Tria Federal

Design and maintain secure, scalable FHIR backend services and APIs for CMS initiatives while supporting architecture decisions and healthcare data-exchange conformance. | Requires a bachelor's degree, 8+ years of backend engineering including 3+ years of HL7 FHIR, and eligibility for a U.S. Federal Position of Trust clearance. | Who we are: Tria Federal delivers digital services and technology solutions that support the health and safety of veterans, service members and civilians. For two decades, federal agencies have relied on Tria companies to advance their critical missions and modernize their systems, so that they can uphold their commitment to the American people. Today, we are pushing the boundaries of possibility through partnerships and investments in artificial intelligence and emerging technologies, developing solutions for the biggest challenges that government will face tomorrow. We are proud to employ and support military veterans who bring mission-first mindset, technical expertise, and leadership qualities that strengthen our work. Veterans, transitioning service members, and military spouses are strongly encouraged to apply. Job Description: We are seeking a Senior FHIR Backend Developer to design, build, and maintain the FHIR-based APIs that power CMS's FHIR initiatives. This is a hands-on engineering role focused on implementing standards-based healthcare data exchange, with primary responsibility for the services that submit and process the DEQM Summary MeasureReport profile. The ideal candidate is a strong backend engineer who has already implemented FHIR R4 resources, profiles, and APIs in production, and who is comfortable working inside CMS implementation guides (IGs) and conformance requirements. This role works closely with the project's Technical Lead and architecture decisions, turning profile and IG requirements into secure, well-tested, production-grade code. Basic Requirements: Ability to successfully obtain a U.S. Federal Position of Trust clearance designation. Must reside in and be able to perform work in the United States. Must have lived in the United States for 3 of the last 5 years. A bachelor's degree is required, preferably in computer science, software engineering, information systems, or a related field (equivalent experience considered). 8+ years of backend software engineering experience, including building and maintaining production REST APIs. 3+ years of hands-on experience implementing HL7 FHIR (R4 preferred) resources, profiles, extensions, and RESTful FHIR APIs. Experience building or extending a FHIR server (e.g., HAPI FHIR) or FHIR client integrations in a production environment. Experience implementing API security patterns such as SMART on FHIR, SMART Backend Services, and OAuth 2.0. Strong written and verbal communication skills, including the ability to document technical designs and decisions clearly. Additional Qualifications: HL7 FHIR Foundational Implementer certification strongly preferred; candidates actively pursuing it will also be considered. HL7 FHIR Advanced Developer or Advanced Architect certification is a nice-to-have. Experience implementing or consuming Da Vinci Digital Quality Measures (DEQM), the Quality Measure IG, CRMI, or QI-Core. Familiarity with CQL (Clinical Quality Language) as used in digital quality measure logic. Experience with FHIR Bulk Data export/import and large-scale healthcare data processing. Experience standing up automated profile validation and conformance testing in a CI/CD pipeline. Experience with Java-based FHIR implementations (e.g., HAPI FHIR) a strong plus. Prior experience supporting CMS programs, Medicare/Medicaid data exchange, or other federal health IT systems. Familiarity with FHIR Shorthand (FSH) and SUSHI for authoring and testing profiles and implementation guides. Experience participating in HL7 Connectathons or community implementation testing events. Responsibilities: Design, build, and maintain backend services that implement the QPP FHIR API, with a focus on conformance to the DEQM Summary MeasureReport profile. Implement FHIR resource validation and profile conformance checks, and integrate them into the QPP CI/CD pipeline. Build and maintain secure, scalable RESTful FHIR endpoints, applying SMART on FHIR / SMART Backend Services and OAuth 2.0 patterns. Partner with the Technical Lead on architecture decisions (ADRs), including DEQM version targeting, canonical URLs, and package versioning. Write and maintain automated unit and integration tests, and contribute to the conformance test suite. Troubleshoot and resolve defects related to data modeling, resource mapping, and FHIR interoperability. Participate in code reviews and contribute to the team's FHIR architecture and