DevSecOps Engineer

The Minnesota Supercomputing Institute (MSI) is looking for an experienced DevSecOps engineer with a strong operations background, who is capable of leading security analysis and implementation for a large research-focused linux-based enterprise. The successful candidate will be responsible for developing appropriate security controls to balance security framework standards against operational requirements, as a member of the overall operations team, and in collaboration with MSI operations leadership and Research Computing's Security Assurance Team. This will include implementation of security controls and their verification, using standard configuration management tools and/or SIEM frameworks as appropriate.

The breakdown of activities is roughly as follows:

Systems Security Operations (60%)

• As a leading member of the ASO Security team, and with consultation from the RI Security Assurance Team, analyze security and policy requirements for infrastructure platforms, linux systems, storage platforms, network devices, and other related systems.
• Design, test, and implement appropriate security technologies and controls, in collaboration with operations staff, via systems orchestration or other appropriate tools.
• Coordinate response to issues raised by monitoring operations, both internally and from the RI Security Assurance Team.
• Ensure controls meet both research usability and security requirements.

Systems Operations (20%)

• Identify and remediate system operational and performance issues; in particular those related to or resulting from implemented security and policy controls.
• Participate in operations project teams based on current needs for security and policy expertise.
  
  

Support and Planning (10%)

• Act as a security-related subject matter expert to assist with related end user issues escalated from MSI's helpdesk.
• Prioritize, plan, and scope tasks, assignments, and projects with minimal supervision.
• Manage tickets, tasks, and projects in MSI's relevant tracking systems.

General activities (10%)

• Explore the use of new technologies to solve unique problems and keep MSI on the cutting edge.
• Provide internal and external user support for escalated issues relating to MSI resources.
• Participate in tracking of security vulnerabilities, devise mitigation strategies, and monitor their implementation.
• Pursue professional development though relevant training, workshops, conferences and independent studies.
• Publish papers or presentations to share findings and help further the field of Research Computing.
• Participate in a lightweight 24x7 on-call rotation.
  

The Research Innovation Office (RIO) and Minnesota Supercomputing Institute (MSI) endorse a "work with flexibility" approach that offers a welcoming and flexible work environment where everyone is inspired to do their best. This position has been designated as Work Profile 2. Profile 2 is expected to work on-site more than 50% of the time and your office will be located in Walter Library on the Twin Cities campus. MSI's management retains the right to modify flexible work arrangement agreements on a temporary or permanent basis for any reason at any time. MSI has a strong commitment to the University's goal of creating a positive and inclusive campus climate by advancing equity and diversity. We aim to hire high-potential individuals with varying identities and backgrounds.

Required Qualifications

• BA/BS degree and at least 4 years of work experience in Linux Systems Administration and Security (or a closely related field), or Masters degree and at least 2 years of experience.
• Linux systems and infrastructure operations experience.
• Excellent oral and written communication and leadership skills.
• Able to work independently with periodic guidance.

Preferred Qualifications
These are areas we consider of particular interest, but are not requirements:

• Linux HPC or research computing environment(s).
• Experience deploying SIEM tools in a linux environment (eg Wazuh, CIS-CAT, Security Onion), and their application to compliance benchmarks, file integrity monitoring, etc.
• Familiarity with systems configuration management environments (eg Puppet, Salt, Ansible, etc.).
• Experience implementing security and policy controls while balancing systems usability and performance.
• Experience with software integrity validation tools using SBOMs or similar technologies.
• Experience with implementation of HIPAA, HITRUST, FISMA, or NIST security policies and related systems configuration.

The Minnesota Supercomputing Institute (MSI) is a core research facility of the University of Minnesota (UofM), part of the Research Computing umbrella within the Research and Innovation Office. MSI provides advanced research computing infrastructure and expertise to the University's research and scholarly community and the State of Minnesota in order to advance and accelerate research and foster innovation and discoveries through advanced computing technologies, scientific computing and informatics, application development, and services. The Institute currently supports over 800 different groups with over 4500 active users spanning the sciences, engineering, life sciences, medicine, and social sciences.

The Advanced System Operations group (ASO) is a group of highly skilled, self-motivated technologists who are passionate about high performance systems technology, and applying it to the unique demands of resource intensive research computing. ASO is responsible for developing and managing the infrastructure components of the supercomputing institute, including:
* HPC Supercomputer clusters
* Physical and virtual infrastructure systems, and their hosted servers and services
* 20PB+ of POSIX and Object storage
* Researcher-facing portals and interactive services

Members of ASO work with cutting edge technologies and platforms, deliver high performance solutions to the University research community, balance usability needs with maintaining system security and stability, directly assist external and internal research entities, and develop novel high performance solutions to HPC scale operational challenges.

Pay Range: $85,000 - $115,000; depending on education/qualifications/experience

Time Appointment: 75%-100% Appointment

Position Type: Faculty and P&A Staff

Please visit the Office of Human Resources website for more information regarding benefit eligibility.

The University offers a comprehensive benefits package that includes:

• Competitive wages, paid holidays, and generous time off
• Continuous learning opportunities through professional training and degree-seeking programs supported by the Regents Tuition Benefit Program
• Low-cost medical, dental, and pharmacy plans
• Healthcare and dependent care flexible spending accounts
• University HSA contributions
• Disability and employer-paid life insurance
• Employee wellbeing program
• Excellent retirement plans with employer contribution
• Public Service Loan Forgiveness (PSLF) opportunity
• Financial counseling services
• Employee Assistance Program with eight sessions of counseling at no cost
• Employee Transit Pass with free or reduced rates in the Twin Cities metro area

Applications must be submitted online. To be considered for this position, please click the Apply button and follow the instructions. You will be given the opportunity to complete an online application for the position and attach a cover letter and resume.

Additional documents may be attached after application by accessing your "My Job Applications" page and uploading documents in the "My Cover Letters and Attachments" section.

To request an accommodation during the application process, please e-mail employ@umn.edu or call (612) 624-8647.

The University recognizes and values the importance of diversity and inclusion in enriching the employment experience of its employees and in supporting the academic mission. The University is committed to attracting and retaining employees with varying identities and backgrounds.

The University of Minnesota provides equal access to and opportunity in its programs, facilities, and employment without regard to race, color, creed, religion, national origin, gender, age, marital status, disability, public assistance status, veteran status, sexual orientation, gender identity, or gender expression. To learn more about diversity at the U: http://diversity.umn.edu

Any offer of employment is contingent upon the successful completion of a background check. Our presumption is that prospective employees are eligible to work here. Criminal convictions do not automatically disqualify finalists from employment.

The University of Minnesota, Twin Cities (UMTC)

The University of Minnesota, Twin Cities (UMTC), is among the largest public research universities in the country, offering undergraduate, graduate, and professional students a multitude of opportunities for study and research. Located at the heart of one of the nation's most vibrant, diverse metropolitan communities, students on the campuses in Minneapolis and St. Paul benefit from extensive partnerships with world-renowned health centers, international corporations, government agencies, and arts, nonprofit, and public service organizations.

At the University of Minnesota, we are proud to be recognized by the Star Tribune as a Top Workplace for 2021, as well as by Forbes as Best Employers for Women and one of America's Best Employers (2015, 2018, 2019, 2023), Best Employer for Diversity (2019, 2020), Best Employer for New Grads (2018, 2019), and Best Employer by State (2019, 2022).