Staff Engineer, DevSecOps

Bellese is a mission-driven Digital Services Company committed to pioneering innovative technology solutions in civic healthcare. Our dedication lies in making a meaningful impact on public health outcomes.

Driven by service design, we strive to know the “Why” to understand the healthcare journey for patients, caregivers, providers, payers, and policymakers. Our goal is to design and build solutions that reduce confusion, provide clarity, support decision making, and streamline the process so that we and our partners can focus on providing better health outcomes by improving patient care and reducing costs and burden.

Team you will be joining

The Centers for Medicare & Medicaid Services (CMS) is enhancing program integrity efforts to combat fraud, waste, and abuse (FWA) within Medicare and Medicaid. The Unified Case Management (UCM) system serves as a centralized application for Program Integrity Contractors, facilitating case tracking, audits, investigations, and workload management. UCM supports coordinated efforts to prevent FWA and ensure compliance through efficient lead management, investigative actions, and reporting. As part of CMS’s modernization initiative, we are transforming UCM into a modern, scalable architecture that enhances performance, security, and usability. This effort includes migrating to cloud-based solutions, improving system interoperability, and adopting cutting-edge technologies to streamline workflows and improve data-driven decision-making. Our goal is to ensure a more robust, efficient, and future-ready platform for program integrity operations.

As a DevSecOps Engineer, you will:
Influence: Make an impact across projects and products by improving security, reliability, and delivery.
Technology: Apply strong expertise in DevSecOps, AWS, CI/CD, Infrastructure as Code, containers, automation, and security.
System: Scope, design, and deliver medium-to-large initiatives while reducing technical debt, risk, and operational complexity.
People: Support and mentor team members by sharing knowledge and promoting collaboration.
Process: Follow and improve engineering and DevSecOps practices to enable a secure, reliable flow of features to production.

These are the types of things you’ll be working on
Design, develop, test, deploy, and maintain scalable, secure, and high-quality software services, with an emphasis on backend systems, microservices, and APIs.
Participate in architecture and design discussions, providing expertise on cloud architecture, application security, scalability, reliability, and appropriate technologies and frameworks.
Build and maintain CI/CD pipelines that automate software build, test, security validation, deployment, and release processes across development and production environments.
Implement and maintain Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or equivalent technologies to provision and manage AWS infrastructure consistently and securely.
Develop and manage containerized applications and supporting platforms using technologies such as Docker and Kubernetes/EKS.
Apply DevSecOps practices by integrating security controls, automated security testing, vulnerability scanning, secrets management, and compliance checks throughout the software development lifecycle.
Deploy and maintain observability solutions for microservices and APIs, including centralized logging, metrics, distributed tracing, alerting, and performance monitoring.
Troubleshoot complex application, infrastructure, deployment, and production issues; perform root-cause analysis and implement preventative improvements.
Conduct code, architecture, infrastructure, and security reviews to identify risks, vulnerabilities, reliability concerns, and opportunities for improvement.
Participate in vulnerability management, threat assessments, security reviews, and remediation activities across applications, containers, dependencies, and AWS infrastructure.
Implement and maintain AWS s