DevOps Engineer (Amazon Web Services Database Administrator)

Project Task and Deliverables:

1. Implement Data Dog as a monitoring solution for SQL databases and servers: Change SQL database backups from native SQL backups with maintenance plans to Rubriks backup solution in AWS using the Rubrik Agent and SLAs.
2. Test and Document Rubrik Agent SQL Backup Standards: Test and document backup and restoration standards to ensure data integrity and availability.
3. Secure and Encrypt SQL Production Databases at Rest: Implement and enforce database security protocols including access controls and encryption on production SQL Databases.
4. Migrate SQL Databases to AWS Cloud: Migrate SQL Databases from on-premises data center to AWS cloud data center
5. Standardize AWS Cloud database access configurations: Review and standardize the implementation of AWS security groups for connection to SQL for the enterprise and individual applications.
6. Implement Data Dog as a monitoring solution for SQL databases and servers: Monitor resource utilization using DataDog and AWS CloudWatch and optimize resources.
7. Implement DataBase monitoring for AWS Cloud data center: Implement database monitoring in AWS to monitor outages and performance issues and create alerts and dashboards.
8. Document legacy Db2 jobs: Documentation of legacy Db2 administrative jobs for mainframe applications including detailed Job Control Language (JCL) and job schedules for recurring database maintenance tasks such as statistics collection reorganization and image copy operations. Supports database integrity performance optimization and compliance with operational standards.
9. Perform Db2 Imagecopy Recovery and Data Integrity Analysis: Document and complete Db2 Imagecopy and Recovery procedures with validated integrity reports and documentation confirming data availability and compliance with recovery standards.
10. Document JCL and job schedules for regular statistics reorganization and image copies.: Deliverable: Perform Security audits and RacF security cleanup on DB2 application databases.

Roles/Responsibilities:

General Services

• Review/create/update Visio diagrams for existing/new SQL on-premises SQL in cloud and AWS RDS infrastructure.
• Create/document/implement disaster recovery strategy for 24x7 production (on premises/cloud) including backups/restores recovery procedures testing validity checks status reports and email alerts to minimize downtime.
• Perform systems/database tuning analysis and implement enhancements for performance optimization.
• Advise/work closely with development teams on DB-related issues/activities.
• Perform activities using best practices in compliance with IT standards/procedures and audit requirements (reliability quality security).
• Review/create/update test plan documents as needed.
• Define/review/document/adhere to maintenance procedures security standards auditing policies best practices and standards for SQL on-premises/AWS DB infrastructure.
• Provide 24x7 on-call support for mission-critical systems.
• Provide written weekly reports to supervisor on project/activity status.
• Prepare monthly status reports (accomplishments upcoming activities assigned projects list related issues).
• Attend DHCS Unit staff meetings and discuss project status.

Key Staff-Specific Responsibilities

• Provide expert-level database administration performance tuning and application support for a critical enterprise environment. This role will focus on AWS accounts and environments to host SQL Database EC2s.
• Design document and create an AWS configuration to allow centralized database monitoring and management across all of DHCS 40 AWS accounts in support of tiered applications with a database backend (e.g. AWS configurations including but not limited to Virtual Private Cloud (VPC) Security Groups EC2s RDS Database parameter groups and IAM roles).
• Plan create document and perform a process to migrate SQL databases to serverless cloud platforms using database conversion tools such as AWS Database Migration Services and Schema conversion tool.
• Collaborate with development teams to migrate SQL databases to serverless cloud platforms such as AWS RDS.
• Work with DHCS AWS Rubrik team to create and document backup policies and plans for applications focusing on databases.
• Create and document configurations for monitoring tools such as Idera CloudWatch and DataDog to monitor and alert on cloud database activities.
• Create document and implement a plan to monitor latency issues between on-premise and cloud connections related to database operations and make recommendations for improved performance.
• Create AWS server and firewall configuration requests and attend infrastructure change management meetings as necessary in support of database operations upgrades and migrations to DHCS AWS cloud.

Mandatory Skills:

1. Five (5) years of FTE experience in complex technology implementations in a product-centric environment.
2. Possess a bachelors degree in an IT-related or Engineering field. Additional qualifying experience may be substituted for the required education on a year-for year basis.
3. Five (5) years of FTE hands-on experience with System Administration and databases and AWS services using AWS Management Console and services including Amazon EC2 (Elastic Cloud computing) Amazon RDS (Relational Database Services) Amazon ElastiCache Amazon S3 (Simple Storage Service) Amazon Lambda Amazon VPC (Virtual Private Cloud) Web Application Firewall Identity Access Managment (IAM) Roles User Management Compute Instance Management and Cloudwatch).
4. Five (5) years of FTE data architecture and database administration expertise on MS SQL server Postgres and AWS cloud databases.
5. Five (5) years of FTE hands-on experience in providing solutions to optimize database performance and create performance benchmarks of the system and improve standards.
6. Five (5) years of FTE experience with database hardening server configuration for security to ensure that databases are safe and secure against cybersecurity threats.
7. Five (5) years of FTE experience in enforcing database security policies and audit logging mechanisms.
8. Four (4) years of FTE experience of editing deploying and managing AWS resources using AWS CloudFormation and Terraform.

Desirable Skills:

1. Experience with Amazon cloud-native services and architecture configurations (i.e. Amazon Cognito Amazon SNS (Simple Notification Service) Amazon Kinesis Amazon Inspector Amazon Auto-scaling Amazon IAM (Identity and Access Management) Dynamo DB Amazon SQS (Simple Queue Service) AWS Athena Amazon Managed Images (AMI) and CodeCatalyst).
2. Experience with large migration projects to cloud.
3. Experience demonstrating strong technical and people skills to liaison between technical business and leadership teams.
4. Possession of an AWS Database Specialty certification. The state will consider other types of certificates. Six (6) points will be given for every twelve (12) months of experience for a maximum of thirty (30) points.
5. Experience with data replication data sharing & data modeling.