technical documentation. Stay current on relevant HL7 FHIR, Da Vinci, and CMS/ONC implementation guide updates that affect QPP. Support Connectathon testing, internal demos, and knowledge-sharing sessions as needed. Why Tria? What defines the Tria brand is more than just our dedication to excellence in our craft; it’s our incredible team of dedicated, talented, and passionate people that make Tria so exceptional. As people powering possible, we are all partners in our team’s shared success. As a company that cares about people, we seek to cultivate a culture in which all can thrive personally and professionally. We offer a top-tier benefits package to invest in your physical, mental, and financial health and wellness so that you can be your best self - at work and in life. At Tria, we are growth-minded, entrepreneurial in spirit, and committed to fostering a culture of inclusion and opportunity for all. Whatever your background, your role, your department, or stage in your professional journey, here you will have opportunities to learn new skills, seize new challenges, and advance your career as we grow. California Consumer Privacy Act (CCPA) We are committed to protecting your privacy. As part of our compliance with the California Consumer Privacy Act (CCPA), we want to inform you about how we collect, use, and protect your personal information during the job application process. For more details, please review https://www.oag.ca.gov/privacy/ccpa.

Analyze, design, and develop software applications using Agile methodology and Java-based tools, integrating front-end UI with J2EE designs and resolving bugs. | Experience with Java, JSTL, HTML, CSS, Bootstrap, OpenJPA, SonarQube, ability to work hybrid and travel occasionally. | Who we are: Tria Federal delivers digital services and technology solutions that support the health and safety of veterans, service members and civilians. For two decades, federal agencies have relied on Tria companies to advance their critical missions and modernize their systems, so that they can uphold their commitment to the American people. Today, we are pushing the boundaries of possibility through partnerships and investments in artificial intelligence and emerging technologies, developing solutions for the biggest challenges that government will face tomorrow. We are proud to employ and support military veterans who bring mission-first mindset, technical expertise, and leadership qualities that strengthen our work. Veterans, transitioning service members, and military spouses are strongly encouraged to apply. Full Stack Developer Requirements: Limited travel to various unanticipated client locations nationwide, telecommute and/or occasional relocation to analyze, design, develop software applications using Agile Methodology, Java, Java based tools, UI Screens, JQuery, JSP, JSTL, HTML, CSS, Bootstrap, AJAX. Work with custom JSTL; integrate front end UI, J2EE designs, POLO classes. Utlize OpenJPA, SQL Developer tool. Resolve critical issues, bugs, code vulnerabilities using SonarQube. Work Location: Headquartered in Arlington, VA. EEO Statement: Softrams, a Tria Federal Company, is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Softrams is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, or to participate in the job application or interview process, contact the Talent Acquisition Team at recruiting@softrams.com Know your rights poster: https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf Salary Range $174,000—$176,000 USD Why Tria? What defines the Tria brand is more than just our dedication to excellence in our craft; it’s our incredible team of dedicated, talented, and passionate people that make Tria so exceptional. As people powering possible, we are all partners in our team’s shared success. As a company that cares about people, we seek to cultivate a culture in which all can thrive personally and professionally. We offer a top-tier benefits package to invest in your physical, mental, and financial health and wellness so that you can be your best self - at work and in life. At Tria, we are growth-minded, entrepreneurial in spirit, and committed to fostering a culture of inclusion and opportunity for all. Whatever your background, your role, your department, or stage in your professional journey, here you will have opportunities to learn new skills, seize new challenges, and advance your career as we grow. California Consumer Privacy Act (CCPA) We are committed to protecting your privacy. As part of our compliance with the California Consumer Privacy Act (CCPA), we want to inform you about how we collect, use, and protect your personal information during the job application process. For more details, please review https://www.oag.ca.gov/privacy/ccpa.

