Title: Systems Engineer, AWS and Linux Location: Tampa United States Job Description: Working with Us Challenging. Meaningful. Life-changing. Those aren't words that are usually associated with a job. But working at Bristol Myers Squibb is anything but usual. Here, uniquely interesting work happens every day, in every department. From optimizing a production line to the latest breakthroughs in cell therapy, this is work that transforms the lives of patients, and the careers of those who do it. You'll get the chance to grow and thrive through opportunities uncommon in scale and scope, alongside high-achieving teams. Take your career farther than you thought possible. Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives. Read more: careers.bms.com/working-with-us. Key Responsibilities Linux Platform & OS Operations - Own Linux OS and platform administration for scientific environments, including EC2 servers and workstations, ensuring reliable, secure, and compliant operations. - Manage system lifecycle activities such as package installation, maintenance, patching, service restarts, and environment stabilization with minimal disruption to users. - Lead OS level vulnerability remediation, coordinating maintenance windows and validating service restoration post patching. - Administer Linux storage and shared access (e.g., logical volumes, NFS/FUSE/SMB mounts, automount configurations) to ensure consistent and reliable user access. - Manage Unix identity and access controls, including group membership and directory service integration, to enable timely and appropriate access to IPS systems. - Support migration and modernization initiatives across Linux environments in partnership with platform and application teams. Cloud Infrastructure Support & Operations (AWS) - Provide operational support of Scientific AWS environments, ensuring secure, resilient provisioning and day‑to‑day support for cloud‑based workloads. - Provision and support Linux EC2 infrastructure for scientists and engineers. - Own AWS IAM operations, including user and role lifecycle management, access key rotation, and permissions policy administration. - Manage Amazon S3 storage and access patterns, supporting internal and external data sharing, archival restores, and secure data transfer workflows. - Support core AWS services (e.g., EC2, S3, load balancing, Lambda, Storage Gateway) through troubleshooting, maintenance, and operational support. - Monitor and optimize cloud costs, leveraging cost‑management tools to track spend, identify optimization opportunities, and support rightsizing efforts. Qualifications & Experience General - Bachelors in a related field or relevant certifications in lieu of a degree - 5+ years' experience in AWS and Linux administration Linux & Systems - Strong Linux system administration and command line troubleshooting experience in production environments. - Experience with shell scripting and automation supporting operational workflows, validation, and access management. - Hands on experience with OS level security patching, vulnerability remediation, and maintenance coordination. - Proficiency managing Linux storage, shared filesystems, and access controls (e.g., NFS/SMB/FUSE, automounts, Unix identity). - Experience managing SSL/TLS certificate lifecycle and maintaining certificate inventories. AWS & Cloud Operations - Working knowledge of AWS services used in platform operations, including EC2, IAM, S3, and Lambda. - Practical experience administering AWS IAM (users, roles, access keys, least privilege policies). - Experience managing S3 storage and secure data sharing patterns for internal and external consumers. - Familiarity with AWS CLI usage, credential management, and cloud operational troubleshooting. Tools & Platforms - Linux systems and shell environments. - AWS Console and core services (IAM, EC2, S3). - ServiceNow or equivalent ITSM platform. - Familiarity with Git/GitHub workflows and developer enablement practices. - Programming or automation experience in one or more languages (e.g., Python, TypeScript), including AWS automation. - Experience with or interest in AI assisted development tools and agentic coding assistants. If you come across a role that intrigues you but doesn't perfectly line up with your resume, we encourage you to apply anyway. You could be one step away from work that will transform your life and career. Compensation Overview: Cambridge Crossing: $108,650 - $131,655 Princeton - NJ - US: $98,770 - $119,686 Tampa - FL - US: $98,770 - $119,686 The starting compensation range(s) for this role are listed above for a full-time employee (FTE) basis. Additional incentive cash and stock opportunities (based on eligibility) may be available. The starting pay rate takes into account characteristics of the job, such as required skills, where the job is performed, the employee's work schedule, job-related knowledge, and experience. Final, individual compensation will be decided based on demonstrated experience. Eligibility for specific benefits listed on our careers site may vary based on the job and location. For more on benefits, please visit https://careers.bms.com/life-at-bms/. Benefit offerings are subject to the terms and conditions of the applicable plans in effect at the time and may require enrollment. Our benefits include: - Health Coverage: Medical, pharmacy, dental, and vision care. - Wellbeing Support: Programs such as BMS Well-Being Account, BMS Living Life Better, and Employee Assistance Programs (EAP). - Financial Well-being and Protection: 401(k) plan, short- and long-term disability, life insurance, accident insurance, supplemental health insurance, business travel protection, personal liability protection, identity theft benefit, legal support, and survivor support. Work-life benefits include: Paid Time Off - US Exempt Employees: flexible time off (unlimited, with manager approval, 11 paid national holidays (not applicable to employees in Phoenix, AZ, Puerto Rico or Rayzebio employees) - Phoenix, AZ, Puerto Rico and Rayzebio Exempt, Non-Exempt, Hourly Employees: 160 hours annual paid vacation for new hires with manager approval, 11 national holidays, and 3 optional holidays Based on eligibility*, additional time off for employees may include unlimited paid sick time, up to 2 paid volunteer days per year, summer hours flexibility, leaves