Note: The job is a remote job and is open to candidates in USA. The University of Wisconsin-Madison is hiring two DevOps Engineers for their Regulated Research team within the Research Cyberinfrastructure group. These roles will involve planning, developing, and operating a compliance-ready environment for regulated research, focusing on security and compliance needs.
Responsibilities
- Produces and gathers evidence as needed for meeting assessor requirements
- Maintains documentation on the system security plan (SSP), including updating documentation as needed for changes that impact the SSP
- Manages, maintains, selects, and develops automation tools and infrastructure, including security configurations
- Serves as technical lead for one or more aspects of the system
- Serves as a subject matter expert to internal stakeholders, providing guidance and training to staff
- Develops, programs, and/or deploys automation workflows for deployment, configuration, and/or monitoring of systems/services
- Performs integration, migration, configuration, and security of existing applications and services into automated infrastructures
- Analyzes requirements and communicates and coordinates with staff and internal stakeholders related to the system and/or project
Skills
- Candidates must be U.S. citizens
- Professional experience in DevOps cloud engineering and Infrastructure as Code (IaC) with tools such as Terraform, Ansible, or Chef
- Hands-on experience implementing or supporting security controls aligned with NIST 800-171, NIST 800-53, HIPAA, or related frameworks
- Professional experience with multiple scripting or automation languages, such as Python, Bash, and PowerShell
- Demonstrable experience with defining (or navigating significant changes to) CI/CD pipelines that include security requirements. (required for level IV)
- Professional experience with developing novel architecture approaches involving several interconnecting systems to solve specific business challenges in the cloud (required for level IV)
- Professional experience with DevOps engineering in Microsoft Azure in a regulated research environment (for example, HIPAA or NIST 800-171)
- Professional experience supporting an environment which undergoes external assessment for compliance with security or privacy requirements (e.g., SOC 2, ISO 97001)
- Demonstrable experience in formally evaluating the impact on changes to processes with regards to security or compliance
- Professional experience collecting and presenting packages of evidence with regards to system architecture for assessment (preferred for level IV)
- Professional experience with developing novel architecture approaches involving several interconnecting systems to solve specific research challenges in the cloud (preferred for level IV)
Benefits
- Generous vacation, holidays, and sick leave
- Competitive insurances and savings accounts
- Retirement benefits
- Flexible work arrangement (FWA), which is reviewed and approved annually
- University provided computer
- Professional development opportunities
Company Overview