DevSecOps Engineer

Arbor Research Collaborative for Health

. Design, provision and maintain secure, scalable AWS environments for federal research data platforms .

Posted 10/23/2026full-timeRemote • United StatesSeniorLead💰 $92,000 - $149,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and maintaining secure, scalable AWS environments, with a strong focus on cloud security controls, CI/CD pipeline management, and compliance with federal regulations. Proficient in integrating external platforms and managing complex data workflows while ensuring high availability and performance.

Highest-signal resume keywords

AWS Environment DesignCI/CD Pipeline ManagementCloud Security ImplementationInfrastructure As CodeFISMA/NIST Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWS EC2AWS S3AWS RDSAWS IAMAWS VPC NetworkingAWS LambdaCloudWatch MonitoringTerraformPythonBash

Soft Skills

Strong Written Documentation SkillsOrganizational SkillsAnalytical SkillsCommunication SkillsTeam Collaboration

Tools & Technologies

GitCloudFormationAWS WAFGuardDutyMacieSecurity HubETL PipelinesSFTPAutomated WorkflowsIncident Response Tools

Certifications & Qualifications

AWS CertificationSecurity Certification

Industry Keywords

FISMANIST SP 800-53HIPAA Security RuleControlled-Access DataHealth ResearchFederal ContractsDisaster RecoveryQuality Assurance AuditsCompliance InvestigationsData Integrity

Tech Stack

Tools & technologies

AWSCloudEC2ETLPythonTerraform

About the role

Key responsibilities & impact

Design, provision and maintain secure, scalable AWS environments for federal research data platforms
Operate separate development, test and production environments with environment-specific configurations
Architect high availability, elastic scaling and performance for large imaging and omics datasets
Build and operate secure data ingestion and distribution services, upload portals, SFTP endpoints, validation workflows and controlled S3 downloads
Support metadata search, secure APIs and large language model services such as Amazon Bedrock
Integrate with external NIH platforms through secure APIs and automated ETL pipelines
Monitor system health, capacity, availability and cost using CloudWatch
Manage operating system and software patching and configuration baselines
Build and maintain CI/CD pipelines for automated build, test, scanning and release processes
Define repeatable, version-controlled and auditable infrastructure as code
Manage GitHub repositories, branch protection, code review and secrets management
Lead technical contract transitions, including provisioning, migrations, validation, cutover and production release
Implement FISMA-, NIST-, HIPAA- and NIH-aligned security safeguards
Design network security, identity and access management, encryption, key management and secrets management
Deploy and tune AWS WAF, GuardDuty, Macie and Security Hub
Centralize logging, monitor security events, investigate incidents and track vulnerabilities to remediation
Develop and maintain the ISSP and related security documentation and support ATO activities
Operate controlled-access data workflows, access logging, reviews, renewals and compliance investigations
Maintain tamper-resistant audit trails and conduct quality assurance audits of security controls and data integrity
Implement daily backups, weekly encrypted cross-region replication and disaster recovery testing
Document backup, recovery and business continuity procedures
Collaborate with developers, data managers, business analysts and project managers on secure infrastructure designs
Provide security guidance, briefings and role-based security awareness training
Serve as technical lead when assigned, setting standards and reviewing engineering work

Requirements

What you’ll need

Bachelor's degree in computer science, computer engineering, information security or a related field
At least 8 years of progressively more responsible experience in systems engineering, cloud infrastructure, DevOps or security engineering
At least 3 years of hands-on experience designing and operating production workloads on AWS
Experience with AWS EC2, S3, RDS, IAM, VPC networking, Lambda and CloudWatch
Experience building and maintaining CI/CD pipelines and infrastructure as code using Terraform or CloudFormation
Experience implementing cloud security controls, including IAM, MFA, encryption and key management, network segmentation, logging and monitoring
Working knowledge of FISMA, NIST SP 800-53, NIST Risk Management Framework and HIPAA Security Rule
Experience with vulnerability management, patching and incident response
Experience implementing and testing backup and disaster recovery procedures
Proficiency in Python, Bash or PowerShell
Experience with Git in a collaborative Agile workflow
Strong written documentation skills, including security plans and standard operating procedures
Strong organizational, analytical and communication skills and ability to work as part of a team
Physically located in Colorado, Washington D.C., Georgia, Maryland, Michigan, Minnesota, North Carolina or Virginia
Preferred: AWS or security certification; ATO/FedRAMP/NIST SP 800-53 experience; NIH controlled-access data repository experience; AWS WAF, GuardDuty, Macie, Security Hub, Cognito, OpenSearch and Bedrock; imaging data and secure file transfer; containers and container security; Section 508/WCAG; federal contracts and transitions; health research; non-profit experience

Benefits

Comp & perks

Remote work arrangement
40 hours per week
Minimal overnight travel, no more than 5%
Base compensation determined by market range and geographic location pay zones
AWS certification or security certification is listed as a preferred qualification
Exempt status