DevOps Lead Architect

Type of Requisition:
Regular

Clearance Level Must Currently Possess:
Other

Clearance Level Must Be Able to Obtain:
Confidential

Public Trust/Other Required:
Other

Job Family:
Software Engineering

Job Qualifications:

Skills:
Agile Methodology, Agile Tools, AWS CloudFormation, DevSecOps, Security Architecture Design
Certifications:
None
Experience:
10 + years of related experience
US Citizenship Required:
No

Job Description:

GDIT is seeking a DevOps Lead Architect to help support the Agile Tools, Licensing and Shared Services (ATLAS) program. NOTE: This position is contingent upon contract award.

Role Overview:

Serve as the enterprise DevOps/DevSecOps Architect and Platform Lead for the Centers for Medicare & Medicaid Services (CMS) Agile Tools, Licensing and Shared Services (ATLAS) program. You'll operate and evolve the end-to-end toolchain-CI/CD, artifact management and security scanning, test case management, observability/dashboarding, performance testing, and code quality-while owning platform security, compliance, reliability, and automation across the SDLC. Define and govern the enterprise architecture for DevOps toolchains and CI/CD platforms, including source code management, build automation, artifact repositories, code quality and security scanning, infrastructure-as-code, containerization, orchestration and observability. Develop target-state architectures, roadmaps and reusable reference pipelines and templates that application teams can adopt at scale. Evaluate and recommend tools and integrations, and ensure solutions are scalable, highly available and compliant with the CMS enterprise architecture, Technical Reference Architecture (TRA), Acceptable Risk Safeguards (ARS), NIST SP 800-53 and FedRAMP requirements. Lead architecture reviews, set standards for cloud and hybrid deployment, and provide authoritative technical guidance to engineering teams and Government leadership.

In this role, a typical day will include:

• Take accountability for platform performance, resilience, risk, documentation, and ensure continuous improvement to help teams deliver high-quality digital services.

• Evaluate technical tradeoffs and make sound decisions balancing security, reliability, scalability, cost, and usability.

• Provide enterprise leadership and develop scalable target architectures, roadmaps, standards, and reusable DevSecOps patterns.

• Lead platform operations across the DevOps suite, including CI/CD, JFrog Artifactory/Xray, TestRail, Grafana/Prometheus, JMaaS, and SonarQube.

• Administer artifact management by overseeing repository design, retention, RBAC/SSO, vulnerability policies (OWASP/CVE/CWE), alerting and remediation workflows, and backups and restores.

• Run test management using TestRail and Jira integration, and enable automated result ingestion and coverage and progress analytics.

• Own observability by configuring Prometheus and Grafana, standardizing dashboard design and governance, managing alert rules and data retention, and enabling self-service visualization.

• Operate performance testing with JMaaS by ensuring availability, CI/CD integration, and real-time performance dashboards.

• Enforce code quality with SonarQube by managing Quality Gates, PR decoration, upgrades/plugins, database maintenance, security hardening, and technical debt reporting.

• Own platform security and compliance by managing security architecture, hardening, and continuous ATO maintenance within FISMA boundaries, performing platform-level security testing, and coordinating with product security teams under joint operating agreements.

• Automate infrastructure with IaC by designing repeatable provisioning using Terraform and CloudFormation, validating with Packer, Ansible, and Selenium, and integrating security scanning (OWASP/Nessus/Docker image scanning).

• Standardize containerization and orchestration using Docker, Kubernetes/EKS, and Helm, and manage AWS VPC configuration, validation, and automated certificate rotation.

• Manage enterprise tools and identity services across Jira, Confluence, GitHub Enterprise, Slack, Jira Service Management, and Okta/IDM SSO/MFA, and serve as the subject-matter expert for identity integrations.

• Publish APIs & documentation, such as maintain catalogs (e.g., Kong), runbooks, SOPs, and knowledge bases for user self-service.

• Drive delivery excellence through Agile, DevOps, HCD, and Data Architecture handbooks, and enable open-source reuse patterns, minimal customization, and government publishing.

• Report and govern platform performance using DORA metrics, apply SRE practices such as SLOs, SLIs, and incident response, integrate ChatOps, and implement FinOps tagging, rightsizing, and monthly cost reporting.

• Lead transitions of tools and pipelines by coordinating configurations, managing historical data and artifacts, administering RBAC, and running parallel operations or mitigations to prevent production disruptions.

• Communicate upgrades and changes to users, and deliver sprint, monthly, and PI reports with references to live dashboards.

WHAT YOU'LL NEED TO SUCCEED - REQUIRED:

Clearance: Ability to obtain and maintain Public Trust
Education: Master's degree in computer science, information technology, engineering, or a related discipline; additional relevant experience may be considered in place of a degree.

Experience:

• 10+ years in DevOps/Platform Engineering

• 3-5+ years architecting enterprise toolchains in AWS.

Technical Skills:
• Technical depth across CI/CD, cloud, containers, IaC, security, observability, and automation.
• Knowledge of security compliance with CMS TRA, ARS, NIST SP 800-53, FedRAMP, and continuous compliance into platform decisions.
• Hands-on administration of Artifactory/Xray, SonarQube, TestRail, Grafana/Prometheus, Jenkins/CloudBees CI, and performance testing platforms.
• Strong security background: platform hardening, compliance implementation, and ATO sustainment in FISMA environments.
• Proven IaC expertise (Terraform/CloudFormation) and automation using Ansible, Packer, Selenium; CI integrations and release governance.
• Solid understanding of Kubernetes/EKS, Helm, Docker, AWS networking (VPC), and certificate management.
• Experience in integrating enterprise tools with Okta/IDM and enabling RBAC/SSO/MFA across the DevOps suite.
• Excellent stakeholder engagement and communication; success leading complex transitions with zero-downtime outcomes.

Schedule: CMS business hours (9:00 AM-5:00 PM ET) for non-production support; on-call rotation for 24×7 production support
Location: Remote (CONUS), with the ability to travel to CMS Headquarters in Bethesda, MD several times a year.

DESIRED QUALIFICATIONS:

• Prior leadership on CMS or other federal digital programs; familiarity with SAFe.

• Demonstrated FinOps achievements in AWS and proactive cost hygiene across platforms.

• Experience publishing API catalogs and developer portals (e.g., Kong).

• Strong track record enabling open-source reuse and inner-source collaboration.

The likely salary range for this position is $187,000 - $253,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:
40

Travel Required:
10-25%

Telecommuting Options:
Remote

Work Location:
USA VA Home Office (VAHOME)

Additional Work Locations:

Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.