Security Engineer III/Database Administrator - HHS STIM

Job Description: Security Engineer III/Database Administrator

Responsibilities

• Administer, operate, and maintain Microsoft SQL (2016–2019) and other enterprise databases (DB2, Oracle, MongoDB, MySQL).
• Support enterprise GRC platform and application instances (RSA Archer) across Dev, Test, UAT, and Production environments.
• Perform database performance tuning, optimization, patching, and security hardening in compliance with DISA STIGs and HHS policies.
• Implement upgrade strategies, including planning, checklists, milestones, fallback procedures, and coordination with system administrators and developers.
• Manage SQL Server Failover Clustering and Always-On Availability Groups for high availability and disaster recovery.
• Collaborate with platform teams to ensure alignment of database operations with shared infrastructure services.
• Develop and maintain automation scripts (SQL, PowerShell, DDL, DML, DCL, DQL) to improve efficiency and troubleshooting.
• Ensure secure access controls, patch management, and vulnerability remediation in accordance with federal requirements.
• Maintain system documentation for configurations, processes, and service records.
• Provide mentoring and guidance to junior team members on best practices and technical problem-solving.
• Support 24/7/365 on-call operations as part of the STIM infrastructure mission.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent combination of education, certifications, and experience).
• 8+ years of Information Security and Database Administration experience, including enterprise-level SQL Server administration.
• Strong expertise in database performance tuning, administration, and data maintenance (5+ years preferred).
• Experience with SQL Server Failover Clustering, Always-On Availability Groups, and high availability/disaster recovery configurations.
• Proficiency with SQL Server Management Studio (SSMS), PowerShell, and ServiceNow for database administration and monitoring.
• Hands-on experience with enterprise GRC platforms such as RSA Archer.
• Current Microsoft Database certification (e.g., Microsoft Certified: Azure Database Administrator Associate or higher).
• Strong knowledge of federal security frameworks such as NIST SP 800-53 Rev. 5, CIS Controls, and DISA STIGs.
• Excellent written and verbal communication skills with the ability to convey technical concepts to non-technical audiences.
• Strong problem-solving skills, organizational skills, and ability to work both independently and collaboratively.