Space Telescope Science Institute
Cloud Development / DevOps Engineer
Space Telescope Science Institute, Baltimore, Maryland, United States, 21276
The Space Telescope Science Institute (STScI) is a multi-mission science and flight operations center for NASA’s flagship observatories on the Johns Hopkins University Homewood campus in Baltimore, Maryland.The IT Division is seeking an experienced Cloud Development / DevOps engineer to join our team working on flagship Space Telescope missions that are revolutionizing our understanding of the universe. In this critical role, you will be responsible for designing, implementing, and maintaining the robust infrastructure and automated processes utilizing DevOps practices like Infrastructure as Code, CI/CD, and microservices architectures for the AWS cloud applications and environment supporting our space observatories like HST, JWST and the Nancy Grace Roman Space Telescope (Roman). Your expertise in AWS cloud, DevOps principles, containerization, Serverless computing, and cloud automation will be vital in supporting Roman & enabling world-class scientific discoveries through these pioneering telescope programs.This position can support remote work (occasional days onsite).
Candidates must reside in or be willing to relocate to our local market. (MD, DE, VA, PA, DC & WV). This position requires US Citizenship or Permanent Residence in order to meet ITAR requirements.Primary Responsibilities:Manage and maintain the AWS Control Tower framework, ensuring compliance with company policies and best practices.Customize the AWS Control Tower framework to align with organizational requirements, including:
Configuring guardrails and preventive controls for resource provisioning and management.Implementing customized service control policies (SCPs) for resource governance and security.Design, build and maintain features for Landing Zone infrastructure using Infrastructure as Code (IaC).Integrating third-party solutions and services with the Control Tower framework.Automating account management and configuration through the Control Tower APIs and SDKs.
Develop and maintain features using CI/CD pipeline for automating the provisioning and management of AWS resources.Build, implement and support Lambda, S3, Cloud Front, CloudWatch, Identity & Access Management (IAM) security services including event based response solutions as needed.Build, deploy, and manage IaC with automation for infrastructure leveraging CI/CD pipelines and other DevOps tools.Writing and maintaining code in languages such as Python with unit tests in a complex system component utilizing SDLC.Build coding standardizations and automating processes for the organization.Advocates improvements for resources, tags, governance, and optimization.Advocates for containerization and automation, configuration, and fine-tuning cloud infrastructure systems.Managing existing Kubernetes and EKS environments.Communicate with the Network and Security team to implement recommended baselines and fixes as needed for compute workloads on the AWS cloud.Translating function and technical requirements into detailed documentation and design.Skills and Qualifications: These skills are required to succeed in this role.Must have hands-on experience and an understanding of best practices with AWS cloud services, including infrastructure, IAM, security, networking, and cost optimization.Hands-on experience with AWS Control Tower implementations and customizations.Strong understanding of AWS organizations concept, networking concepts, security principles, and AWS best practices.Strong in Linux & AWS services like (Compute, RDS, Container, VPC, Storage Services, Security Groups, High Availability, S3, CloudWatch).Knowledge and hands-on experience with CloudFormation and/or Terraform is preferred.Experience with building software applications, SDLC, and CI/CD.Should have experience with containerization and container orchestration.Experience setting up and configuring AWS components using CLI and automation tools.Experience with troubleshooting VPC, Subnets, Security Groups, and NACL.Experience in debugging AWS services/environment issues.Should have knowledge about AWS cost monitoring and cost optimization.AWS Certified Solutions Architect, AWS SysOps Administrator, AWS DevOps Engineer or equivalent certification is a plus.Required Education and Experience:Minimum five years of experience as a Software Developer, System Development Engineer, Site Reliability Engineer, DevOps engineer or System Administrator.Hands-on cloud infrastructure management experience.Preferred Education and Experience:Five years of extensive experience as a Software Developer, System Development Engineer, or Site Reliability Engineer.Hands-on AWS cloud infrastructure management experience.Prior work with Kubernetes and containerized environments.Substitution of additional relevant education or experience for stated qualifications will be considered.Compensation is commensurate with education, skills and experience.Apply here: https://recruiting2.ultipro.com/SPA1004AURA/JobBoard/93330e50-7b3a-4ba8-94f2-6f32360aa4e1/Opportunity/OpportunityDetail?opportunityId=27f34ceb-8f9b-47dc-81e5-a0bcd1ea5f8d#LIHYBRIDApplications received by
05/18/2024
will receive full consideration. Applications received after this date will be considered until the position is filled.Explore all career opportunities at
www.stsci.edu/opportunitiesSTScI offers a flexible and welcoming workspace for all.
