Regulated Research DevOps Engineer

About the role

The Regulated Research team within the Research Cyberinfrastructure group at the University of Wisconsin-Madison, Division of Information Technology is hiring two DevOps Engineers for a regulated research platform.

These individuals will plan, develop, and operate a compliance-ready environment for Cybersecurity Maturity Model Certification (CMMC) Level 2 (Self and C3PAO) requiring NIST 800-171 controls, and other regulated research areas over time.

Responsibilities

• Produces and gathers evidence as needed for meeting assessor requirements
• Maintains documentation on the system security plan (SSP), including updating documentation as needed for changes that impact the SSP
• Manages, maintains, selects, and develops automation tools and infrastructure, including security configurations
• Serves as technical lead for one or more aspects of the system
• Serves as a subject matter expert to internal stakeholders, providing guidance and training to staff
• Develops, programs, and/or deploys automation workflows for deployment, configuration, and/or monitoring of systems/services
• Performs integration, migration, configuration, and security of existing applications and services into automated infrastructures
• Analyzes requirements and communicates and coordinates with staff and internal stakeholders related to the system and/or project

Requirements

• Candidates must be U.S. citizens
• Professional experience in DevOps cloud engineering and Infrastructure as Code (IaC) with tools such as Terraform, Ansible, or Chef
• Hands-on experience implementing or supporting security controls aligned with NIST 800-171, NIST 800-53, HIPAA, or related frameworks
• Professional experience with multiple scripting or automation languages, such as Python, Bash, and PowerShell
• Demonstrable experience with defining (or navigating significant changes to) CI/CD pipelines that include security requirements
• (required for level IV)
• Professional experience with developing novel architecture approaches involving several interconnecting systems to solve specific business challenges in the cloud
• (required for level IV)

Qualifications

• Bachelor's Degree

Skills

• Professional experience with DevOps engineering in Microsoft Azure in a regulated research environment (for example, HIPAA or NIST 800-171)
• Professional experience supporting an environment which undergoes external assessment for compliance with security or privacy requirements (e.g., SOC 2, ISO 97001)
• Demonstrable experience in formally evaluating the impact on changes to processes with regards to security or compliance
• Professional experience collecting and presenting packages of evidence with regards to system architecture for assessment
• Professional experience with developing novel architecture approaches involving several interconnecting systems to solve specific research challenges in the cloud

Benefits

Employees in this position can expect to receive benefits such as generous vacation, holidays, and sick leave; competitive insurances and savings accounts; retirement benefits.

Benefits information can be found at https://hr.wisc.edu/benefits/.

Pay

Starting salary will be based on experience and qualifications. Well qualified applicants can anticipate to earn between $115,000 -$130,000 for a DevOps Engineer III (Inst) and $132,000 - $150,000 for a DevOps Engineer IV (Inst), with final salary based on experience and qualifications.

Schedule

This position is expected to be primarily remote but will require some onsite presence for in-person meetings or design workshops.

Contact Information

DoIT Human Resources, doit-hr@doit.wisc.edu, 608-263-1790

Relay Access (WTRS): 7-1-1