Description

The Space Telescope Science Institute (STScI) is a multi-mission science and flight operations center for NASA’s flagship observatories on the Johns Hopkins University Homewood campus in Baltimore, Maryland.

The IT Division is seeking an experienced Cloud Development / DevOps engineer to join our team working on flagship Space Telescope missions that are revolutionizing our understanding of the universe. In this critical role, you will be responsible for designing, implementing, and maintaining the robust infrastructure and automated processes utilizing DevOps practices like Infrastructure as Code, CI/CD, and microservices architectures for the AWS cloud applications and environment supporting our space observatories like HST, JWST and the Nancy Grace Roman Space Telescope (Roman). Roman is slated for launch in the mid-2020s. STScI also hosts the MAST archive that contains data from more than 20 missions. Your expertise in AWS cloud, DevOps principles, containerization, Serverless computing, and cloud automation will be vital in supporting Roman & enabling world-class scientific discoveries through these pioneering telescope programs.

This position can support remote work (occasional days onsite). Candidates must reside in or be willing to relocate to our local market. (MD, DE, VA, PA, DC & WV). This position requires US Citizenship or Permanent Residence in order to meet ITAR requirements.

Primary Responsibilities:

• Manage and maintain the AWS Control Tower framework, ensuring compliance with company policies and best practices.

• Customize the AWS Control Tower framework to align with organizational requirements, including:

• Configuring guardrails and preventive controls for resource provisioning and management.

• Implementing customized service control policies (SCPs) for resource governance and security.

• Design, build and maintain features for Landing Zone infrastructure using Infrastructure as Code (IaC).

• Integrating third-party solutions and services with the Control Tower framework.

• Automating account management and configuration through the Control Tower APIs and SDKs.

• Develop and maintain features using CI/CD pipeline for automating the provisioning and management of AWS resources.

• Build, implement and support Lambda, S3, Cloud Front, CloudWatch, Identity & Access Management (IAM) security services including event based response solutions as needed.

• Build, deploy, and manage IaC with automation for infrastructure leveraging CI/CD pipelines and other DevOps tools.

• Writing and maintaining code in languages such as Python with unit tests in a complex system component utilizing SDLC

• Build coding standardizations and automating processes for the organization

• Advocates improvements for resources, tags, governance, and optimization.

• Advocates for containerization and automation, configuration, and fine-tuning cloud infrastructure systems.

• Managing existing Kubernetes and EKS environments.

• Communicate with the Network and Security team to implement recommended baselines and fixes as needed for compute workloads on the AWS cloud.

• Translating function and technical requirements into detailed documentation and design

Skills and Qualifications: These skills are required to succeed in this role.

Must have hands-on experience and an understanding of best practices with AWS cloud services, including infrastructure, IAM, security, networking, and cost optimization.

• Hands-on experience with AWS Control Tower implementations and customizations.

• Strong understanding of AWS organizations concept, networking concepts, security principles, and AWS best practices.

• Strong in Linux & AWS services like (Compute, RDS, Container, VPC, Storage Services, Security Groups, High Availability, S3, CloudWatch)

• Knowledge and hands-on experience with CloudFormation and/or Terraform is preferred.

• Experience with building software applications, SDLC, and CI/CD

• Should have experience with containerization and container orchestration.

• Experience setting up and configuring AWS components using CLI and automation tools.

• Experience with troubleshooting VPC, Subnets, Security Groups, and NACL.

• Experience in debugging AWS services/environment issues.

• Should have knowledge about AWS cost monitoring and cost optimization.

• AWS Certified Solutions Architect, AWS SysOps Administrator, AWS DevOps Engineer or equivalent certification is a plus.

Required Education and Experience:

• Minimum five years of experience as a Software Developer, System Development Engineer, Site Reliability Engineer, DevOps engineer or System Administrator.

• Hands-on cloud infrastructure management experience.

Preferred Education and Experience:

• Five years of extensive experience as a Software Developer, System Development Engineer, or Site Reliability Engineer.

• Hands-on AWS cloud infrastructure management experience.

• Prior work with Kubernetes and containerized environments

Substitution of additional relevant education or experience for stated qualifications will be considered.

Compensation is commensurate with education, skills and experience.

Apply here: https://recruiting2.ultipro.com/SPA1004AURA/JobBoard/93330e50-7b3a-4ba8-94f2-6f32360aa4e1/Opportunity/OpportunityDetail?opportunityId=27f34ceb-8f9b-47dc-81e5-a0bcd1ea5f8d

#LIHYBRID

Applications received by 05/18/2024 will receive full consideration. Applications received after this date will be considered until the position is filled.

Explore all career opportunities at www.stsci.edu/opportunities

STScI offers a flexible and welcoming workspace for all. (https://www.stsci.edu/opportunities/our-work/our-culture/diversity-equity-and-inclusion) STScI embraces the diversity of our staff as a strategic priority in creating a first-rate community. We strongly encourage women, ethnic minorities, veterans, and disabled individuals to apply for these opportunities. Veterans, disabled individuals, or wounded warriors needing assistance with the employment process can contact us at careers@stsci.edu EOE/AA/M/F/D/V.

As a leader in the astronomical community, AURA is committed to diversity and inclusion. AURA develops and supports programs that advance our organizational commitment to diversity, broaden participation, and encourage the advancement of diversity throughout the workforce www.aura-astronomy.org/diversity.asp

As a recipient of U.S. Government funding, AURA is considered a government contractor subject to Equal Employment Opportunity and Affirmative Action regulations. As an Equal Opportunity and Affirmative Action Employer, AURA and all of the centers do not discriminate based on race, sex, age, religion, national origin, sexual orientation, gender identity/gender identity expression, lawful political affiliations, veteran status, disability, and any other legally protected status under applicable federal, state, and local equal opportunity laws. The statements below, as well as the requests for self-identification, are required under these regulations. We encourage your participation in meeting these federal reporting requirements for protection and assisting us in our record-keeping and reporting. Your responses are kept strictly confidential.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)