Title: Evergreen Posting: DevSecOps Engineer Location: Remote (select US states) Department: Engineering Employment Type Full Time Workplace type Fully remote Job Description: We are actively building a pipeline of talented individuals in anticipation of upcoming project needs. By applying to this evergreen position, you recognize that while an immediate vacancy may not exist, you are eager to be part of our future cross-disciplinary efforts to improve lives through human-centered technology. Our DevSecOps Engineers enjoy tackling complex problems while working with other members of our cross-disciplinary teams to deliver elegant products across a modern technology stack. They are skilled experts across the stack, building accessible applications that put people first with code that is clean, maintainable, well-documented, and well-tested. They oversee builds, deployments, automated processes, and CI/CD pipelines, and are experienced at using infrastructure as code. At Coforma, engineers work closely with researchers and designers throughout a project's lifecycle, collaborating to add perspective and increase understanding. As such, your passion for articulating technology solutions that aim to improve lives is a feature, not a bug. Join us in building software that makes an impact and implementing human-centered solutions we can be proud to say we worked on together. Note: We're a remote-first organization, but some roles may require occasional travel. If a role has travel requirements or a hybrid or full time in-office schedule, this will be disclosed at the beginning of the hiring process. We participate in E-Verify. Upon hire, we will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the United States. Due to the nature of our work with the US federal government, all roles are required to work from the contiguous United States. Remote positions are open to applicants in the states listed below. To ensure we remain compliant with all state, county, and local employment and tax regulations, applicants must currently reside in one of the following states to be considered for employment with Coforma. This list will be updated periodically as our PeopleOps team works to open up hiring in additional states. - Arizona - California - District of Columbia - Florida - Georgia - Idaho - Illinois - Maryland - Massachusetts - Montana - Nevada - New Jersey - New York - North Carolina - Oregon - South Carolina - Tennessee - Texas - Virginia - Washington - Wisconsin What You'll Do (Key Responsibilities) - Write and review code, ensuring high standards of quality, maintainability, and test coverage - Solve problems across the tech stack alongside other engineers on the team, building new systems and improving existing ones - Lead other developers through ideation and articulation of solutions with an eye toward integration and reducing burden and tech debt - Consistently apply best practices, including a focus on accessibility - Collaborate with team members and government/client stakeholders to craft creative solutions and build technology products that improve the lives of those in the communities they serve - Engage with coworkers across disciplines according to agile and Scrum methodologies, including participating in planning, breaking down requirements into tasks, refinement, and estimation, etc. What You Know (Knowledge and Experience Requirements) - Open-source programming languages, like JavaScript/TypeScript, Ruby, Python, Java, etc. - Frameworks, libraries, or runtimes, like React, Rails, Node, Next, Angular, Spring, etc. - Testing frameworks like Jest, Testing Library, Mocha, Playwright, Cypress, etc. - How to leverage the command line via shell scripting - APIs and databases of various types, like SQL, Dynamo, Mongo, Postgres, etc. - Infrastructure tools like Terraform, Serverless, Amazon CDK, etc. - CI/CD tools like GitHub Actions, Jenkins, Circle, etc. - Cloud platforms like AWS, Azure, etc. - Observability and monitoring tools like Datadog, Splunk, SonarQube, NewRelic, Nessus, etc. - Security best practices like vulnerability scanning and remediation, threat modeling and detection, and static and dynamic testing - How to deliver polished, scalable, maintainable, performant code - How to communicate complex technical concepts to non-technical audiences - Agile and Scrum development methodologies Preferred Qualifications and Experience: - 3 or more years of experience building applications with open-source programming languages, modern frameworks, libraries, or runtimes - Prior experience in developing software in the digital services, government, or federal consulting space - 3 or more years of experience working with APIs and databases of various types - 3 or more years of experience working with modern testing frameworks, libraries, and testing services via APIs of various types - 3 or more years of experience working with cloud platforms, infrastructure tools, and IAC - 3 or more years of experience with observability and monitoring tools - 3 or more years of experience integrating CI/CD and pipeline tools Other - Internet: Will prioritize and maintain access to strong, reliable internet for the remote nature of our work, except when on vacation or holiday. - Security: Will keep the highest security practices to ensure privacy and security of Coforma and client information, given the nature of our work, even when on vacation. - Travel Flexibility: On request and with advanced notice, will attend in-person events such as meetings, workshops, and trainings as assigned for projects that require it. - Brand Representation: Will represent Coforma professionally and sincerely, modeling our Company Values in all interactions. About Coforma We believe ethical technology begins with responsible innovation. We’re a remote-first company that values collaboration, inclusivity, transparency, autonomy with accountability, and ethical design processes to facilitate responsible innovation and collaboration. Our cross-functional team works closely with each other and with our government, nonprofit, and commercial partners to research, design, and build better products and services. From empowering patients navigating surprise medical bills to streamlining the digital claims process for Veterans, we’re dedicated to improving people’s lives through thoughtful technology products and services. Together. Equal Opportunity & Inclusive Workplace Coforma is an Equal Employment Opportunity (EEO) employer. It's our policy to provide equal employment opportunities to all qualified applicants without regard to race, religion, sex, gender, age, disability, military or veteran status, or any other factors protected under federal, state, or local law.

