Database Administrator

DecisionPoint is looking for a Database Administrator to join the Cloud Services (CS) team.

The CS team maintains the ARTRANS AWS cloud environments and DevSecOps platform.

In this role you will support the ARTRANS Amazon Web Services (AWS) cloud environments by providing database administration, modernization guidance, and secure database operations.

As a Database Administrator you will manage and support AWS RDS instances and related database platforms, assist with code-based deployment procedures, perform database security checks and remediation.

In addition, you will help sustain legacy databases while supporting their transition to modernized cloud-based solutions.

• Architect and execute secure migrations of highly available production databases from self-managed AWS EC2 instances to fully managed AWS RDS in accordance with DoD Cloud Computing SRG requirements.
• Integrate automated database migrations and updates into tools like GitLab CI/CD using database schema migration tools (e.g., Liquibase or Flyway).
• Define, build, and maintain database infrastructure as code (IaC) using Terraform.
• Implement, configure, and maintain database hardening following applicable DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) for SQL Server, PostgreSQL, MySQL, and Oracle hosted on AWS EC2 and RDS.
• Coordinate and cooperate with IA/Cyber teams as required.
• Complete all NIST 800-53 Rev 5 artifacts for AWS RDS and Databases on EC2 instances.
• Enforce FIPS 140-2/3 validated encryption protocols for data-at-rest (AWS KMS/Customer Managed Keys) and data-in-transit (TLS 1.3/mTLS).
• Implement robust key rotation and secrets management via HashiCorp Vault.
• Enforce Principle of Least Privilege and Role-Based Access Control (RBAC).
• Integrate database authentication with DoD enterprise identity providers (PKI, CAC/mTLS authentication, SAML/OIDC).
• Configure detailed database audit logging in compliance with NIST SP 800-53 / RMF controls.

Route continuous audit telemetry into SIEM solutions and build real-time monitoring dashboards via Grafana.

• Actively scan, assess, and remediate CVEs, IAVMs/IAVAs, and misconfigurations identified via automated database scanners; support artifact generation for Authority to Operate (ATO) packages.