Principal Enterprise Systems and Security Engineer

The Colorado Clinical and Translational Sciences Institute (CCTSI), a clinical research institute located on the Anschutz Medical Campus, has an opening for a full-time Senior Enterprise Systems and Security Engineer.

The Principal Enterprise Systems and Security Engineer is a hands-on individual contributor and senior technical lead responsible for directly administering, securing, troubleshooting, and improving CCTSI’s enterprise infrastructure. This position does not supervise staff and is not responsible for delegating the technical work described below. Reporting to the IT Manager, the position independently performs complex systems administration and security work, while serving as a subject matter expert and technical partner to ensure CCTSI systems are secure, reliable, scalable, and aligned with best practices for research and academic environments.

We are seeking a collaborative, hands-on technology professional with expertise in enterprise systems administration and an interest in contributing to human health in an academic environment. The successful candidate will communicate effectively, share technical knowledge, maintain detailed documentation, develop a thorough understanding of CCTSI processes, and contribute practical solutions to a high-performing Informatics Services team. This position requires occasional evening, weekend, and on-call work and reports to the IT Manager of the CCTSI Informatics Services team., Enterprise Systems & Infrastructure (40%)

• Configure, administer, patch, monitor, troubleshoot, and maintain enterprise infrastructure across Windows, Linux, and virtual environments
• Build, configure, upgrade, and optimize VMware, ESXi, vCenter, and physical server infrastructure
• Perform system performance tuning, capacity analysis, scalability planning, and high-availability configuration
• Provide day-to-day administration and technical support for multi-datacenter infrastructure and hybrid environments

Security & Compliance (40%)

• Perform vulnerability scanning, analyze findings, apply system hardening standards, and complete or coordinate remediation across all environments
• Configure and maintain secure infrastructure controls, including network segmentation (ACI), DMZ configurations, firewall and access-control requirements, and least privilege permissions
• Implement, test, troubleshoot, and maintain security controls, including MFA, TLS encryption, certificates, and secure authentication systems
• Documentation for meeting or exceeding industry standards for environments containing Protected Health Information (PHI)
• Partner with CU Anschutz OIT/ISS to ensure alignment with institutional security standards, audits, and compliance requirements
• Monitor security alerts and emerging threats; investigate events, implement mitigations, and support incident response and recovery activities

Systems Architecture & Modernization (10%)

• Migrate away from unsupported and legacy platforms
• Develop, document, apply, and maintain standards for system configuration, deployment, patching, monitoring, and security
• Research, recommend, prototype, and implement infrastructure modernization improvements in coordination with the IT Manager

Collaboration (10%)

• Provide technical analysis, recommendations, and hands-on implementation support to the IT Manager and Informatics leadership
• Mentor and train staff and provide escalation support for complex system issues
• Work alongside development teams to configure environments, diagnose application-infrastructure issues, and align application requirements with infrastructure and security standards
• Work directly with external IT teams and vendors to implement, test, troubleshoot, and document infrastructure and security solutions
• Perform occasional evening, weekend, and on-call work, including hands-on outage response, troubleshooting, and service restoration
• Other duties as assigned
• Maintain a four-day-per-week onsite work schedule

Work Location:

Hybrid - this role is eligible for a hybrid schedule of 4 days per week on campus and as needed for in-person meetings.

Why Join Us:

The CCTSI supports transformational clinical and translational research at the University of Colorado Anschutz Medical Campus and affiliated institutions. The CCTSI was created in 2008 with funding from the Clinical and Translational Science Award (CTSA) initiative of the National Institutes of Health (NIH) Because research conducted using CCTSI resources spans multiple institutions, this position acts as a liaison to other Information Technology departments.

A bachelor’s degree in computer science, management/computer information systems, computer engineering, information technology, or a directly related field from an accredited institution and 3-5 years of professional experience in systems administration or infrastructure engineering

Experience directly administering and supporting enterprise server environments (Windows and/or Linux)

Experience with virtualization platforms (VMware, vSphere, ESXi)

Experience with system patching, monitoring, and data protection

Substitution: A combination of education and related technical/military/paraprofessional experience may be substituted for a bachelor’s degree on a year for year basis., * 7+ years of experience in enterprise systems administration or engineering

• Strong experience with:
• Security vulnerability management and remediation
• System hardening and configuration standards
• Network architecture, including segmentation and secure design
• Identity and access management (LDAP, MFA integration)
• Experience with database environments (SQL Server, MariaDB)
• Experience with backup and recovery solutions (e.g., Veeam)
• Experience working in regulated or research environments

Conditions of Employment:

• Applicants must be legally authorized to work in the United States without requiring sponsorship. We are unable to provide work visa sponsorship or employment authorization for this position now or in the future.

Knowledge, Skills and Abilities:

• Diplomatic disposition and customer service orientation with excellent written and verbal communication skills in the English language
• Advanced understanding of enterprise infrastructure, security principles, and system architecture
• Ability to assess risk and implement proactive mitigation strategies
• Strong troubleshooting and problem-solving skills for complex environments
• Ability to organize and execute multiple priorities in a fast-paced environment
• Strong communication skills with both technical and non-technical stakeholders
• Ability to develop documentation, standards, and best practices
• Ability to travel between campus locations, including distances of up to one mile.
• Ability to communicate effectively, both in writing and orally.
• Ability to establish and maintain effective working relationships with employees at all levels throughout the institution.
• Outstanding customer service skills.

The University of Colorado offers a comprehensive benefits package that includes health insurance, life insurance, retirement plans, tuition benefits, ECO pass, paid time off - vacation, sick, and holidays and more. To see what benefits are available, please visit: https://www.cu.edu/employee-services/benefits-wellness.

Benefits statement to include in all benefits-eligible positions:

Why work for the University?

We have AMAZING benefits and offer exceptional amounts of holiday, vacation and sick leave! The University of Colorado offers an excellent benefits package including:

• Medical: Multiple plan options
• Dental: Multiple plan options
• Additional Insurance: Disability, Life, Vision
• Retirement 401(a) Plan: Employer contributes 10% of your gross pay
• Paid Time Off: Accruals over the year
• Vacation Days: 22/year (maximum accrual 352 hours)
• Sick Days: 15/year (unlimited maximum accrual)
• Holiday Days: 15/year
• Tuition Benefit: Employees have access to this benefit on all CU campuses
• ECO Pass: Reduced rate RTD Bus and light rail service

There are many additional perks & programs with the CU Advantage., The starting salary range (or hiring range) for this position has been established as HIRING RANGE $93,208 - $124,899

The above salary range (or hiring range) represents the University’s good faith and reasonable estimate of the range of possible compensation at the time of posting. This position may be eligible for overtime compensation, depending on the level.

Your total compensation goes beyond the number on your paycheck. The University of Colorado provides generous leave, health plans and retirement contributions that add to your bottom line.

Total Compensation Calculator