Easter Seals Jobs

Job Information

The University of Chicago Senior DevSecOps Engineer - JR28758-3800 in Chicago, Illinois

This job was posted by https://illinoisjoblink.illinois.gov : For more information, please see: https://illinoisjoblink.illinois.gov/jobs/12443682 Department

Provost Globus Software Engineering Central Operations

About the Department

Globus (www.globus.org) is a sustainable, non-profit unit within The University of Chicago delivering solutions to the research community worldwide. Globus develops and provides critical services that support scientific research for governmental, academic, and commercial organizations in a wide range of disciplines including life sciences, physics, and astronomy. We develop and operate commercial-quality, cloud-based software application and platform services used by 10s of thousands of researchers to manage their large-and growing-data management challenges. We have offices located at the NBC Tower in the heart of downtown Chicago and remote employees who work-from-home. Globus, together with Globus Labs, a research group within the University of Chicago, and part of the Data Science and Learning Division at Argonne National Labs, develop and deploy cutting edge technologies to solve new challenges facing the scientific community and enable break-through scientific discoveries.

Job Summary

As a senior member of the Globus Operations team, reporting to the System and Security Operations Manager, the focus of this position is to ensure security is comprehensively and effectively integrated into both our software services and AWS cloud infrastructure. The Globus platform is a hybrid solution that combines AWS-hosted orchestration services with installable applications, enabling seamless integration into customer environments. It offers a range of capabilities, including identity and access management, data transfer and sharing, and task automation, delivered as both software-as-a-service (SaaS) and platform-as-a-service (PaaS).

This position will architect, implement, and operate a resilient Cloud infrastructure to ensure high-security, high-performance, high-availability and scalability for Globus platform services. We\'re looking for a talented senior DevSecOps engineer who can effectively work across teams to integrate security into new and existing software and infrastructure services as well as be an evangelist and educator of security best practices.

Responsibilities

  • Security Operations: lead the implementation and monitoring of Globus\' security procedures and controls, including creating audit reports to meet target security compliance standards. Participate in incident response, as required.
  • Security Integration: Integrate security features into the software development life cycle, as well as existing services and infrastructure. Identify potential threats and vulnerabilities early in the development process through techniques like STRIDE and implement mitigating strategies.
  • Architecture and Design: lead the definition and documentation of Cloud infrastructure architecture, including security, monitoring, logging, and deployment strategies, for the production and development environments.
  • SRE/Operations: Deploy, operate, monitor, and maintain production Globus services for high availability.
  • Support: As a technical consultant and resource for other team members, including the engineering and user support team, assist in addressing operational issues and troubleshooting.
  • Designs new systems, features, and tools. Solves complex problems and identifies opportunities for technical improvement and performance optimization. Reviews and tests solutions to ensure appropriate standards are met.
  • Utilizes technical knowledge of existing and emerging technologies, including public cloud offerings from Amazon Web Services, Microsoft Azure, and Google Cloud.
  • Performs other related work as needed.

Minim m Qualifications

Education:

Minimum requirements include a college or university degree in related field.

Work Experience:

Minimum requirements include knowledge and skills developed through 5-7 years of work experience in a related job discipline.

Certifications:

---

Preferred Qualifications

Experience:

Strong understanding of security concepts, including threat modeling, risk assessment, and vulnerability management.

Knowledge of the SDLC and experience integrating security best practices at every process stage.

Understanding cloud security principles, including secure architecture design and configuration management.

Knowledge of container security principles relating to Docker and AWS ECS.

Good analytical problem-solving skills to scrutinize and solve very intricate security problems with effective solutions.

System Administration, Operations Monitoring, Application Performance Monitoring, Logging, Incident and Problem Management.

Use operational tools and monitoring platforms to gain in-depth knowledge, understanding, and ongoing system availability, performance, and capacity.

Define requirements and develop tools

DirectEmployers