DevSecOps Engineer

Apply for Job Job ID 365308
Location Twin Cities
Job Family Information Technology
Full/Part Time Full-Time
Regular/Temporary Regular
Job Code 9703IT
Employee Class Acad Prof and Admin
Add to Favorite Jobs Email this Job
About the Job

The Minnesota Supercomputing Institute (MSI) is looking for an experienced DevSecOps engineer with a strong operations background, who is capable of leading security analysis and implementation for a large research-focused linux-based enterprise. The successful candidate will be responsible for developing appropriate security controls to balance security framework standards against operational requirements, as a member of the overall operations team, and in collaboration with MSI operations leadership and Research Computing's Security Assurance Team. This will include implementation of security controls and their verification, using standard configuration management tools and/or SIEM frameworks as appropriate.

The breakdown of activities is roughly as follows:

Systems Security Operations (60%)

• As a leading member of the ASO Security team, and with consultation from the RI Security Assurance Team, analyze security and policy requirements for infrastructure platforms, linux systems, storage platforms, network devices, and other related systems.
• Design, test, and implement appropriate security technologies and controls, in collaboration with operations staff, via systems orchestration or other appropriate tools.
• Coordinate response to issues raised by monitoring operations, both internally and from the RI Security Assurance Team.
• Ensure controls meet both research usability and security requirements.

Systems Operations (20%)

• Identify and remediate system operational and performance issues; in particular those related to or resulting from implemented security and policy controls.
• Participate in operations project teams based on current needs for security and policy expertise.
  
  

Support and Planning (10%)

• Act as a security-related subject matter expert to assist with related end user issues escalated from MSI's helpdesk.
• Prioritize, plan, and scope tasks, assignments, and projects with minimal supervision.
• Manage tickets, tasks, and projects in MSI's relevant tracking systems.

General activities (10%)

• Explore the use of new technologies to solve unique problems and keep MSI on the cutting edge.
• Provide internal and external user support for escalated issues relating to MSI resources.
• Participate in tracking of security vulnerabilities, devise mitigation strategies, and monitor their implementation.
• Pursue professional development though relevant training, workshops, conferences and independent studies.
• Publish papers or presentations to share findings and help further the field of Research Computing.
• Participate in a lightweight 24x7 on-call rotation.
  

The Research Innovation Office (RIO) and Minnesota Supercomputing Institute (MSI) endorse a "work with flexibility" approach that offers a welcoming and flexible work environment where everyone is inspired to do their best. This position has been designated as Work Profile 2. Profile 2 is expected to work on-site more than 50% of the time and your office will be located in Walter Library on the Twin Cities campus. MSI's management retains the right to modify flexible work arrangement agreements on a temporary or permanent basis for any reason at any time. MSI has a strong commitment to the University's goal of creating a positive and inclusive campus climate by advancing equity and diversity. We aim to hire high-potential individuals with varying identities and backgrounds.

Required Qualifications

• BA/BS degree and at least 4 years of work experience in Linux Systems Administration and Security (or a closely related field), or Masters degree and at least 2 years of experience.
• Linux systems and infrastructure operations experience.
• Excellent oral and written communication and leadership skills.
• Able to work independently with periodic guidance.

Preferred Qualifications
These are areas we consider of particular interest, but are not requirements:

• Linux HPC or research computing environment(s).
• Experience deploying SIEM tools in a linux environment (eg Wazuh, CIS-CAT, Security Onion), and their application to compliance benchmarks, file integrity monitoring, etc.
• Familiarity with systems configuration management environments (eg Puppet, Salt, Ansible, etc. ).
• Experience implementing security and policy controls while balancing systems usability and performance.
• Experience with software integrity validation tools using SBOMs or similar technologies.
• Experience with implementation of HIPAA, HITRUST, FISMA, or NIST security policies and related systems configuration.

The Minnesota Supercomputing Institute (MSI) is a core research facility of the University of Minnesota (UofM), part of the Research Computing umbrella within the Research and Innovation Office. MSI provides advanced research computing infrastructure and expertise to the University's research and scholarly community and the State of Minnesota in order to advance and accelerate research and foster innovation and discoveries through advanced computing technologies, scientific computing and informatics, application development, and services. The Institute currently supports over 800 different groups with over 4500 active users spanning the sciences, engineering, life sciences, medicine, and social sciences.

The Advanced System Operations group (ASO) is a group of highly skilled, self-motivated technologists who are passionate about high performance systems technology, and applying it to the unique demands of resource intensive research computing. ASO is responsible for developing and managing the infrastructure components of the supercomputing institute, including:
• HPC Supercomputer clusters
• Physical and virtual infrastructure systems, and their hosted servers and services
• 20PB+ of POSIX and Object storage
• Researcher-facing portals and interactive services

Members of ASO work with cutting edge technologies and platforms, deliver high performance solutions to the University research community, balance usability needs with maintaining system security and stability, directly assist external and internal research entities, and develop novel high performance solutions to HPC scale operational challenges.

Pay Range: $85,000 - $115,000; depending on education/qualifications/experience

Time Appointment: 75%-100% Appointment

Position Type: Faculty and P&A Staff

Please visit the Office of Human Resources website for more information regarding benefit eligibility.

The University offers a comprehensive benefits package that includes:

• Competitive wages, paid holidays, and generous time off
• Continuous learning opportunities through professional.