Data Engineer

Hollstadt Consulting is hiring a contract Remote Data Engineer to join the Enterprise Interfaces team and complete operationalization of the Globus Managed File Transfer platform in the GCP Cloud Data DMZ. The work focuses on configuration, onboarding support, operations, documentation, and alignment with required compliance controls as the platform moves into an operational home alongside existing MFT solutions.

The engagement is expected to run 6-12 months, with extension possible. The role is embedded with the Enterprise Interfaces team as the primary technical resource for finishing initial setup, establishing support processes, and transferring operational knowledge of the Globus ecosystem.

Engagement context

• Globus has been selected as a strategic Managed File Transfer (MFT) platform.
• The Globus platform is installed in the GCP Cloud Data DMZ and nearing completion of initial implementation.
• Enterprise Interfaces is designated as the operational home for Globus alongside existing MFT solutions (Signiant and Cleo).
• Two GCP Compute Engine VMs host Globus Connect Server (GCS) v5 within the Data DMZ.
• Ingress and egress use GCP Storage buckets with a defined 30-day lifecycle/retention rule.
• Data movement uses Globus-managed service accounts, with no direct user access to underlying buckets.
• User provisioning is managed via Sailpoint.
• The licensing model is described as a flat-fee setup for unlimited data transfer and unlimited endpoints (cloud and on-premises).

Responsibilities

• Complete final configuration and hardening of the Globus Connect Server (GCS) v5 deployment on GCP Compute Engine VMs in the Data DMZ.
• Configure and validate Globus Storage Gateways and S3 Storage Connectors for ingress and egress buckets in GCP.
• Configure Globus collections (Managed and Guest) based on client data access policies and identity provider restrictions.
• Validate end-to-end transfer workflows including ingress, egress, and staging collection transfers across the Service Connector (SC) boundary into the MCC VPC.
• Configure DNS, authentication flows (OAuth/OpenID Connect via Entra ID), and endpoint registration within Globus.org.
• Onboard initial research user groups and provide hands-on support for first transfers.
• Develop and document standardized onboarding procedures, including Sailpoint provisioning workflows and Globus Web App access.
• Provide Tier 1/2 operational support for Globus users, including troubleshooting for transfer failures, stalled transfers, permissions, connectivity problems, and performance optimization.
• Coordinate escalated issues with Globus vendor support (University of Chicago) using the established Globus support process.
• Monitor and maintain GCS VM health, GCS services, and GCP bucket lifecycle policies.
• Manage Globus endpoint configurations, including storage gateways, identity provider settings, path restrictions, and access policies.
• Perform ongoing performance tuning, including GridFTP concurrency, parallelism, data channel configurations, and transfer parameters for high-throughput workloads.
• Monitor transfer activity, usage patterns, and audit logs for operational and compliance reporting.
• Manage GCS software updates, patches, and version upgrades.
• Support disaster recovery planning and testing for the Globus platform.
• Implement and enforce security controls aligned with internal ISA, BAA, and NIST frameworks.
• Manage identity provider configurations and access controls (RBAC) within the Globus platform.
• Ensure data governance policies are enforced, including collection-level permissions, path restrictions, and transfer audit logging.
• Support TPRM and Risk/OIS requirements related to Globus operations.
• Create comprehensive technical documentation including runbooks, SOPs, architecture diagrams, troubleshooting guides, and operational playbooks.
• Participate in the Globus Orientation Session led by Pete Eby from the Architecture team and translate session content into operational procedures.
• Transfer knowledge to internal Enterprise Interfaces staff to support long-term self-sufficiency.
• Document lessons learned from initial onboarding and operational support activities.
• Navigate internal governance, change management, and approval processes for platform changes.
• Collaborate with the Architecture team, Storage/Infrastructure team, and Research stakeholders.
• Coordinate with ADO repo owners for configuration and state management.
• Provide input into long-term MFT operations planning and AI-operations integration.

Requirements

• 3+ years hands-on experience with the Globus platform, including Globus Connect Server v5 deployment, configuration, and administration.
• Deep understanding of the Globus ecosystem, including endpoints, collections (managed and guest), storage gateways, storage connectors (S3, POSIX), and the Globus Web App.
• Experience with GridFTP protocol, including concurrency, parallelism, data channel tuning, and performance optimization for large-scale transfers.
• Familiarity with Globus Auth (OAuth 2.0 / OpenID Connect), federated identity management, and identity provider configuration.
• Experience with Globus Flows for workflow automation and scheduled/recurring transfer operations.
• Experience with Globus CLI and the Globus Python SDK for scripting and automation.
• Familiarity with Globus vendor support engagement processes.
• Hands-on experience with GCP Compute Engine (VM provisioning, management, and maintenance).
• Experience with GCP Cloud Storage (S3-compatible buckets, lifecycle policies, IAM, service accounts).
• Understanding of GCP networking including VPCs, firewall rules, DNS, ingress/egress controls, and DMZ architecture.
• Experience with GCP IAM, service accounts, and RBAC.
• Strong Linux administration skills (GCS runs on Linux VMs).
• Proficiency with Bash scripting, system monitoring, log analysis, and troubleshooting.
• Experience with package management, service configuration, and security hardening on Linux.
• Understanding of network protocols: TCP/IP, HTTPS, GridFTP, DNS.
• Experience configuring firewall rules for high-port-range protocols (TCP 50000–51000).
• Familiarity with Zero-Trust security principles and DMZ architecture patterns.
• Understanding of HIPAA compliance as it applies to data transfer and PHI handling in healthcare environments.
• Broad understanding of Managed File Transfer principles including secure transfer protocols, audit logging, compliance, and data governance.
• Experience supporting large-scale data transfers (terabyte- to petabyte-scale) in research, academic, or healthcare environments.
• Bachelor’s degree in Computer Science or Engineering from an accredited University or College, OR an Associate’s degree with 2 years of experience.
• Self-directed problem solving and strong communication for technical and research customer audiences.
• Ability to enable others through operational runbooks and training materials.
• Customer-oriented mindset for troubleshooting with research users and guiding them through workflows.
• Governance-aware approach to change management, approvals, and security review requirements.
• Proactive approach to anticipating operational needs and improving processes.

Technologies

• Globus, Globus Connect Server (GCS) v5, Globus Storage Gateways, Globus Storage Connectors (S3, POSIX), Globus Web App
• GridFTP
• OAuth 2.0, OpenID Connect, Globus Auth, Entra ID
• Globus Flows, Globus CLI, Globus Python SDK
• Google Cloud Platform (GCP), GCP Compute Engine, Google Cloud Storage (S3-compatible buckets), GCP IAM, RBAC, VPC, DNS
• Sailpoint, Azure DevOps (ADO), Terraform
• Linux, Bash, TCP/IP, HTTPS

Benefits

• Comprehensive Benefit Plan: medical, dental, vision, life insurance, short-term disability, long-term disability, paid sick leave, retirement benefits
• 401(k) with matching on the first 4% of contributions
• Bonus opportunities: Longevity Award bonus and $1,000 referral bonus for placed referrals
• Professional development: on-demand training through a consultant portal and an AI upskilling hub
• Ongoing support and networking via a Consultant Coach program
• Remarketing process

Location and compensation

• Location: Minnesota (remote)
• Job type: Contract
• Rate: $52.51/hour (W2)
• Duration: 6-12 months (extension possible)
• Salary range listed: USD 52 - 52 per hourly