Senior Secure Research Systems Engineer

Senior Secure Research Systems Engineer Enterprise Technology – Campus Solutions, Austin, TX Responsibilities Configure and maintain secure cloud infrastructure (GovCloud/GCC High), endpoint management, and SIEM tooling aligned with CRSP-approved platform decisions. Coordinate with ISO to ensure functional security monitoring integrations, including log forwarding. Maintain university-wide infrastructure, associated resources, and support research involving controlled unclassified information (CUI). Administer Linux and Windows servers, endpoints, and other IT assets. Conduct security operations, monitor events, and respond to incidents across multiple enclaves. Design and maintain technical implementation of security standards, policies, procedures, and controls based on CUI best practices, compliance frameworks, and audit findings. Support projects to meet Cybersecurity Maturity Model Compliance (CMMC) 2.0 requirements. Implement and enforce technical controls under NIST SP 800‑171, NIST SP 800‑53, or FIPS 140‑2, including encryption, access controls, logging, and endpoint protection. Design and manage cryptographic mechanisms for data at rest, in transit, digital signatures, and message integrity (HMAC, TLS, IPSEC). Provide artifacts for Department of Defense audits. Collaborate with restricted research teams to establish secure research computing and laboratory environments in compliance with federal CUI regulations. Partner with the CRSP Director and Deputy Director to manage POA&Ms, SSPs, and technical remediation planning. Document technical processes and collect required artifacts for CUI assessments. Engage in ongoing risk assessment and develop risk registers aligned to NIST controls. Evaluate new and existing technologies for compliance with information governance controls. Perform other related functions as assigned. Required Qualifications Demonstrable implementation experience with NIST SP 800‑171, NIST SP 800‑53, FIPS 140‑2, and DISA STIG. Bachelor’s degree in Computer Science, Engineering, Information Technology, or related field, or equivalent experience (HS diploma plus extensive experience and certifications will be considered). 3+ years of professional experience in highly secure compliant hybrid environments such as CUI, NIST, ITAR. 3+ years experience in infrastructure engineering, including computer, storage, AD, and virtualization technologies. 3+ years expert experience in the IAAS cloud service model (Azure, AWS, or Google Cloud) or hybrid environments. 5+ years of experience in server administration with Linux (Ubuntu, RedHat) and Windows. Proficiency with scripting, automation and configuration management, using tools such as Ansible, Terraform, Chef, Puppet, CloudFormation. Deep understanding of networking concepts like SDNs, VRFs, DNS, switch, network routing, access control methods (ACLs, firewalls, security policies) and IPSEC. Able to architect and fortify research endeavors expertly. Excellent problem‑solving skills and adaptability to rapidly changing technologies. Ability to work on‑site and handle pressure with crucial timelines and accountability. Demonstrated ability to manage multiple tasks and projects simultaneously. Excellent oral and written communication skills, translating complex technical concepts for non‑technical audiences. Ability to collaborate with cross‑functional teams to design and implement solutions. Proficiency in technical writing and the production of compliance artifacts, including SSPs, POA&Ms, and TCPs. Preferred Qualifications Articulate and collaborative with the ability to make things happen. Comprehensive understanding of leading‑edge research and security requirements. Security clearances may be needed for some work. Professional certifications such as CISSP, CISM, GIAC, CEH, Security+, or Microsoft Certified: Security Operations Analyst. DevSecOps Cloud certifications such as Microsoft AZ‑500, AZ‑305, SC‑100, AWS Security Specialty, or (ISC) CCSP. Experience with advanced troubleshooting tools (e.g., Splunk). VMWare experience (vSphere, VSAN, NSXT, vRealize, Aria, and/or Tanzu). Experience with AWS Elastic Load Balancing (ALB, NLB), VPC networking, Route 53, and Azure Load Balancer, Application Gateway, Traffic Manager, and Virtual Networks (VNet). Experience with containerization (Docker, Kubernetes). Experience with Git version control systems and branching strategies. Working knowledge of ITIL processes, specifically Incident Management, Change Management, Problem Management. Benefits Competitive health benefits (employee premiums covered at 100%, family premiums at 50%). Vision, dental, life, and disability insurance options. Paid vacation, sick leave, and holidays. Teacher Retirement System of Texas (defined benefit retirement plan). Additional voluntary retirement programs (Tax Sheltered Annuity 403(b) and Deferred Compensation 457(b)). Flexible spending account options for medical and childcare expenses. Training and conference opportunities. Tuition assistance. Athletic ticket discounts. Access to UT Austin libraries and museums. Free rides on all UT Shuttle and Capital metro buses with staff ID card. Equal Opportunity Employer The University of Texas at Austin, as an equal opportunity/affirmative action employer, complies with all applicable federal and state laws regarding nondiscrimination and affirmative action. The University is committed to a policy of equal opportunity for all persons and does not discriminate on the basis of race, color, national origin, age, marital status, sex, sexual orientation, gender identity, gender expression, disability, religion, or veteran status in employment, educational programs and activities, and admissions. Pay Transparency The University of Texas at Austin will not discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, or (c) consistent with the contractor's legal duty to furnish information. Salary $120,000 plus depending on qualifications. #J-18808-Ljbffr Dormont Manufacturing Co