AWS Cloud Cybersecurity Automation & Systems Engineer (CACS)

Are you seeking a mission-critical role in increasing humanity’s knowledge of the Universe?

The Space Telescope Science Institute (STScI) is a multi-mission science and operations center for NASA’s flagship observatories. The Cloud Center of Excellence at the Space Telescope Science Institute is seeking a Principal AWS Cloud Cybersecurity Automation & Systems (CACS) engineer to join our team working on NASA flagship Space Telescope missions that are revolutionizing our understanding of the universe. Applicants must be a U.S. citizen or Permanent Residence for ITAR compliance.

In this role, you'll lead the cloud security automation initiatives & leverage DevOps practices and CI/CD pipelines to implement robust security controls and monitoring systems using modern engineering/operations frameworks for the AWS cloud applications and environment supporting our space observatories like the Hubble Space Telescope, the James Webb Space Telescope and the Nancy Grace Roman Space Telescope (Roman). Roman is a survey telescope slated for launch in late 2026 and expected to generate 20 PB of data in 5 years. 

The data from Roman will be mainly processed in the Cloud; in addition, a Science Platform hosted in the Cloud will enable transformational science with Roman data by providing a rich computing environment that will allow broad, low-barrier access to data, computing, and software resources. 

The STScI also hosts the Mikulski Archive for Space Telescopes (MAST) archive that contains data from more than 20 missions. In this role you will collaborate with cross-functional teams to design, deploy, and maintain secure cloud architectures, automate security processes, and ensure compliance with industry regulations and best practices. Your expertise in AWS cloud security, Infrastructure as Code (IaC), DevOps, SecDataOps principles and cloud automation will be vital in supporting Roman & enabling world-class scientific discoveries through these pioneering telescope programs.

This position can support remote work (occasional days onsite). Candidates must reside in or be willing to relocate to our local market. (MD, DE, VA, PA, DC & WV). This position requires US Citizenship or Permanent Residence in order to meet ITAR requirements.

Primary Responsibilities:

• The Cloud Cybersecurity Automation & Systems (CACS) engineer will partner with software engineers, Institute security engineers, and DevOps engineers to serve as the technical lead.
• You will be an integral part of the Cloud engineering processes.
• Build and operate the Cloud's security systems in AWS.
• Proactively identify risks, vulnerabilities, and malicious activity in our cloud and container infrastructure and systems.
• Collaborate with engineering, IT, and other security teams.
• Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team's work.

Skills and Qualifications: These skills are required to succeed in this role.:

• Minimum of 10 years of experience with one or more of the following roles: Software Developer, System Development Engineer, Site Reliability Engineer, DevOps Engineer, including 7+ years of experience as a Cloud Security Automation Engineer or Cloud DevSecOp Engineer.
• AWS Cloud Security and Automation
• Automated Incident Response Experience
• DevOps Principles and Automated Security Testing in CI/CD
• Security Monitoring and Logging
• Security Best Practices

Nice to have:

• Preferred Certifications: Possession of relevant certifications such as AWS Certified Security – Specialty or AWS Certified DevOps Engineer would be advantageous.
• Familiarity with Agile development methodologies: Understanding Agile development methodologies, including knowledge of blue-green deployments, canary releases, and other deployment strategies, is beneficial.
• Familiarity with security frameworks: Preference for familiarity with security frameworks such as CIS AWS Foundations, NIST 800-53, as well as experience in risk assessment and compliance reporting.

****Substitution of additional relevant education or experience for stated qualifications will be considered****

Compensation is commensurate with education, skills and experience.

#LIHYBRID

Applications received by 08/17/2024 will receive full consideration. Applications received after this date will be considered until the position is filled.  

APPLY HERE: https://recruiting2.ultipro.com/SPA1004AURA/JobBoard/2451ecb6-af3b-4d72-805a-eeeca596042b/Opportunity/OpportunityDetail?opportunityId=3d951da3-7526-4e4d-9130-4a07216cc0df

Explore all career opportunities at www.stsci.edu/opportunities

 STScI offers a flexible and welcoming workspace for all. STScI embraces the diversity of our staff as a strategic priority in creating a first-rate community. We strongly encourage women, ethnic minorities, veterans, and disabled individuals to apply for these opportunities. Veterans, disabled individuals, or wounded warriors needing assistance with the employment process can contact us at careers@stsci.edu EOE/AA/M/F/D/V.

 As a leader in the astronomical community, AURA is committed to diversity and inclusion. AURA develops and supports programs that advance our organizational commitment to diversity, broaden participation, and encourage the advancement of diversity throughout the workforce www.aura-astronomy.org/diversity.asp

 As a recipient of U.S. Government funding, AURA is considered a government contractor subject to Equal Employment Opportunity and Affirmative Action regulations. As an Equal Opportunity and Affirmative Action Employer, AURA and all of the centers do not discriminate based on race, sex, age, religion, national origin, sexual orientation, gender identity/gender identity expression, lawful political affiliations, veteran status, disability, and any other legally protected status under applicable federal, state, and local equal opportunity laws. The statements below, as well as the requests for self-identification, are required under these regulations. We encourage your participation in meeting these federal reporting requirements for protection and assisting us in our record-keeping and reporting. Your responses are kept strictly confidential.