[Hiring] DevSecOps Engineer @Arbor Research Collaborative for Health

Role Description

The DevSecOps Engineer designs, builds, secures, and operates the cloud infrastructure that hosts federal research data platforms, including public websites, request management applications, searchable data catalogs, and data processing pipelines. The role combines cloud and DevOps engineering with information security engineering. It owns the infrastructure, deployment automation, monitoring, backup, and disaster recovery for each environment, and it implements and continuously monitors the security controls required by NIH, HHS, and federal standards (FISMA, NIST SP 800-53 Moderate, HIPAA, and the NIH security standards for controlled-access data repositories).

The ideal candidate combines hands-on Amazon Web Services (AWS) engineering skills with practical security engineering experience.

Qualifications

• Bachelor's degree in computer science, computer engineering, information security, or a related field.
• At least eight (8) years of progressively more responsible experience in systems engineering, cloud infrastructure, DevOps, or security engineering.
• At least three (3) years of hands-on experience designing and operating production workloads on AWS.
• Experience building and maintaining CI/CD pipelines and infrastructure as code.
• Demonstrated experience implementing security controls for cloud-hosted applications and data.
• Working knowledge of federal security frameworks, including FISMA and NIST SP 800-53.
• Experience with vulnerability management, patching, and incident response.
• Experience implementing and testing backup and disaster recovery procedures.
• Proficiency in at least one scripting language (e.g., Python, Bash, or PowerShell).
• Experience with version control (Git) in a collaborative, Agile workflow.
• Strong written documentation skills.
• Excellent organizational, analytical, and communication skills.

Requirements

• Experience with AWS services such as EC2, S3, RDS, IAM, VPC networking, Lambda, and CloudWatch.
• Experience with security services like AWS WAF, Amazon GuardDuty, Amazon Macie, and AWS Security Hub.
• Experience with centralized logging and monitoring using AWS CloudTrail and Amazon CloudWatch.
• Experience with automated backups and disaster recovery procedures.
• Experience with containers and container security (e.g., Docker, ECS, EKS, Fargate).

Benefits

• Remote work arrangement.
• Salary range: $92,000 to $149,500.
• Base compensation determined by market range and geographic location pay zones.
• Includes various individual factors unique to each candidate.

Company Description

Arbor Research LLC is committed to embodying core values that define the organization and serve as the foundation of its code of ethics.

• Collaborative Spirit: Encouraging learning and respect among staff.
• Creativity: Cultivating a stimulating environment for inquisitive and innovative employees.
• Credibility: Expecting employees to be technically solid and objective in their work.
• Dedication: Achieving success through high-quality work and trusted results.