Database/Systems Admin - Network Security Analyst

National Solar Observatory - Maui, HI4.3

Full-timeEstimated: $74,000 - $99,000 a year
The Association of Universities for Research in Astronomy (AURA) is a consortium of over 40 US institutions and four international affiliates that operates world-class astronomical observatories. AURA’s role is to establish, nurture, and promote public observatories and facilities that advance innovative astronomical research. AURA is responsible for managing the operations of the Gemini Observatory, the National Optical Astronomical Observatory, the National Solar Observatory, the Space Telescope Science Institute, and the construction of the Large Synoptic Survey Telescope and the Daniel K. Inouye Solar Telescope under cooperative agreements with the National Science Foundation and NASA.

The National Solar Observatory (NSO) Daniel K. Inouye Solar Telescope (DKIST) project is seeking a Database/Systems Admin - Network Security Analyst to join the project on Maui, Hawaii.

As a Database Administrator, you would design, develop, test, deploy, and maintain an Engineering Database, which will provide long-term storage and analysis tools of DKIST engineering data. This will include both hardware and software specifications, a data collection strategy, an efficient, user-friendly interface for querying the engineering data, and automated functional and performance tests to verify compliance.

As a Systems Administrator/Network Security Analyst, you would develop network security policy options, estimate costs and labor to deploy, present to observatory senior leadership, and deploy the security system. This will include understanding best practices in network and system security, prioritizing, recommending, and implementing improvements in systems where security is lacking. In parallel, the individual will support general systems administration functions, including, managing and support NSO staff workstations (Mac, Linux, Windows) and provide network support for the Local Area Network (LAN), Wide Area Network (WAN).

Essential Functions – Database Administrator II:
Develop and deploy an Engineering Data Center at the DKIST Science Support Center
Provide efficient data collection pipeline for engineering data
Provide user-friendly interface, both GUI and CLI, into the Engineering Data Center based user feedback
Analyze, design and develop automated tests
Responsible for tracking work effort
Support those using the Engineering Data Center
Essential Functions – Network Security Analyst/Systems Administrator II:

Develop and deploy a central syslog server at the DKIST Observatory to capture all server and network logs at the DKIST Summit location. Develop reporting scans and procedures to screen and identify security incidents for resolution.
Provide cyber security support by planning, coordinating, integrating and synchronizing cyber defense and prevention activities, ensuring compliance with all applicable security program policies.
Understand end point security technologies (Antivirus, Forensics, Anti-malware, HIPS) and operating systems (Windows and Linux)
Analyze, build, support, and maintain hardware, software, and peripheral devices, including servers, workstations, printers, and network devices.
Analyze and evaluate computer systems performance, diagnoses problems, evaluates hardware and operating system function and performance, as required.
Design, develop, and maintain user documentation, system procedures, and operator instructions.
Performs system configuration, administration, and maintenance.
Performs both preventative (patching, updates) and emergency systems maintenance (eg. failed desktop/server).
All AURA employees are responsible for the proper management and control of all AURA property within their work area, whether assigned to them or someone else. This responsibility includes reporting any known missing, stolen, or non-working property in their work area to their supervisor or the AURA Property Officer.
Responsible for ensuring compliance with government award terms and conditions assigned to this position or subordinates of this position as defined in the Vela Award Management system

Required Education/Experience/Skills/Abilities:
Bachelor’s degree in computer science, mathematics, or engineering
Position requires minimum of five years of experience in IT or database administration
Experience with Java GUI front-end development, SQL, Postgres, or equivalent database tools
Thorough knowledge of information systems, security concepts and current information security trends and practices, including security processes and methods
Ability to conduct continuous assessment of current IT security practices and systems and identifying areas for improvement
Strong security platform and technology capabilities with the ability to review and analyze security events.
Working knowledge of current security threats, techniques, and landscape, as well as a dedicated and self-driven desire to research current information security landscape.
Experience with editing/writing security policies and procedures concerning overall security program topics.
Excellent organizational and verbal/written communication skills. Ability to document and explain technical details and incident reports clearly and concisely
Ability to generate hardware and software cost estimates, projections and writing purchase requests
Experience with and understanding of hardware RAID.
Utilize excellent customer service skills and exceed customers’ expectations.
Basic level knowledge of data communications networking, both wired and wireless.
Commitment to stay abreast of current-market hardware and software products used in Information Technology.
Sensitive to and respectful of cultural and environmental issues.

