Database Administrator

Overview:

DecisionPoint is looking for a Database Administrator to join the Cloud Services (CS) team. The CS team maintains the ARTRANS AWS cloud environments and DevSecOps platform.

 

In this role you will support the ARTRANS Amazon Web Services (AWS) cloud environments by providing database administration, modernization guidance, and secure database operations. As a Database Administrator you will manage and support AWS RDS instances and related database platforms, assist with code-based deployment procedures, perform database security checks and remediation. In addition, you will help sustain legacy databases while supporting their transition to modernized cloud-based solutions.

Duties & Responsibilities:

• Architect and execute secure migrations of highly available production databases from self-managed AWS EC2 instances to fully managed AWS RDS in accordance with DoD Cloud Computing SRG requirements.
• Integrate automated database migrations and updates into tools like GitLab CI/CD using database schema migration tools (e.g., Liquibase or Flyway).
• Define, build, and maintain database infrastructure as code (IaC) using Terraform.
• Implement, configure, and maintain database hardening following applicable DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) for SQL Server, PostgreSQL, MySQL, and Oracle hosted on AWS EC2 and RDS.
• Coordinate and cooperate with IA/Cyber teams as required.
• Complete all NIST 800-53 Rev 5 artifacts for AWS RDS and Databases on EC2 instances.
• Enforce FIPS 140-2/3 validated encryption protocols for data-at-rest (AWS KMS/Customer Managed Keys) and data-in-transit (TLS 1.3/mTLS).
• Implement robust key rotation and secrets management via HashiCorp Vault.
• Enforce Principle of Least Privilege and Role-Based Access Control (RBAC).
• Integrate database authentication with DoD enterprise identity providers (PKI, CAC/mTLS authentication, SAML/OIDC).
• Configure detailed database audit logging in compliance with NIST SP 800-53 / RMF controls.

Route continuous audit telemetry into SIEM solutions and build real-time monitoring dashboards via Grafana.

• Actively scan, assess, and remediate CVEs, IAVMs/IAVAs, and misconfigurations identified via automated database scanners; support artifact generation for Authority to Operate (ATO) packages.
• Provide enterprise database support for Oracle, SQL Server Enterprise, MySQL and Postgres SQL on RDS and EC2.
• Ensure database requirements are accurately relayed between operations and engineering.
• Leverage secure schema conversion and replication tools (AWS SCT, AWS DMS) via private VPC endpoints to ensure minimal downtime and zero data leakage.
• Sustain Legacy databases in support of transitioning to modernization.

Qualifications:

• Bachelor’s degree with 3 years or related work experience or 7 years of continuous related work experience
• Active Secret clearance
• DoW 8140 certification: IAT Level II or better (e.g., Security+ CE)
• Experience with Oracle Database version 19c and above