DevOps Engineer (Infrastructure & Development), Healthcare Consulting

About Sellers Dorsey

Sellers Dorsey is a leading and fast-growing national healthcare consulting firm specializing in Medicaid financing, policy, and operations. We deliver impactful outcomes for our clients with a combination of technical expertise and deep understanding of public policy, government, and national and local political landscape. Together with its clients, Sellers Dorsey realizes opportunities that enhance the bottom-line and ultimately improve the lives of people and is committed to expanding access to healthcare in the US. 

About the Role

Sellers Dorsey is seeking a DevOps Engineer (DOE) who will be responsible for bridging the gap between software development and operations. As the DOE, you will design, build, and maintain automated systems and tools that facilitate software development, testing, deployment, and monitoring, with a strong focus on continuous integration and continuous delivery (CI/CD) practices. The DevOps Engineer streamlines the software release life cycle for the firm – ensuring efficient and reliable software delivery, infrastructure development, and system performance, and completes other duties as assigned.

Key Responsibilities

• Automation: Develop and optimize code, scripts, and automation tools to streamline workflows and improve efficiency. Implement and manage cloud technologies, leveraging containers and Infrastructure as Code (IaC) tools like Terraform for scalable deployments. Deploy and orchestrate containerized environments using Docker, ensuring seamless operation with Kubernetes or ECS for automated scaling and management. Work closely with developers, QA Engineers, and system administrators to identify and resolve issues throughout the development life cycle.
• Security & Monitoring: Apply and enforce security principles, practices, and tools to protect systems and data. Conduct threat modeling and risk assessments to identify vulnerabilities and mitigate potential threats. Utilize security testing tools to proactively detect and remediate weaknesses in applications. Maintain and enhance application security and compliance through continuous monitoring and improvement efforts – adhering to legal & regulatory requirements. Manage security risks to align protection strategies with business objectives. Ensure DevSecOps practices remain compliant with industry standards through continuous monitoring and governance.
• CI/CD Pipeline Management: Integrate security into CI/CD pipelines by leveraging automation tools for efficient and scalable deployment. Utilize tools like Argo CD, Ansible, and GitLab CI to streamline security implementation across development workflows. Deploy and automate application security testing using: 1). Static application security testing (SAST) to detect vulnerabilities in source code. 2). Dynamic application security testing (DAST) to identify runtime security risks. 3). Software composition analysis (SCA) to assess dependencies for security issues. 4). Software bill of materials (SBOM) automation to enhance software supply chain transparency.
• Continuous Learning & Application: Research and analyse the latest security threats, emerging technologies, and DevSecOps trends to stay ahead of evolving risks. Engage in ongoing professional development by attending training sessions, obtaining certifications, and actively participating in industry discussions. Apply new knowledge to improve security strategies, enhance system protections, and drive innovation in DevSecOps practices.

Key Qualifications

• Bachelor's degree in Computer Science, Engineering, or related field required.
• Certification in Azure DevOps or related Microsoft technologies is required.
• 5+ years of proven experience as a DevOps Engineer within the Healthcare industry, with a focus on Microsoft technologies.
• Strong knowledge of Azure services and Azure DevOps.
• Experience with infrastructure as code (IaC) tools like Terraform and ARM templates.
• Proficiency in scripting languages such as PowerShell, Python, or Bash.
• Familiarity with containerization and orchestration tools (Docker, Kubernetes).
• Excellent problem-solving skills and attention to detail.
• Strong communication and collaboration skills.
• Experience with monitoring tools like Prometheus, Grafana, or Azure Monitor.
• Knowledge of security