Cloud Security

Cloud Security Data Jobs

2 jobs found

1d ago

Senior AWS IAM & Data Engineer

System One Lafayette, LA

Lafayette, LA

1d ago

Full time Amazon Web Services AWS Aws Cloud Security

Apply Now

Job Description

System One is seeking a Senior AWS IAM & Data Engineer to help deliver enterprise cloud identity services and AWS-based data and analytics in a large-scale financial services environment. This role combines AWS identity and access management with production ETL, troubleshooting, and infrastructure automation.

The position is available in Lafayette, LA, Knoxville, TN, Columbia, SC, and Birmingham, AL with a hybrid work model. This is a direct hire opportunity with 40.0 hours.

What you’ll do

Support enterprise cloud identity services and AWS-based data and analytics in a large-scale financial services environment.
Configure and support AWS Identity Center, including identity federation, permission sets, account access, and enterprise identity integrations.
Develop and maintain data ingestion, transformation, and reporting workflows using Redshift, S3, Glue, and Athena.
Troubleshoot and automate processes across security, data, cloud, and application teams.
Independently evaluate technical options, deliver production-quality code, and automate operational workflows.
Collaborate across security, data, cloud, and application teams to ensure smooth integrations and ongoing operations.
Support ETL and data pipelines using AWS Glue, Lambda, Step Functions, EventBridge, or similar services.
Query and analyze datasets, validate data, troubleshoot data quality issues, and support reporting needs.
Automate cloud, IAM, and data workflows using Python and Shell scripting.
Use Terraform or CloudFormation for infrastructure automation.
Apply best practices for enterprise identity federation and cross-account access.

What you bring

5+ years of experience with AWS IAM Identity Center, including permission sets, account assignments, federation, and enterprise integrations.
Strong knowledge of AWS IAM: roles, policies, trust policies, permission boundaries, least privilege, and cross-account access.
Hands-on experience with AWS data services including Redshift, S3, Glue, Athena, and Lake Formation.
Proven ability to develop and support ETL/data pipelines and orchestrate workflows.
Proficiency in SQL for querying, analyzing, and troubleshooting datasets.
Experience scripting with Python and/or Shell for automation.
Familiarity with Terraform or CloudFormation for infrastructure setup and configuration.
Understanding of enterprise identity federation across AWS accounts and services.
Excellent problem-solving skills and the ability to produce high-quality automated solutions.
Strong communication and collaboration abilities in enterprise teams.
Financial services or highly regulated environment experience is a plus.
Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field.

Key technologies

AWS IAM, AWS Identity Center, identity federation
Redshift, S3, Glue, Athena, Lake Formation
ETL/data pipelines, SQL
Python, Shell scripting
Terraform, CloudFormation
AWS Glue, Lambda, Step Functions, EventBridge

Benefits

Health and welfare benefits coverage options including medical, dental, vision
Spending accounts
Life insurance
Voluntary plans
Participation in a 401(k) plan

View full job page →

15d ago

Data Engineer

Hollstadt Consulting Minneapolis, MN 🇺🇸 Remote

Minneapolis, MN

15d ago

$52 - $52/hr Contract Cloud Security Data Data Engineer

Apply Now

Job Description

Hollstadt Consulting is hiring a contract Remote Data Engineer to join the Enterprise Interfaces team and complete operationalization of the Globus Managed File Transfer platform in the GCP Cloud Data DMZ. The work focuses on configuration, onboarding support, operations, documentation, and alignment with required compliance controls as the platform moves into an operational home alongside existing MFT solutions.

The engagement is expected to run 6-12 months, with extension possible. The role is embedded with the Enterprise Interfaces team as the primary technical resource for finishing initial setup, establishing support processes, and transferring operational knowledge of the Globus ecosystem.

Engagement context

Globus has been selected as a strategic Managed File Transfer (MFT) platform.
The Globus platform is installed in the GCP Cloud Data DMZ and nearing completion of initial implementation.
Enterprise Interfaces is designated as the operational home for Globus alongside existing MFT solutions (Signiant and Cleo).
Two GCP Compute Engine VMs host Globus Connect Server (GCS) v5 within the Data DMZ.
Ingress and egress use GCP Storage buckets with a defined 30-day lifecycle/retention rule.
Data movement uses Globus-managed service accounts, with no direct user access to underlying buckets.
User provisioning is managed via Sailpoint.
The licensing model is described as a flat-fee setup for unlimited data transfer and unlimited endpoints (cloud and on-premises).

