DevSecOps Engineer

Our core values define who we are as an organization and serve as the foundation of our code of ethics. Arbor Research expects all employees to embody and demonstrate in our day-to-day work.

• Collaborative Spirit: We expect each staff member to learn from and teach one another and ask each to exhibit curiosity and respect for the contributions of others.
• Creativity: We strive to cultivate a challenging, stimulating, and supportive environment where our employees are expected to be inquisitive, take the initiative, and demonstrate ingenuity.
• Credibility: Our employees are smart, thoughtful, and objective in their work. We expect them to be technically solid in their area of expertise and for those researching to demonstrate scientific rigor.
• Dedication: Our team achieves success because of our dedication to carrying out high-quality work and delivering trusted results.

The Dev Sec Ops  Engineer designs, builds, secures and operates the cloud infrastructure that hosts federal research data platforms, including public websites, request management applications, searchable data catalogs and data processing pipelines. The role combines cloud and Dev Ops engineering with information security engineering. It owns the infrastructure, deployment automation, monitoring, backup and disaster recovery for each environment, and it implements and continuously monitors the security controls required by NIH, HHS and federal standards (FISMA, NIST SP 800-53 Moderate, HIPAA and the NIH security standards for controlled-access data repositories).

The ideal candidate combines hands‑on Amazon Web Services (AWS) engineering skills (compute, storage, databases, networking, identity and serverless services), infrastructure as code and CI/CD pipeline automation with practical security engineering experience in threat detection, vulnerability management, security documentation and audit readiness. The engineer builds security into every stage of the delivery lifecycle rather than adding it at the end.

• Design, provision and maintain secure, scalable AWS environments that host public websites, web applications, APIs and data platforms, using services such as Amazon EC2 behind Elastic Load Balancing, Amazon S3 (with lifecycle policies to S3 Glacier), Amazon RDS for PostgreSQL, Amazon Open Search Service, Amazon API Gateway, AWS Lambda and Amazon Cloud Front.
• Maintain separate development, test and production environments with environment‑specific configurations that provide accurate connectivity to compute, data and integrated resources.
• Architect for high availability, elastic scaling and performance as data volumes, file sizes and user demand grow, including large digital image collections (e.g., DICOM radiology images and digital pathology slides) and multi‑modal omics datasets.
• Build and operate secure data ingestion and distribution services, including secure upload portals, SFTP and AWS Transfer Family endpoints, AWS Lambda validation workflows, and controlled S3 download services for approved investigators.
• Host and support the infrastructure for metadata search and indexing (Amazon Open Search Service), secure APIs, and large language model services (e.g., Amazon Bedrock) used for natural‑language search.
• Support integration with external NIH platforms and systems (e.g., NHLBI Bio Data Catalyst, the BSI II Biospecimen Inventory and the NHLBI Data Repository) through secure APIs and automated ETL pipelines, including handoff to secure cloud work spaces for analyze‑in‑place workflows.
• Monitor system health, capacity, availability and cost with Amazon Cloud Watch metrics, logs, dashboards and alerts, and tune resources…