Preferred Education/Experience/Skills/Abilities:
Agile software development using JIRA
Two or more years with hands-on experience in: Multiple OS platforms with strong emphasis on Linux (CentOS, Red Hat, Ubuntu), Mac OS X, and Windows systems.
In-depth knowledge of the TCP / IP protocol suite, security architecture, securing and hardening Operating Systems, Networks, Databases and Applications
Knowledge of the Incident Response life-cycle, working independently to investigate and effectively respond to cyber security incidents
Thorough understanding of the threat and attack landscape, attack vectors, vulnerabilities, and how they are leveraged by malicious actors
Security certifications, Database Administrator certifications
Experience with Zeek (formerly Bro)
Experience with telecommunications and videoconferencing systems
Familiarity with astronomy, physics applications/computing
Experience with OS-level scripting environment, such as Bourne shell
Experience with working in a research environment that relies extensively on Open Source solutions
Maintains a can-do attitude, is a self-starter, proactive, strategic thinker, team player, quality focused, and pays attention to detail

Physical Demands:
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to sit; use hands to finger, handle, or feel and talk or hear.
The employee is occasionally required to stand; walk; reach with hands and arms and stoop; kneel; crouch; or crawl.
The employee must regularly lift and /or move up to 10 pounds and occasionally lift and/or move up to 25 pounds.
Specific vision abilities required by this job include close vision, depth perception and ability to adjust focus.
Must possess - sufficient mobility, strength, or dexterity in both arms and hands and both legs to a) reach upward, sideways, downward to work with paper files; b) sufficient mobility and dexterity to utilize computer systems, fax machines, copiers, and other office machines.
Must possess – 1) ability to read and understand instructions, drawings, safety guides, and other written materials necessary to perform job; 2) sufficient visual capacity to perform the applicable functions without assistance of visual aids other than eye contacts or eye glasses; 3) sufficient spoken aural capacity to hear and understand instructions, warning bells, fire alarms, or shouted instructions without assistance of auditory aids other than a hearing aid; and 4) ability to impart information orally so that others understand and can respond appropriately
This position may require occasional travel to/from the Mainland U.S.
Ability to work at 10,000’ elevation, sometimes during inclement weather
The work is expected to last approximately one year and following that year, other opportunities in NSO may be available.

Please list 3 professional references in your application and attach a CV or resume (PDF files preferred) to your application. Please name any attachments with the following format: LastnameDocname. Application documents that are not uploaded as part of the application may be sent to

AURA, as a leader in the astronomical community, is committed to diversity and inclusion. AURA develops and supports programs that advance our organizational commitment to diversity, broaden participation, and encourage the advancement of diversity throughout the astronomical scientific workforce. Learn more at

As a recipient of U.S. Government funding, AURA is considered a government contractor and is subject to Equal Employment Opportunity and Affirmative Action regulations. As an Equal Opportunity and Affirmative Action Employer, AURA does not discriminate based on race, sex, color, age, religion, national origin, sexual orientation, gender identity/gender identity expression, lawful political affiliations, veteran status, disability, and/or any other legally protected status under applicable federal, state, and local equal opportunity laws. The statements below as well as the requests for self-identification are required pursuant to these regulations. We encourage your participation in meeting these federal reporting requirements which are included for protection and to assist us in our recordkeeping and reporting. Your responses are kept strictly confidential.

Veterans, disabled individuals or wounded warriors needing assistance with the employment process should request assistance at

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.