STScI embraces the diversity of our staff as a strategic priority in creating a first-rate community. We strongly encourage women, ethnic minorities, veterans, and disabled individuals to apply for these opportunities.
#J-18808-Ljbffr
Candidates must reside in or be willing to relocate to our local market. (MD, DE, VA, PA, DC & WV). This position requires US Citizenship or Permanent Residence in order to meet ITAR requirements.Primary Responsibilities:Manage and maintain the AWS Control Tower framework, ensuring compliance with company policies and best practices.Customize the AWS Control Tower framework to align with organizational requirements, including:
Configuring guardrails and preventive controls for resource provisioning and management.Implementing customized service control policies (SCPs) for resource governance and security.Design, build and maintain features for Landing Zone infrastructure using Infrastructure as Code (IaC).Integrating third-party solutions and services with the Control Tower framework.Automating account management and configuration through the Control Tower APIs and SDKs.
Develop and maintain features using CI/CD pipeline for automating the provisioning and management of AWS resources.Build, implement and support Lambda, S3, Cloud Front, CloudWatch, Identity & Access Management (IAM) security services including event based response solutions as needed.Build, deploy, and manage IaC with automation for infrastructure leveraging CI/CD pipelines and other DevOps tools.Writing and maintaining code in languages such as Python with unit tests in a complex system component utilizing SDLC.Build coding standardizations and automating processes for the organization.Advocates improvements for resources, tags, governance, and optimization.Advocates for containerization and automation, configuration, and fine-tuning cloud infrastructure systems.Managing existing Kubernetes and EKS environments.Communicate with the Network and Security team to implement recommended baselines and fixes as needed for compute workloads on the AWS cloud.Translating function and technical requirements into detailed documentation and design.Skills and Qualifications: These skills are required to succeed in this role.Must have hands-on experience and an understanding of best practices with AWS cloud services, including infrastructure, IAM, security, networking, and cost optimization.Hands-on experience with AWS Control Tower implementations and customizations.Strong understanding of AWS organizations concept, networking concepts, security principles, and AWS best practices.Strong in Linux & AWS services like (Compute, RDS, Container, VPC, Storage Services, Security Groups, High Availability, S3, CloudWatch).Knowledge and hands-on experience with CloudFormation and/or Terraform is preferred.Experience with building software applications, SDLC, and CI/CD.Should have experience with containerization and container orchestration.Experience setting up and configuring AWS components using CLI and automation tools.Experience with troubleshooting VPC, Subnets, Security Groups, and NACL.Experience in debugging AWS services/environment issues.Should have knowledge about AWS cost monitoring and cost optimization.AWS Certified Solutions Architect, AWS SysOps Administrator, AWS DevOps Engineer or equivalent certification is a plus.Required Education and Experience:Minimum five years of experience as a Software Developer, System Development Engineer, Site Reliability Engineer, DevOps engineer or System Administrator.Hands-on cloud infrastructure management experience.Preferred Education and Experience:Five years of extensive experience as a Software Developer, System Development Engineer, or Site Reliability Engineer.Hands-on AWS cloud infrastructure management experience.Prior work with Kubernetes and containerized environments.Substitution of additional relevant education or experience for stated qualifications will be considered.Compensation is commensurate with education, skills and experience.Apply here: https://recruiting2.ultipro.com/SPA1004AURA/JobBoard/93330e50-7b3a-4ba8-94f2-6f32360aa4e1/Opportunity/OpportunityDetail?opportunityId=27f34ceb-8f9b-47dc-81e5-a0bcd1ea5f8d#LIHYBRIDApplications received by
05/18/2024
will receive full consideration. Applications received after this date will be considered until the position is filled.Explore all career opportunities at
www.stsci.edu/opportunitiesSTScI offers a flexible and welcoming workspace for all.
STScI embraces the diversity of our staff as a strategic priority in creating a first-rate community. We strongly encourage women, ethnic minorities, veterans, and disabled individuals to apply for these opportunities.
#J-18808-Ljbffr