DevSecOps Engineer

Our core values define who we are as an organization and serve as the foundation of our code of ethics. Arbor Research expects all employees to embody and demonstrate in our day-to-day work. 

• Collaborative Spirit: We expect each staff member to learn from and teach one another and ask each to exhibit curiosity and respect for the contributions of others. 
• Creativity: We strive to cultivate a challenging, stimulating, and supportive environment where our employees are expected to be inquisitive, take the initiative, and demonstrate ingenuity. 
• Credibility: Our employees are smart, thoughtful, and objective in their work. We expect them to be technically solid in their area of expertise and for those researching to demonstrate scientific rigor. 
•  Dedication: Our team achieves success because of our dedication to carrying out high-quality work and delivering trusted results. 

The DevSecOps Engineer designs, builds, secures and operates the cloud infrastructure that hosts federal research data platforms, including public websites, request management applications, searchable data catalogs and data processing pipelines. The role combines cloud and DevOps engineering with information security engineering. It owns the infrastructure, deployment automation, monitoring, backup and disaster recovery for each environment, and it implements and continuously monitors the security controls required by NIH, HHS and federal standards (FISMA, NIST SP 800-53 Moderate, HIPAA and the NIH security standards for controlled-access data repositories). 

The ideal candidate combines hands-on Amazon Web Services (AWS) engineering skills (compute, storage, databases, networking, identity and serverless services), infrastructure as code and CI/CD pipeline automation with practical security engineering experience in threat detection, vulnerability management, security documentation and audit readiness. The engineer builds security into every stage of the delivery lifecycle rather than adding it at the end.

*Base Compensation is determined by market range and geographic location pay zones. Base Compensation also includes various individual factors unique to each candidate such as job level, prior experience, skill set, certifications, and education, which may impact the compensation structure.