Responsibilities

Complete final configuration and hardening of the Globus Connect Server (GCS) v5 deployment on GCP Compute Engine VMs in the Data DMZ.
Configure and validate Globus Storage Gateways and S3 Storage Connectors for ingress and egress buckets in GCP.
Configure Globus collections (Managed and Guest) based on client data access policies and identity provider restrictions.
Validate end-to-end transfer workflows including ingress, egress, and staging collection transfers across the Service Connector (SC) boundary into the MCC VPC.
Configure DNS, authentication flows (OAuth/OpenID Connect via Entra ID), and endpoint registration within Globus.org.
Onboard initial research user groups and provide hands-on support for first transfers.
Develop and document standardized onboarding procedures, including Sailpoint provisioning workflows and Globus Web App access.
Provide Tier 1/2 operational support for Globus users, including troubleshooting for transfer failures, stalled transfers, permissions, connectivity problems, and performance optimization.
Coordinate escalated issues with Globus vendor support (University of Chicago) using the established Globus support process.
Monitor and maintain GCS VM health, GCS services, and GCP bucket lifecycle policies.
Manage Globus endpoint configurations, including storage gateways, identity provider settings, path restrictions, and access policies.
Perform ongoing performance tuning, including GridFTP concurrency, parallelism, data channel configurations, and transfer parameters for high-throughput workloads.
Monitor transfer activity, usage patterns, and audit logs for operational and compliance reporting.
Manage GCS software updates, patches, and version upgrades.
Support disaster recovery planning and testing for the Globus platform.
Implement and enforce security controls aligned with internal ISA, BAA, and NIST frameworks.
Manage identity provider configurations and access controls (RBAC) within the Globus platform.
Ensure data governance policies are enforced, including collection-level permissions, path restrictions, and transfer audit logging.
Support TPRM and Risk/OIS requirements related to Globus operations.
Create comprehensive technical documentation including runbooks, SOPs, architecture diagrams, troubleshooting guides, and operational playbooks.
Participate in the Globus Orientation Session led by Pete Eby from the Architecture team and translate session content into operational procedures.
Transfer knowledge to internal Enterprise Interfaces staff to support long-term self-sufficiency.
Document lessons learned from initial onboarding and operational support activities.
Navigate internal governance, change management, and approval processes for platform changes.
Collaborate with the Architecture team, Storage/Infrastructure team, and Research stakeholders.
Coordinate with ADO repo owners for configuration and state management.
Provide input into long-term MFT operations planning and AI-operations integration.

Requirements

3+ years hands-on experience with the Globus platform, including Globus Connect Server v5 deployment, configuration, and administration.
Deep understanding of the Globus ecosystem, including endpoints, collections (managed and guest), storage gateways, storage connectors (S3, POSIX), and the Globus Web App.
Experience with GridFTP protocol, including concurrency, parallelism, data channel tuning, and performance optimization for large-scale transfers.
Familiarity with Globus Auth (OAuth 2.0 / OpenID Connect), federated identity management, and identity provider configuration.
Experience with Globus Flows for workflow automation and scheduled/recurring transfer operations.
Experience with Globus CLI and the Globus Python SDK for scripting and automation.
Familiarity with Globus vendor support engagement processes.
Hands-on experience with GCP Compute Engine (VM provisioning, management, and maintenance).
Experience with GCP Cloud Storage (S3-compatible buckets, lifecycle policies, IAM, service accounts).
Understanding of GCP networking including VPCs, firewall rules, DNS, ingress/egress controls, and DMZ architecture.
Experience with GCP IAM, service accounts, and RBAC.
Strong Linux administration skills (GCS runs on Linux VMs).
Proficiency with Bash scripting, system monitoring, log analysis, and troubleshooting.
Experience with package management, service configuration, and security hardening on Linux.
Understanding of network protocols: TCP/IP, HTTPS, GridFTP, DNS.
Experience configuring firewall rules for high-port-range protocols (TCP 50000–51000).
Familiarity with Zero-Trust security principles and DMZ architecture patterns.
Understanding of HIPAA compliance as it applies to data transfer and PHI handling in healthcare environments.
Broad understanding of Managed File Transfer principles including secure transfer protocols, audit logging, compliance, and data governance.
Experience supporting large-scale data transfers (terabyte- to petabyte-scale) in research, academic, or healthcare environments.
Bachelor’s degree in Computer Science or Engineering from an accredited University or College, OR an Associate’s degree with 2 years of experience.
Self-directed problem solving and strong communication for technical and research customer audiences.
Ability to enable others through operational runbooks and training materials.
Customer-oriented mindset for troubleshooting with research users and guiding them through workflows.
Governance-aware approach to change management, approvals, and security review requirements.
Proactive approach to anticipating operational needs and improving processes.

Technologies

Globus, Globus Connect Server (GCS) v5, Globus Storage Gateways, Globus Storage Connectors (S3, POSIX), Globus Web App
GridFTP
OAuth 2.0, OpenID Connect, Globus Auth, Entra ID
Globus Flows, Globus CLI, Globus Python SDK
Google Cloud Platform (GCP), GCP Compute Engine, Google Cloud Storage (S3-compatible buckets), GCP IAM, RBAC, VPC, DNS
Sailpoint, Azure DevOps (ADO), Terraform
Linux, Bash, TCP/IP, HTTPS

Benefits

Comprehensive Benefit Plan: medical, dental, vision, life insurance, short-term disability, long-term disability, paid sick leave, retirement benefits
401(k) with matching on the first 4% of contributions
Bonus opportunities: Longevity Award bonus and $1,000 referral bonus for placed referrals
Professional development: on-demand training through a consultant portal and an AI upskilling hub
Ongoing support and networking via a Consultant Coach program
Remarketing process

Location and compensation

Location: Minnesota (remote)
Job type: Contract
Rate: $52.51/hour (W2)
Duration: 6-12 months (extension possible)
Salary range listed: USD 52 - 52 per hourly

View full job page →

Cloud Security Data Jobs

Senior AWS IAM & Data Engineer

Data Engineer

Get Cloud Security Data Jobs alerts