DevSecOps Engineer

The Minnesota Supercomputing Institute is hiring a Linux Security Operations Engineer for Research Computing Infrastructure.

The Advanced Systems Operations (ASO) team at MSI is a group of highly skilled, self-motivated technologists who are passionate about high performance systems technology, and applying that passion to the unique demands of resource intensive research computing. ASO is responsible for:
* Developing and managing MSI's on-site physical and virtual infrastructure
* MSI's on-prem Top-500 Linux HPC Supercomputer clusters
* 30PB+ of on-prem, high performance, POSIX and Object storage
* Supporting infrastructure services, and research accessibility

Position Responsibilities:

We are looking for an experienced Linux security engineer with a strong operations background, who is capable of leading security analysis and implementation for a large research-focused Linux-based enterprise. The position will be responsible for developing appropriate security controls to balance security framework standards against operational requirements, as a member of the overall operations team, and in collaboration with MSI operations leadership and Research Computing (RC) Security Assurance (Infosec) Team. This will include exploration and implementation of security controls and their verification, using standard configuration management tools and/or SIEM frameworks as appropriate.

The breakdown of activities is roughly as follows:

Systems Security Operations (60%)
* As a leading member of the ASO Security team, and with consultation from the RC Infosec Team, analyze security and policy requirements for infrastructure platforms, Linux systems, storage platforms, network devices, and other related systems.
* Design, test, and implement appropriate security technologies and controls, in collaboration with operations staff, via systems orchestration or other appropriate tools.
* Coordinate response to issues raised by monitoring operations, both internally and from the RI Security Assurance Team.
* Ensure controls meet both research usability and security requirements

Systems Operations (20%)
* Identify and remediate system operational and performance issues; in particular those related to or resulting from implemented security and policy controls.
* Participate in operations project teams based on current needs for security and policy expertise

Support and Planning (10%)
* Act as a security-related subject matter expert to assist with related issues escalated from RC Infosec or University Information Security.
* Prioritize, plan, and scope tasks, assignments, and projects with minimal supervision
* Manage tickets, tasks, and projects in MSI's relevant tracking systems

General activities (10%)
* Explore the use of new technologies to solve unique problems and keep MSI on the cutting edge.
* Provide internal and external user support for escalated issues relating to MSI resources.
* Participate in tracking of security vulnerabilities, devise mitigation strategies, and monitor their implementation.
* Pursue professional development though relevant training, workshops, conferences and independent studies
* Publish papers or presentations to share findings and help further the field of Research Computing

The position requires some on-site presence and participation in a lightweight (calls are extremely rare) 7-day on-call rotation with a 1 hour on-site response time.

The Research Innovation Office (RIO) and Minnesota Supercomputing Institute (MSI) endorses a "work with flexibility" approach that offers a welcoming and flexible work environment where everyone is inspired to do their best. Work location options for this position may be partially remote, or entirely in the office and are based on the work of the position. Typically, this position starts as fully on-site at the UMN Twin Cities campus for onboarding and training. After, it is eligible for a hybrid schedule (typically 3 days onsite and 2 days remote per week).

MSI has a strong commitment to the University's goal of creating a positive and inclusive campus climate by advancing equity and diversity. We aim to hire high-potential individuals with varying identities and backgrounds.

Required Qualifications
* BA/BS degree and at least 4 years of work experience in Linux Systems Administration and Security (or a closely related field), or Masters degree and at least 2 years of experience. The degree requirement may be waived for a candidate with exceptional experience.
* Linux systems and infrastructure operations experience.
* Excellent oral and written communication and leadership skills.
* Able to work independently with periodic guidance.

Preferred Qualifications
These are areas we consider of particular interest, but are not requirements.
* Linux HPC or research computing environment(s).
* Experience deploying SIEM tools in a Linux environment (e.g. Wazuh, CIS-CAT, Splunk), and their application to compliance benchmarks, file integrity monitoring, etc.
* Familiarity with systems configuration management environments (eg Puppet, Salt, Ansible, etc.).
* Experience implementing security and policy controls while balancing systems usability and performance.
* Experience with software integrity validation tools using SBOMs or similar technologies.
* Experience with implementation of HIPAA, HITRUST, FISMA, or NIST security policies and related systems configurations.

The Minnesota Supercomputing Institute (MSI) is a core research facility of the University of Minnesota (UofM), part of the Research Computing umbrella within the Research and Innovation Office. MSI provides advanced research computing infrastructure and expertise to the University's research and scholarly community and the State of Minnesota in order to advance and accelerate research and foster innovation and discoveries through advanced computing technologies, scientific computing and informatics, application development, and services. The Institute currently supports over 800 different groups with over 4500 active users spanning the sciences, engineering, life sciences, medicine, and social sciences.

Pay Range: $85,000 - 125,000; depending on education/qualifications/experience

Time Appointment Category: 75%-100% Appointment (If job description above does not specify appointment or expected weekly hours, assume a 100% appointment.)

Position Type: Faculty and P&A Staff

Please visit the Office of Human Resources website for more information regarding benefit eligibility.

The University offers a comprehensive benefits package that includes:

• Competitive wages, paid holidays, and generous time off
• Continuous learning opportunities through professional training and degree-seeking programs supported by the Regents Tuition Benefit Program
• Low-cost medical, dental, and pharmacy plans
• Healthcare and dependent care flexible spending accounts
• University HSA contributions
• Disability and employer-paid life insurance
• Employee wellbeing program
• Excellent retirement plans with employer contribution
• Public Service Loan Forgiveness (PSLF) opportunity
• Financial counseling services
• Employee Assistance Program with eight sessions of counseling at no cost
• Employee Transit Pass with free or reduced rates in the Twin Cities metro area

Applications must be submitted online. To be considered for this position, please click the Apply button and follow the instructions. You will be given the opportunity to complete an online application for the position and attach a cover letter and resume.

Additional documents may be attached after application by accessing your "My Job Applications" page and uploading documents in the "My Cover Letters and Attachments" section.

To request an accommodation during the application process, please e-mail employ@umn.edu or call (612) 624-8647.

The University recognizes and values the importance of diversity and inclusion in enriching the employment experience of its employees and in supporting the academic mission. The University is committed to attracting and retaining employees with varying identities and backgrounds.

The University of Minnesota provides equal access to and opportunity in its programs, facilities, and employment without regard to race, color, creed, religion, national origin, gender, age, marital status, disability, public assistance status, veteran status, sexual orientation, gender identity, or gender expression. To learn more about diversity at the U: http://diversity.umn.edu.

Any offer of employment is contingent upon the successful completion of a background check. Our presumption is that prospective employees are eligible to work here. Criminal convictions do not automatically disqualify finalists from employment.

The University of Minnesota, Twin Cities (UMTC)

The University of Minnesota, Twin Cities (UMTC), is among the largest public research universities in the country, offering undergraduate, graduate, and professional students a multitude of opportunities for study and research. Located at the heart of one of the nation's most vibrant, diverse metropolitan communities, students on the campuses in Minneapolis and St. Paul benefit from extensive partnerships with world-renowned health centers, international corporations, government agencies, and arts, nonprofit, and public service organizations.

At the University of Minnesota, we are proud to be recognized by the Star Tribune as a Top Workplace for 2021, as well as by Forbes as Best Employers for Women and one of America's Best Employers (2015, 2018, 2019, 2023), Best Employer for Diversity (2019, 2020), Best Employer for New Grads (2018, 2019), and Best Employer by State (2019, 2022).