Sr. Research Systems Engineer (Secure Data & Research Computing)

• Job Type: Officer of Administration
• Regular/Temporary: Regular
• Hours Per Week: 35
• Standard Work Schedule: Standard
• Building: Studebaker
• Salary Range: $110,000 - $125,000

Position Summary

Reporting to the Sr. Manager of Research Computing Services (RCS); the Sr. Research Engineer provides technical consultation to departmental research groups and IT teams to support and design on-premise secure research technology systems and services, new cloud implementations, research platforms, and data storage and transfer services. The Sr. Engineer is responsible for designing, developing, and managing robust, scalable, and highly-available secure environments with a special focus on meeting requirements for restricted research (Controlled Unclassified Information, Personally Identifiable Information, Protected Health Information, Research Health Information, and other potentially sensitive data), including the Cybersecurity Maturity Model Certification, NIST SP 800-53, NIST SP 800-171 and HIPAA requirements.

Responsibilities

• Administers and supports the on-premises Secure Data Enclave (SDE) platform across Windows and Linux environments. Responsibilities include patching and maintaining virtual machines, deploying and managing software, performing regular system log review and analysis of logs and data outputs, troubleshooting user-reported issues and ensuring continuous adherence to security and compliance requirements.
• Collaborates with researchers, IT, and compliance teams to enable secure and efficient data use.
• Administers and manages Columbia’s Globus High Assurance Subscription. POC with Globus and CUIT support. Make sure full administrative capabilities are enabled on the Globus Connect server such as management console, usage reports etc. Develops documentation and training materials for CUIT support and end users.
• Provides consulting cloud services for researchers that would like to use Columbia-provisioned cloud services for their research computing. This includes: an overview of the features of the Cloud service providers; creation and initial configuration of images; software installation and license management; storage configuration; planning workflow for efficiency and/or price.
• Collaborates with researchers, embedded support personnel, and key central IT personnel (e.g. systems, operations, and security) to recommend and advise on AWS, GCP, and industry best security practices with cloud and on-prem enterprise infrastructure and information security considerations in a research environment to establish security policies and best practices.
• Takes a primary role in the planning and design of new cloud research computing services.
• During the research lifecycle, recommends and advises security best practices for the updated applications and infrastructure. 
• Manages design reviews and risk assessments for new applications integrating with core services.
• Considers cloud infrastructure, cloud application design and cloud management and monitoring when designing and implementing new cloud security services.
• Proactively represents RCS at campus or departmental events with a focus on research cyberinfrastructure, networking and cloud across the campus.
• Regularly contributes to best practices documentation and knowledge transfer.
• Helps build curriculum and lead training workshops for researchers on the use of public cloud, cloud-native technologies, and security RC resources.
• Stay up to date with trends in the information security community including new vulnerabilities, methodologies, and products.
• All other duties as assigned.

Minimum Qualifications

• Bachelor’s degree and/or its equivalent required.
• Minimum 4-6 years’ related experience.
• 4+ years’ experience in security engineering, preferably in regulated or research environments.
• Advanced Linux administration (RHEL, Ubuntu).
• Experience with secure data environments, enclaves, or controlled-access systems.
• Familiarity with data privacy and compliance frameworks (e.g., HIPAA, IRB protocols).
• Knowledge of server operating systems, networking, system and network security.
• Experience in at least one programming language (Ex. Python, Java).
• Knowledgeable in implementing automation through scripting (Python/Bash/Terraform) and utilizing third-party products and tools for migration and solution delivery.
• Familiarity with virtualization tools (e.g., VMware vSphere) and managing virtualized environments for on-premises server infrastructure.
• System administration experience with virtualization (ESXi, hypervisors, VDI deployment)
• Experience with technologies like Git, Terraform, Docker.
• Excellent written and verbal communication skills.
• Demonstrated ability to work in a fast-paced, deadline driven environment.
• Demonstrated excellence in a variety of competencies including teamwork/collaboration, analytical thinking, communication and influencing skills, and technical expertise.
• Ability to be precise and attentive to detail is essential.
• Ability to work with changing priorities and with multiple projects.
• Ability to be precise and attentive to detail is essential.
• Ability to work with minimal supervision.
• Ability to work weekend and off-hour work on occasion.
•  

Preferred Qualifications

• Bachelor's degree in Computer Science, Engineering, Computer Security, Information Systems, or related field.
• 4+ years of experience in infrastructure engineering.
• 2+ years of security experience in a cloud-based infrastructure.
• Experience adopting security practices across an enterprise.
• Familiarity with NIST 800-53, NIST 800-171 (CUI), and HITRUST framework control requirements; hands-on experience with HIPAA Compliance for handling of PHI.
• Understanding of system development in cloud environments, including Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS).
• Experience in understanding the architecture, migration, and deployment of on-prem applications in the cloud (AWS/GCP) and hybrid environments: on-prem as well as cloud.
• Knowledge of attack vectors (malware, web application, social engineering, etc.) and attack surfaces (ports, firewalls, incoming data processing, interfaces, etc.).
• Certifications in CompTIA Security+ (SY0-701) preferred.

Equal Opportunity Employer / Disability / Veteran

Columbia University is committed to the hiring of qualified local residents.