• Design, develop, and maintain robust infrastructure solutions using IaC principles and tools like Terraform and Ansible. • Automate the provisioning, deployment, and scaling of infrastructure components across various environments. • Proactively identify opportunities to improve infrastructure performance, scalability, and cost-effectiveness, implementing optimized solutions. • Collaborate closely with development teams to understand their workflows and optimize build, test, and deployment processes. • Implement automated testing strategies to ensure the high quality and stability of software releases. • Integrate security practices and controls throughout the software development lifecycle (Shift-Left security). • Maintain and enhance security controls and validate compliance, ensuring the security and integrity of our systems. • Implement comprehensive monitoring and alerting systems to proactively detect and respond to performance and security issues. • Act as a key responder to incidents, troubleshoot system failures, and perform thorough root cause analysis to prevent future occurrences. • Continuously improve system observability, reliability, and resilience through effective monitoring and incident response strategies. • Actively participate in cross-functional team efforts, fostering collaboration and knowledge sharing with development and operations teams. • Create and maintain clear, concise documentation for processes, configurations, and best practices, ensuring smooth onboarding and knowledge transfer.

• Collaborate closely with infrastructure and engineering teams to improve DevSecOps practices • Contribute to the security and reliability of cloud-based applications running on AWS • Help evolve and maintain CI/CD pipelines with a strong focus on security and automation • Support initiatives around code analysis, vulnerability scanning, and secure development practices • Identify infrastructure and application security risks and contribute to mitigation strategies • Work on application security topics across cloud infrastructure and internal platforms • Help improve security visibility, operational processes, and engineering workflows • Contribute to the prevention and mitigation of malicious traffic and automated attack attempts • Promote security best practices across development and infrastructure teams

• Own end-to-end monitoring and alerting for critical platform components using Datadog, Application Insights, and Grafana. • Define and track SLOs/SLIs and drive proactive incident prevention. • Triage and resolve day-to-day DevOps tickets through scripting and automation (PowerShell, Bash, Azure CLI) to reduce operational toil and accelerate engineering velocity. • Manage and evolve cloud infrastructure using Terraform. • Build reusable modules and enforce infrastructure best practices across test and production environments. • Lead incident response, conduct blameless post-mortems, and implement follow-up actions to prevent recurrence. • Partner with engineering teams to improve CI/CD pipelines in Azure DevOps, reducing deployment risk and streamlining delivery. • Support SOC-2 compliant infrastructure design, assist with security hardening, vulnerability management, and regulatory requirements. • Monitor industry trends — especially around AI-assisted operations — and evaluate new tools to continuously improve infrastructure reliability and performance.