• Design, build, and maintain secure CI/CD pipelines using GitHub Actions to deliver applications and infrastructure • Embed security controls, tools (SAST, DAST, SCA), and processes throughout the software development lifecycle • Manage and secure cloud infrastructure using Infrastructure as Code (IaC) with Terraform and Terragrunt • Implement and manage security for containerized applications using Docker • Collaborate with development teams (Java, Python, Django) to identify and remediate security vulnerabilities in code and dependencies • Automate security monitoring, logging, and incident response procedures within the AWS cloud environment • Ensure systems and applications meet federal compliance standards (e.g., FISMA, NIST) and CMS-specific security requirements • Support the security of data platforms and services, including Databricks and Redshift • Work with cross-functional teams to foster a culture of security awareness and best practices

• Own and operate infrastructure in AWS/Azure across environments (Dev, Staging, Production, DR) • Lead cloud-to-cloud migrations (e.g., AWS to Azure / GCP) • Manage CI/CD pipelines, versioned deployments, and environment isolation • Monitor and tune database performance (PostgreSQL, MySQL, Mongo) • Manage Azure Application Gateway for layer 7 load balancing, SSL termination, and WAF policies • Implement and manage caching layers (e.g., Redis) and data indexing with Elasticsearch for performance and observability • Deep experience with GitHub Actions • Proficient in managing infrastructure-as-code (IaC) • Scripting knowledge in Python, Go, or Shell for custom tooling and glue code. • Basic understanding of network fundamentals like Networks, DNS, PORTS, ROUTES,NAT GATEWAYS and VPN. • Configure CPU, memory, and disk partitions as required • Experience designing and maintaining backup strategies and DR plans in cloud and on-premise setups

• Design, implement, and maintain GitLab CI / CD pipelines for M&S applications and services • Integrate automated testing, code quality checks, SAST or DAST tools, vulnerability scanning, and deployment controls • Build and manage Docker and Kubernetes clusters supporting simulation platforms on AWS and hybrid environments • Operate secure cloud environments using IaC, configuration as code, and automated security controls • Produce SBOMs, scan findings, and pipeline documentation to support RMF and ATO compliance • Implement observability frameworks for logging, metrics, and tracing and resolve performance bottlenecks • Provide remediation guidance for findings triggered by automated code and container scanning • Support platform deployment and readiness events that may require TDY travel • Work closely with developers, security engineers, and PMO to standardize and modernize legacy delivery workflows

• Provide hands-on operational support for Azure cloud environments • Manage subscriptions, resource groups, networking, storage, Key Vaults, virtual machines, private endpoints, and security configurations • Support Databricks platform operations including users, groups, service principals, clusters, jobs, notebooks, serverless components, models, and Unity Catalog • Execute routine operational tasks to maintain platform stability and reliability • Support secure connectivity and basic cloud networking patterns • Apply Infrastructure as Code using Terraform or equivalent tools • Work closely with the internal platform team, following established standards, tooling, and governance • Contribute to long-term platform maturity through consistent, reliable execution