of absence for medical, personal, parental, caregiver, bereavement, and military needs and an annual Global Shutdown between Christmas and New Years Day. All global employees full and part-time who are actively employed at and paid directly by BMS at the end of the calendar year are eligible to take advantage of the Global Shutdown. - Eligibility Disclosure: The summer hours program is for United States (U.S.) office-based employees due to the unique nature of their work. Summer hours are generally not available for field sales and manufacturing operations and may also be limited for the capability centers. Employees in remote-by-design or lab-based roles may be eligible for summer hours, depending on the nature of their work, and should discuss eligibility with their manager. Employees covered under a collective bargaining agreement should consult that document to determine if they are eligible. Contractors, leased workers and other service providers are not eligible to participate in the program. Uniquely Interesting Work, Life-changing Careers With a single vision as inspiring as "Transforming patients' lives through science ", every BMS employee plays an integral role in work that goes far beyond ordinary. Each of us is empowered to apply our individual talents and unique perspectives in a supportive culture, promoting global participation in clinical trials, while our shared values of passion, innovation, urgency, accountability, inclusion and integrity bring out the highest potential of each of our colleagues. On-site Protocol BMS has an occupancy structure that determines where an employee is required to conduct their work. This structure includes site-essential, site-by-design, field-based and remote-by-design jobs. The occupancy type that you are assigned is determined by the nature and responsibilities of your role: Site-essential roles require 100% of shifts onsite at your assigned facility. Site-by-design roles may be eligible for a hybrid work model with at least 50% onsite at your assigned facility. For these roles, onsite presence is considered an essential job function and is critical to collaboration, innovation, productivity, and a positive Company culture. For field-based and remote-by-design roles the ability to physically travel to visit customers, patients or business partners and to attend meetings on behalf of BMS as directed is an essential job function. Supporting People with Disabilities BMS is dedicated to ensuring that people with disabilities can excel through a transparent recruitment process, reasonable workplace accommodations/adjustments and ongoing support in their roles. Applicants can request a reasonable workplace accommodation/adjustment prior to accepting a job offer. If you require reasonable accommodations/adjustments in completing this application, or in any part of the recruitment process, direct your inquiries to adastaffingsupport@bms.com. Visit careers.bms.com/eeo-accessibility to access our complete Equal Employment Opportunity statement. Candidate Rights BMS will consider for employment qualified applicants with arrest and conviction records, pursuant to applicable laws in your area. If you live in or expect to work from Los Angeles County if hired for this position, please visit this page for important additional information: https://careers.bms.com/california-residents/ Data Protection We will never request payments, financial information, or social security numbers during our application or recruitment process. Learn more about protecting yourself at https://careers.bms.com/fraud-protection. Any data processed in connection with role applications will be treated in accordance with applicable data privacy policies and regulations. If you believe that the job posting is missing information required by local law or incorrect in any way, please contact BMS at TAEnablement@bms.com. Please provide the Job Title and Requisition number so we can review. Communications related to your application should not be sent to this email and you will not receive a response. Inquiries related to the status of your application should be directed to Chat with Ripley. R1602603 : Systems Engineer, AWS and Linux

Role Description IT@JH Enterprise Directory and Messaging is seeking a Sr. Systems Engineer who is responsible for administering and maintaining the institution’s enterprise email infrastructure, including the JH Email Gateway (Cisco IronPort), the Sympa ListServ bulkmail distribution service, and the Microsoft Exchange environment. This role supports all users with a Johns Hopkins mailbox—faculty, staff, students, clinical and administrative departments, and affiliated organizations that rely on the enterprise messaging platform. The position works primarily with Windows based systems, with some Linux components, and manages both ticket based and project-based assignments, including security tasks, system maintenance, on-call support, and cross departmental work with groups such as Legal, HR, and IT security. The role operates with a high degree of independence and is expected to provide expert level engineering, troubleshooting, and operational continuity for these mission critical services. Qualifications - Bachelor's Degree. - Six years related experience. - Additional education may substitute for required experience, and additional related experience may substitute for required education beyond a high school diploma/graduation equivalent, to the extent permitted by the JHU equivalency formula. Requirements - Advanced proficiency in PowerShell and Linux based scripting for automation and system management. - Strong expertise in Microsoft Active Directory, Azure AD, and related identity management technologies. - Experience with Splunk or similar log analysis platforms for monitoring, threat detection, and operational troubleshooting. - Familiarity with email security standards, vulnerability assessment practices, CVE analysis, and implementing security best practices across enterprise messaging systems. Benefits - Starting Salary Range: $85,500 - $149,800 Annually (Commensurate with experience). - Employee group: Full Time. - Schedule: Mon-Fri 8:30-5:00. - FLSA Status: Exempt. - Location: Remote. Company Description - Department name: IT@JH Enterprise Directory and Messaging. - Personnel area: University Administration.

