Sr. Research Systems Engineer (Secure Data & Research Computing)

Columbia University; New York (NY); On-site; USD 110,000 - 125,000; Full time

Job summary

Columbia University is seeking a Sr. Research Engineer to design, implement, and manage secure research environments with a focus on restricted data and compliance.

You will support on‑premise data enclaves, cloud projects, and data transfer services, ensuring alignment with NIST and HIPAA requirements while collaborating with researchers and IT teams. You will help develop cloud services, configure images, manage software, and advise on security practices across AWS/GCP and hybrid setups,

Qualifications

• Bachelor’s degree and/or its equivalent required.
• 4-6 years’ related experience.
• 4+ years’ experience in security engineering, preferably in regulated or research environments.
• Advanced Linux administration (RHEL, Ubuntu).
• Experience with secure data environments, enclaves, or controlled-access systems.
• Familiarity with data privacy and compliance frameworks (e.g., HIPAA, IRB protocols).
• Knowledge of server operating systems, networking, system and network security.
• Experience in at least one programming language (Ex. Python, Java).
• Automation via scripting (Python/Bash/Terraform) and third‑party tools.
• Virtualization experience (VMware ESXi, VDI).
• Experience with Git, Terraform, Docker.

Responsibilities

• Administers and supports the on-premises Secure Data Enclave (SDE) platform across Windows and Linux environments.
• Patching and maintaining virtual machines, deploying and managing software, and log analysis.
• Collaborates with researchers, IT, and compliance teams to enable secure data use.
• Manages Globus High Assurance Subscription; develops documentation and training.
• Provides consulting cloud services for researchers using Columbia cloud services.
• Advises on AWS, GCP, and best security practices for cloud and on-prem infrastructure.
• Plans and designs new cloud research computing services; reviews design and risk assessments.
• Represents RCS at campus events on research cyberinfrastructure and cloud.
• Contributes to best practices documentation and knowledge transfer.
• Leads training workshops for researchers on cloud and security RC resources.

Skills

Linux

Python

Terraform

Docker

Git

Security engineering

Cloud (AWS/GCP)

Communication

Education

Bachelor’s degree

Tools

VMware vSphere

ESXi

Terraform

Job description

• Job Type: Officer of Administration
• Regular/Temporary: Regular
• Hours Per Week: 35
• Standard Work Schedule: Standard
• Building: Studebaker
• Salary Range: $110,000 - $125,000

The salary of the finalist selected for this role will be set based on a variety of factors, including but not limited to departmental budgets, qualifications, experience, education, licenses, specialty, and training. The above hiring range represents the University’s good faith and reasonable estimate of the range of possible compensation at the time of posting.

Position Summary

Reporting to the Sr. Manager of Research Computing Services (RCS); the Sr. Research Engineer provides technical consultation to departmental research groups and IT teams to support and design on-premise secure research technology systems and services, new cloud implementations, research platforms, and data storage and transfer services. The Sr. Engineer is responsible for designing, developing, and managing robust, scalable, and highly-available secure environments with a special focus on meeting requirements for restricted research (Controlled Unclassified Information, Personally Identifiable Information, Protected Health Information, Research Health Information, and other potentially sensitive data), including the Cybersecurity Maturity Model Certification, NIST SP 800-53, NIST SP 800-171 and HIPAA requirements.

Responsibilities

• Administers and supports the on-premises Secure Data Enclave (SDE) platform across Windows and Linux environments. Responsibilities include patching and maintaining virtual machines, deploying and managing software, performing regular system log review and analysis of logs and data outputs, troubleshooting user-reported issues and ensuring continuous adherence to security and compliance requirements.
• Collaborates with researchers, IT, and compliance teams to enable secure and efficient data use.
• Administers and manages Columbia’s Globus High Assurance Subscription. POC with Globus and CUIT support. Make sure full administrative capabilities are enabled on the Globus Connect server such as management console, usage reports etc. Develops documentation and training materials for CUIT support and end users.
• Provides consulting cloud services for researchers that would like to use Columbia-provisioned cloud services for their research computing. This includes: an overview of the features of the Cloud service providers; creation and initial configuration of images; software installation and license management; storage configuration; planning workflow for efficiency and/or price.
• Collaborates with researchers, embedded support personnel, and key central IT personnel (e.g. systems, operations, and security) to recommend and advise on AWS, GCP, and industry best security practices with cloud and on-prem enterprise infrastructure and information security considerations in a research environment to establish security policies and best practices.
• Takes a primary role in the planning and design of new cloud research computing services.
• During the research lifecycle, recommends and advises security best practices for the updated applications and infrastructure.
• Manages design reviews and risk assessments for new applications integrating with core services.
• Considers cloud infrastructure, cloud application design and cloud management and monitoring when designing and implementing new cloud security services.
• Proactively represents RCS at campus or departmental events with a focus on research cyberinfrastructure, networking and cloud across the campus.
• Regularly contributes to best practices documentation and knowledge transfer.
• Helps build curriculum and lead training workshops for researchers on the use of public cloud, cloud-native technologies, and security RC resources.
• Stay up to date with trends in the information security community including new vulnerabilities, methodologies, and products.
• All other duties as assigned.

Minimum Qualifications

• Bachelor’s degree and/or its equivalent required.
• Minimum 4-6 years’ related experience.
• 4+ years’ experience in security engineering, preferably in regulated or research environments.
• Advanced Linux administration (RHEL, Ubuntu).
• Experience with secure data environments, enclaves, or controlled-access systems.
• Familiarity with data privacy and compliance frameworks (e.g., HIPAA, IRB protocols).
• Knowledge of server operating systems, networking, system and network security.
• Experience in at least one programming language (Ex. Python, Java).
• Knowledgeable in implementing automation through scripting (Python/Bash/Terraform) and utilizing third‑party products and tools for migration and solution delivery.
• Familiarity with virtualization tools (e.g., VMware vSphere) and managing virtualized environments for on‑premises server infrastructure.
• System administration experience with virtualization (ESXi, hypervisors, VDI deployment)
• Experience with technologies like Git, Terraform, Docker.
• Excellent written and verbal communication skills.
• Demonstrated ability to work in a fast‑paced, deadline driven environment.
• Demonstrated excellence in a variety of competencies including teamwork/collaboration, analytical thinking, communication and influencing skills, and technical expertise.
• Ability to be precise and attentive to detail is essential.
• Ability to work with changing priorities and with multiple projects.
• Ability to be precise and attentive to detail is essential.
• Ability to work with minimal supervision.
• Ability to work weekend and off‑hour work on occasion.

Preferred Qualifications

• Bachelor's degree in Computer Science, Engineering, Computer Security, Information Systems, or related field.
• 4+ years of experience in infrastructure engineering.
• 2+ years of security experience in a cloud-based infrastructure.
• Experience adopting security practices across an enterprise.
• Familiarity with NIST 800-53, NIST 800-171 (CUI), and HITRUST framework control requirements; hands‑on experience with HIPAA Compliance for handling of PHI.
• Understanding of system development in cloud environments, including Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS).
• Experience in understanding the architecture, migration, and deployment of on‑prem applications in the cloud (AWS/GCP) and hybrid environments: on‑prem as well as cloud.
• Knowledge of attack vectors (malware, web application, social engineering, etc.) and attack surfaces (ports, firewalls, incoming data processing, interfaces, etc.).
• Certifications in CompTIA Security+ (SY0-701) preferred.

Equal Opportunity Employer / Disability / Veteran

Columbia University is committed to the hiring of qualified local residents.