DevOps Lead Architect

GDIT is seeking a DevOps Lead Architect to help support the Agile Tools, Licensing and Shared Services (ATLAS) program. NOTE: This position is contingent upon contract award.

Role Overview:

Serve as the enterprise DevOps/DevSecOps Architect and Platform Lead for the Centers for Medicare & Medicaid Services (CMS) Agile Tools, Licensing and Shared Services (ATLAS) program. You’ll operate and evolve the end‑to‑end toolchain—CI/CD, artifact management and security scanning, test case management, observability/dashboarding, performance testing, and code quality—while owning platform security, compliance, reliability, and automation across the SDLC. Define and govern the enterprise architecture for DevOps toolchains and CI/CD platforms, including source code management, build automation, artifact repositories, code quality and security scanning, infrastructure-as-code, containerization, orchestration and observability. Develop target-state architectures, roadmaps and reusable reference pipelines and templates that application teams can adopt at scale. Evaluate and recommend tools and integrations, and ensure solutions are scalable, highly available and compliant with the CMS enterprise architecture, Technical Reference Architecture (TRA), Acceptable Risk Safeguards (ARS), NIST SP 800-53 and FedRAMP requirements. Lead architecture reviews, set standards for cloud and hybrid deployment, and provide authoritative technical guidance to engineering teams and Government leadership.

In this role, a typical day will include:

• Take accountability for platform performance, resilience, risk, documentation, and ensure continuous improvement to help teams deliver high-quality digital services.

• Evaluate technical tradeoffs and make sound decisions balancing security, reliability, scalability, cost, and usability.

• Provide enterprise leadership and develop scalable target architectures, roadmaps, standards, and reusable DevSecOps patterns.

• Lead platform operations across the DevOps suite, including CI/CD, JFrog Artifactory/Xray, TestRail, Grafana/Prometheus, JMaaS, and SonarQube.

• Administer artifact management by overseeing repository design, retention, RBAC/SSO, vulnerability policies (OWASP/CVE/CWE), alerting and remediation workflows, and backups and restores.

• Run test management using TestRail and Jira integration, and enable automated result ingestion and coverage and progress analytics.

• Own observability by configuring Prometheus and Grafana, standardizing dashboard design and governance, managing alert rules and data retention, and enabling self-service visualization.

• Operate performance testing with JMaaS by ensuring availability, CI/CD integration, and real-time performance dashboards.

• Enforce code quality with SonarQube by managing Quality Gates, PR decoration, upgrades/plugins, database maintenance, security hardening, and technical debt reporting.

• Own platform security and compliance by managing security architecture, hardening, and continuous ATO maintenance within FISMA boundaries, performing platform-level security testing, and coordinating with product security teams under joint operating agreements.

• Automate infrastructure with IaC by designing repeatable provisioning using Terraform and CloudFormation, validating with Packer, Ansible, and Selenium, and integrating security scanning (OWASP/Nessus/Docker image scanning).

• Standardize containerization and orchestration using Docker, Kubernetes/EKS, and Helm, and manage AWS VPC configuration, validation, and automated certificate rotation.

• Manage enterprise tools and identity services across Jira, Confluence, GitHub Enterprise, Slack, Jira Service Management, and Okta/IDM SSO/MFA, and serve as the subject-matter expert for identity integrations.

• Publish APIs & documentation, such as maintain catalogs (e.g., Kong), runbooks, SOPs, and knowledge bases for user self‑service.

• Drive delivery excellence through Agile, DevOps, HCD, and Data Architecture handbooks, and enable open-source reuse patterns, minimal customization, and government publishing.

• Report and govern platform performance using DORA metrics, apply SRE practices such as SLOs, SLIs, and incident response, integrate ChatOps, and implement FinOps tagging, rightsizing, and monthly cost reporting.

• Lead transitions of tools and pipelines by coordinating configurations, managing historical data and artifacts, administering RBAC, and running parallel operations or mitigations to prevent production disruptions.

• Communicate upgrades and changes to users, and deliver sprint, monthly, and PI reports with references to live dashboards.

WHAT YOU’LL NEED TO SUCCEED - REQUIRED:

Clearance: Ability to obtain and maintain Public Trust
Education: Master’s degree in computer science, information technology, engineering, or a related discipline; additional relevant experience may be considered in place of a degree.

Experience:

• 10+ years in DevOps/Platform Engineering

• 3–5+ years architecting enterprise toolchains in AWS.

Technical Skills:

·   Technical depth across CI/CD, cloud, containers, IaC, security, observability, and automation.

·   Knowledge of security compliance with CMS TRA, ARS, NIST SP 800-53, FedRAMP, and continuous compliance into platform decisions.

·   Hands‑on administration of Artifactory/Xray, SonarQube, TestRail, Grafana/Prometheus, Jenkins/CloudBees CI, and performance testing platforms.

·   Strong security background: platform hardening, compliance implementation, and ATO sustainment in FISMA environments.

·   Proven IaC expertise (Terraform/CloudFormation) and automation using Ansible, Packer, Selenium; CI integrations and release governance.

·   Solid understanding of Kubernetes/EKS, Helm, Docker, AWS networking (VPC), and certificate management.

·   Experience in integrating enterprise tools with Okta/IDM and enabling RBAC/SSO/MFA across the DevOps suite.

·   Excellent stakeholder engagement and communication; success leading complex transitions with zero‑downtime outcomes.

Schedule: CMS business hours (9:00 AM–5:00 PM ET) for non-production support; on-call rotation for 24×7 production support
Location: Remote (CONUS), with the ability to travel to CMS Headquarters in Bethesda, MD several times a year.

DESIRED QUALIFICATIONS:

• Prior leadership on CMS or other federal digital programs; familiarity with SAFe.

• Demonstrated FinOps achievements in AWS and proactive cost hygiene across platforms.

• Experience publishing API catalogs and developer portals (e.g., Kong).

• Strong track record enabling open‑source reuse and inner‑source collaboration.

GDIT IS YOUR PLACE:
At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities

• Support: An internal mobility team focused on helping you achieve your career goals

• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off

• Flexibility: Full-flex work week to own your priorities at work and at home

• Community: Award-winning culture of innovation and a military-friendly workplace

• undefined

OWN YOUR OPPORTUNITY:
Explore a career in program management at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your passion for the mission and delivering results.

#GDITcareers

#OpportunityOwned

#WeAreGDIT

#transitioningmilitary

#veterans

#GDITFedHealthJobs