Senior Secure Research Systems Engineer

Senior Secure Research Systems Engineer

The Senior Secure Research Systems Engineer will lead secure research computing initiatives at the University of Texas at Austin across various projects, playing an essential role in the design, implementation, security, and maintenance of the university’s Controlled Unclassified Information (CUI) research environment.

• Configure and maintain secure cloud infrastructure (Gov Cloud/GCC High), endpoint management, and SIEM tooling in alignment with CRSP-approved platform decisions.
• Coordinate with ISO to ensure security monitoring integrations, including log forwarding to ISO-managed platforms, are functional and maintained.
• Maintain a university-wide infrastructure environment, associated resources, and provide support for research involving CUI.
• Administer Linux and Windows servers, endpoints, and other IT assets.
• Conduct security operations, monitor events, and respond to incidents across multiple enclaves.
• Design and maintain the technical implementation of security standards, policies, procedures, and controls based on CUI best practices, compliance frameworks, and audit findings.
• Support processes to bring projects into compliance with Cybersecurity Maturity Model Compliance (CMMC) 2.0 requirements.
• Implement and enforce technical controls under NIST SP 800-171, NIST SP 800-53, or FIPS 140-2, including encryption, access controls, logging, and endpoint protection.
• Design and manage cryptographic mechanisms for data at rest, data in transit, digital signatures, and message integrity (HMAC, TLS, IPSEC).
• Provide artifacts for Department of Defense audits.
• Collaborate with restricted research teams to establish secure research computing and laboratory environments in compliance with federal CUI regulations.
• Partner with the CRSP Director and Deputy Director to manage POA&Ms, SSPs, and technical remediation planning.
• Document technical processes and collect required artifacts for CUI assessments.
• Engage in ongoing risk assessment across the college research environment and develop risk registers aligned to NIST controls.
• Evaluate new and existing technologies for compliance with information governance controls (e.g., access, authentication, encryption, logging, retention).
• Perform other related functions as assigned.

• Demonstrable implementation experience with NIST SP 800-171, NIST SP 800-53, FIPS 140, and DISA STIG.
• Bachelor's degree in Computer Science, Engineering, Information Technology, or a related field, or equivalent experience (high school diploma with extensive experience and certifications considered).
• 3+ years professional experience working in highly secure compliant hybrid environments such as CUI, NIST, ITAR.
• 3+ years experience in infrastructure engineering, including computer, storage, AD, and virtualization technologies.
• 3+ years experience in the IAAS cloud service model (Azure, AWS, or Google Cloud) or hybrid environments.
• 5+ years experience in server administration with Linux (Ubuntu, Red Hat) and Windows.
• Demonstrable proficiency with scripting, automation, and configuration management using tools such as Ansible, Terraform, Chef, Puppet, or Cloud Formation.
• Deep understanding of related networking concepts such as SDNs, VRFs, DNS, switches, routing, ACLs, firewalls, security policies, and IPSEC.
• Able to architect and fortify research endeavors.
• Excellent problem‑solving skills and the ability to adapt to rapidly changing technologies.
• Ability to work on‑site well under pressure with crucial timelines and accountability.
• Demonstrated ability to handle multiple tasks and projects simultaneously.
• Excellent oral and written communication skills with the ability to translate complex technical concepts for non‑technical audiences.
• Ability to collaborate with cross‑functional teams to design and implement solutions.
• Proficiency in technical writing and production of compliance artifacts, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and Technology Control Plans (TCPs).
• Equivalent combination of relevant education and experience may be substituted as appropriate.