DevSecOps Engineer

This is a fully remote position, open to applicants in Colorado, +5 more states.

📋 Description

• Design, provision, and sustain secure, scalable AWS environments tailored for federal research data platforms.

• Operate distinct development, test, and production environments with configurations specific to each environment.

• Architect solutions for high availability, elastic scaling, and performance optimization for extensive imaging and omics datasets.

• Construct and manage secure data ingestion and distribution services, including upload portals, SFTP endpoints, validation workflows, and controlled S3 downloads.

• Facilitate metadata search, secure APIs, and large language model services such as Amazon Bedrock.

• Integrate with external NIH platforms via secure APIs and automated ETL pipelines.

• Monitor system health, capacity, availability, and costs utilizing CloudWatch.

• Oversee operating system and software patching alongside configuration baselines.

• Develop and maintain CI/CD pipelines for automated building, testing, scanning, and release processes.

• Define infrastructure as code that is repeatable, version-controlled, and auditable.

• Manage GitHub repositories, including branch protection, code review, and secrets management.

• Lead the transition of technical contracts, encompassing provisioning, migrations, validation, cutover, and production releases.

• Implement security measures aligned with FISMA, NIST, HIPAA, and NIH standards.

• Design elements of network security, identity and access management, encryption, key management, and secrets management.

• Deploy and optimize AWS WAF, GuardDuty, Macie, and Security Hub.

• Centralize logging, track security events, investigate incidents, and monitor vulnerabilities for remediation.

• Develop and sustain the ISSP and related security documentation while supporting ATO activities.

• Manage controlled-access data workflows, including access logging, reviews, renewals, and compliance investigations.

• Maintain tamper-resistant audit trails and perform quality assurance audits on security controls and data integrity.

• Execute daily backups, weekly encrypted cross-region replication, and disaster recovery testing.

• Document procedures for backup, recovery, and business continuity.

• Collaborate with developers, data managers, business analysts, and project managers on secure infrastructure designs.

• Provide security guidance, briefings, and role-based security awareness training.

• Serve as the technical lead when assigned, establishing standards and reviewing engineering work.

⛳️ Requirements

• Bachelor's degree in computer science, computer engineering, information security, or a related discipline.

• A minimum of 8 years of progressively responsible experience in systems engineering, cloud infrastructure, DevOps, or security engineering.

• At least 3 years of hands-on experience in designing and operating production workloads on AWS.

• Proficiency with AWS services including EC2, S3, RDS, IAM, VPC networking, Lambda, and CloudWatch.

• Experience in building and maintaining CI/CD pipelines and infrastructure as code through Terraform or CloudFormation.

• Knowledge of implementing cloud security controls such as IAM, MFA, encryption, key management, network segmentation, logging, and monitoring.

• Familiarity with FISMA, NIST SP 800-53, NIST Risk Management Framework, and HIPAA Security Rule.

• Experience in vulnerability management, patching, and incident response.

• Proven experience in implementing and testing backup and disaster recovery procedures.

• Proficiency in Python, Bash, or PowerShell.

• Experience with Git in a collaborative Agile environment.

• Strong documentation skills, including the creation of security plans and standard operating procedures.

• Excellent organizational, analytical, and communication skills, with the ability to work effectively as part of a team.

• Must be physically located in Colorado, Washington D.C., Georgia, Maryland, Michigan, Minnesota, North Carolina, or Virginia.

• Preferred: AWS or security certification; experience with ATO/FedRAMP/NIST SP 800-53; familiarity with NIH controlled-access data repositories; experience with AWS WAF, GuardDuty, Macie, Security Hub, Cognito, OpenSearch, and Bedrock; background in imaging data and secure file transfer; knowledge of containers and container security; understanding of Section 508/WCAG; experience with federal contracts and transitions; background in health research; experience in non-profit sectors.

🏝️ Benefits

• Remote work arrangement.

• 40 hours per week.

• Minimal overnight travel, capped at 5%.

• Base compensation determined by market range and geographic pay zones.

• AWS certification or security certification is noted as a preferred qualification.

• Exempt status.