Sr. Research Systems Engineer; Secure Data & Research Computing

Sr. Research Systems Engineer (Secure Data & Research Computing)

Reporting to the Sr. Manager of Research Computing Services (RCS); the Sr. Research Engineer provides technical consultation to departmental research groups and IT teams to support and design on-premise secure research technology systems and services, new cloud implementations, research platforms, and data storage and transfer services. The Sr. Engineer is responsible for designing, developing, and managing robust, scalable, and highly-available secure environments with a special focus on meeting requirements for restricted research (Controlled Unclassified Information, Personally Identifiable Information, Protected Health Information, Research Health Information, and other potentially sensitive data), including the Cybersecurity Maturity Model Certification, NIST SP 800-53, NIST SP 800-171 and HIPAA requirements.

Responsibilities

• Administers and supports the on-premises Secure Data Enclave (SDE) platform across Windows and Linux environments. Responsibilities include patching and maintaining virtual machines, deploying and managing software, performing regular system log review and analysis of logs and data outputs, troubleshooting user-reported issues and ensuring continuous adherence to security and compliance requirements.
• Collaborates with researchers, IT, and compliance teams to enable secure and efficient data use.
• Administers and manages Columbia's Globus High Assurance Subscription. POC with Globus and CUIT support. Make sure full administrative capabilities are enabled on the Globus Connect server such as management console, usage reports etc. Develops documentation and training materials for CUIT support and end users.
• Provides consulting cloud services for researchers that would like to use Columbia-provisioned cloud services for their research computing. This includes: an overview of the features of the Cloud service providers; creation and initial configuration of images; software installation and license management; storage configuration; planning workflow for efficiency and/or price.
• Collaborates with researchers, embedded support personnel, and key central IT personnel (e.g. systems, operations, and security) to recommend and advise on AWS, GCP, and industry best security practices with cloud and on-prem enterprise infrastructure and information security considerations in a research environment to establish security policies and best practices.
• Takes a primary role in the planning and design of new cloud research computing services.
• During the research lifecycle, recommends and advises security best practices for the updated applications and infrastructure.
• Manages design reviews and risk assessments for new applications integrating with core services.
• Considers cloud infrastructure, cloud application design and cloud management and monitoring when designing and implementing new cloud security services.
• Proactively represents RCS at campus or departmental events with a focus on research cyberinfrastructure, networking and cloud across the campus.
• Regularly contributes to best practices documentation and knowledge transfer.
• Helps build curriculum and lead training workshops for researchers on the use of public cloud, cloud-native technologies, and security RC resources.
• Stay up to date with trends in the information security community including new vulnerabilities, methodologies, and products.
• All other duties as assigned.

Minimum Qualifications

• Bachelor's degree and/or its equivalent required.
• Minimum 4-6 years' related experience.
• 4+ years' experience in security engineering, preferably in regulated or research environments.
• Advanced Linux administration (RHEL, Ubuntu).
• Experience with secure data environments, enclaves, or controlled-access systems.
• Familiarity with data privacy and compliance frameworks (e.g., HIPAA, IRB protocols).
• Knowledge of server operating systems, networking, system and network security.
• Experience in at least one programming language (Ex. Python, Java).
• Knowledgeable in implementing automation through scripting (Python/Bash/Terraform) and utilizing third-party products and tools for migration and solution…