Home Office (VAHOME)
Additional Work Locations:
Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.
Our Identity Verification Process:
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
About Our Work:
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
Join our Talent Community to stay up to date on our career opportunities and events atgdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
