Regulated Research DevOps Engineer

Overview

Dev Ops Engineer III (Inst) / IV (Inst) – Regulated Research platform within UW–Madison DoIT Research Cyberinfrastructure. The team plans, develops, and operates a compliance-ready environment for Cybersecurity Maturity Model Certification (CMMC) Level 2 (Self and C3

PAO) and other regulated research areas over time. The roles define architecture and configurations, evaluate change impact, and implement Infrastructure as Code and CI/CD practices in a Microsoft Azure environment. The positions may involve collaboration with researchers and with IT units across campus and may include a mix of on-site and remote work subject to an approved flexible work arrangement."

• Produce and gather evidence as needed for assessor requirements.
• Maintain the system security plan (SSP) documentation and update it for changes that impact the SSP.
• Manage, maintain, develop automation tools and infrastructure, including security configurations.
• Serve as technical lead for one or more aspects of the system.
• Act as a subject matter expert, providing guidance and training to staff.
• Develop, program, and deploy automation workflows for deployment, configuration, and monitoring of systems/services.
• Perform integration, migration, configuration, and security of existing applications and services into automated infrastructures.
• Analyze requirements and communicate with staff and internal stakeholders related to the system or project.

Division of Information Technology, CTO Office, Research Cyberinfrastructure, Regulated Research.

Starting salary will be based on experience and qualifications. Typical ranges:
Dev Ops Engineer III (Inst) $115,000–$130,000;
Dev Ops Engineer IV (Inst) $132,000–$150,000, with final salary based on experience and qualifications. Benefits information: (Use the "Apply for this Job" box below)..

• Candidates must be U.S. citizens.
• Professional experience in Dev Ops cloud engineering and Infrastructure as Code (IaC) using tools such as Terraform, Ansible, or Chef.
• Hands-on experience implementing or supporting security controls aligned with NIST 800-171, NIST 800-53, HIPAA, or related frameworks.
• Professional experience with multiple scripting or automation languages (e.g., Python, Bash, Power Shell).
• Demonstrable experience with defining or navigating significant changes to CI/CD pipelines that include security requirements. (required for level IV)
• Professional experience with developing novel architecture approaches involving several interconnecting systems to solve business challenges in the cloud (required for level IV).

• Professional experience with Dev Ops engineering in Microsoft Azure within a regulated research environment (e.g., HIPAA or NIST 800-171).
• Professional experience supporting environments undergoing external assessment for security or privacy compliance (e.g., SOC 2, ISO 27001).
• Experience evaluating the impact of process changes on security or compliance.
• Experience collecting and presenting evidence packages related to system architecture for assessment (preferred for level IV).
• Experience developing novel architecture approaches involving several interconnecting systems to support research in the cloud (preferred for level IV).

Bachelor's Degree Preferred

Click the "Apply" button to start the application process. You will be prompted to upload a Resume and a Letter of Qualifications. Applicants should attach materials detailing training and experience related to the required and preferred qualifications. The application reviewers will rely on these materials to determine eligibility for the recruitment process.

DoIT Human Resources, doit-hrc.edu, . Relay Access (WTRS): 7-1-1. See  for information.

The University of Wisconsin–Madison is an Equal Opportunity Employer. Diversity is a source of strength, creativity, and innovation. Qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, or protected veteran status. For more information on rights and postings, visit the Human Resources Workplace Poster website. Requests for disability or pregnancy-related accommodations should be directed to the Divisional Disability Representative.

Employment may require a criminal background check and references may be asked to answer questions regarding misconduct.