Conduct security assessments, manage ATOs, document security controls, and perform risk management per NIST standards. | 3-5 years cybersecurity experience, DHS Public Trust clearance, bachelor's degree, and certifications like CISSP or Security+. | Who we are: Tria Federal delivers digital services and technology solutions that support the health and safety of veterans, service members and civilians. For two decades, federal agencies have relied on Tria companies to advance their critical missions and modernize their systems, so that they can uphold their commitment to the American people. Today, we are pushing the boundaries of possibility through partnerships and investments in artificial intelligence and emerging technologies, developing solutions for the biggest challenges that government will face tomorrow. We are proud to employ and support military veterans who bring mission-first mindset, technical expertise, and leadership qualities that strengthen our work. Veterans, transitioning service members, and military spouses are strongly encouraged to apply. Job Description: Tria Federal (Tria) is seeking a motivated and detail-oriented Information System Security Officer (ISSO) to join our team. The ISSO research, develops, implements, tests, and reviews an organization’s information security to protect information and prevent unauthorized access. Emphasis on knowledge of infrastructure devices (i.e. firewalls, routers, switches) Requirements: DHS Public Trust 3-5 years Cybersecurity experience Working knowledge and experience with CSAM and the NIST RMF Solid knowledge of the process to obtain a system ATO and requirements to maintain the ATO Experience working with system stakeholders to assess and manage system cybersecurity risk Ability to synthesize complex IT system information and communicate system status and requirements in written products and verbal presentations Ability to write clear, concise and effective security control implementation statements Familiarity with configuration settings and vulnerability management analysis of infrastructure devices Ability to draft a complete ATO package, to include the SSP Ability to work independently, and efficiently, with minimal direct supervision, and within given timelines Security+ Certification CSAM GRC Tool DHS Experience Qualifications: BS in Computer Science, Information Technology, or related field CISSP, Security+, CGRC (formerly CAP), CISM Responsibilities: Conduct initial Security Assessment and obtain system Authorization to Operate (ATO), in line with NIST SP 800-37 Rev. 2. Maintain the Security Authorization or ATO of assigned system(s) Continuously update all Security Authorization documentation to maintain assigned system’s ATO or system go-live dates. Select the baseline security controls for the IT system, using the CSAM Governance, Risk, and Compliance (GRC) Tool, and tailor controls where appropriate. Document all relevant NIST 800-53 Security Controls for assigned IT systems in the System Security Plan (SSP). Perform and document initial and annual risk self-assessments of all systems assigned Develop and document all supporting Security A&A artifacts (i.e., PTA, SSP, ITCP, BIA, CMP, MOU, ISA). Produce Security Authorization package for Authorizing Official (AO) signature including ATO Track the deployment of software to the environment that is not part of the base image. Conduct security impact analyses of proposed changes, provide recommendations. Ability to analyze configuration settings, implementation of STIGs, and conducting manual checklists. Generate and manage Plan of Action & Milestones (POA&Ms), with meaningful milestones, and clear/concise implementation statements for each non-compliant control for assigned IT Systems. Why Tria? What defines the Tria brand is more than just our dedication to excellence in our craft; it’s our incredible team of dedicated, talented, and passionate people that make Tria so exceptional. As people powering possible, we are all partners in our team’s shared success. As a company that cares about people, we seek to cultivate a culture in which all can thrive personally and professionally. We offer a top-tier benefits package to invest in your physical, mental, and financial health and wellness so that you can be your best self - at work and in life. At Tria, we are growth-minded, entrepreneurial in spirit, and committed to fostering a culture of inclusion and opportunity for all. Whatever your background, your role, your department, or stage in your professional journey, here you will have opportunities to learn new skills, seize new challenges, and advance your career as we grow. California Consumer Privacy Act (CCPA) We are committed to protecting your privacy. As part of our compliance with the California Consumer Privacy Act (CCPA), we want to inform you about how we collect, use, and protect your personal information during the job application process. For more details, please review https://www.oag.ca.gov/privacy/ccpa.