Role Description This is a full-time direct hire position and you must currently have an active Secret Security Clearance or above. We are not able to offer visa sponsorship, 1099 status, or work with C2C for this role. The mission of the End User Core Build (EUCB) team is to enhance and support the Navy Enterprise Network (NEN) end user environment including all stages of creating and maintaining the standard end user device core build for delivery, upgrade, and security updates. As the Senior Engineer Microsoft SME, you will be responsible for creating, managing, and seamlessly delivering the Windows desktop core build ensuring quality, accuracy, and precision in all known configurations. You will provide technical excellence and guidance to your team while striving for continual improvement in everything you do. You will work in a fast-paced, time-critical environment supporting the Warfighter and bringing innovative change and value to the entire Navy/Marine Corps Intranet (NMCI). Responsibilities: - Ensure the quality delivery and success of the End User Core Build while meeting or exceeding all Government Service Level Requirements. - Actively participate in the Windows Technology Adoption Program (TAP) and Defense Information Systems Agency (DISA) Secure Host Baseline (SHB) process to beta test and influence future build releases. - Maintain and manage vendor relationships and support contracts. - Design, configure, integrate, implement, and manage the Unclassified, SECRET, and Releasable to Allies (REL-A) End User Core Images for all current and future operating systems. - Submit a revised cybersecurity authorization package for each monthly core image to the Government for approval. - Ensure each monthly core image release shall be available for shipment and/or download within one week of the official release of the triggering vendor’s Monthly Update. - Prepare and maintain 5-year Core Build Plan documentation. - Develop, submit, and execute a mitigation plan to resolve known and potential compatibility issues and vendor updates with other End User Core Build software, Information Assurance (IA) settings, IA tools, network infrastructure, network operations, and standard hardware configurations. - Report issues impacting the End User Core Build and describe mitigation plans during Executive Leadership Team meetings. - Ensure that the new build is thoroughly tested for error-free distribution. - Ensure accreditation documentation is maintained and certification is current. - Standardize and improve the core build methodology and delivery. - Identify and mitigate vulnerabilities with short suspense response and testing. - Apply DoD security standards. - Ensure required documentation is quickly, thoroughly, and accurately completed. - Review root cause analysis documentation for issues encountered. - Ensure Government software catalogs are accurate and updated in a timely manner. - Ensure all processes and procedures are strictly followed and suggest areas for improvement. - Provide technical support and troubleshooting, as required, with possible after-hours or on-call requirements. - Maintain an awareness of upcoming software patches, fixes, and releases. - Work in a diverse team environment. Qualifications - SECRET security clearance required with experience working in the DoD or DON environment. - Bachelor's Degree in Computer Science, MIS, Business, or related field with 10 years of relevant experience. - A DoD 8570 Information Assurance Technician (IAT) Level II certification is required. - An Information Technology Infrastructure Library (ITIL) version 3 Foundation certification is preferred. - Demonstrated expertise with Windows PowerShell scripting and automation. - Experience with System Center Configuration Manager (SCCM) 2007/12 or Microsoft Endpoint Configuration Manager (MECM) Current Branch design, configuration, and integration. - Experience with Windows Server 2012 R2 - 2019 platforms. - Excellent communications skills are required. - In-depth knowledge of the Microsoft Windows 10/11 operating systems and one or more of the following: Microsoft Active Directory, Tanium, and/or HP Radia is required. - General understanding of Commercial Off-the-Shelf (COTS) and Government Off-the-Shelf (GOTS) applications. Requirements - Must have an active Secret Security Clearance or above. - Preferred location: San Diego, CA - Can be Remote, Nationwide for a highly qualified candidate. Benefits - Health and Wellbeing: Health, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program. - Financial Benefits: Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement. - Paid Time Off: PTO and Sick Leave (starting at 20 days per year) & Holidays (10 per year), Parental Leave, Military Leave, Bereavement. - Additional Perks: Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program.

• Define and own the end-to-end system architecture across hardware, firmware, host software, and cloud platforms. • Architect a scalable, multi-tenant device management platform enabling remote updates, monitoring, and analytics. • Lead hardware architecture for USB-C, Thunderbolt (TB4/TB5), USB4, and power delivery systems. • Define firmware architecture including secure boot, remote firmware updates / OTA updates, device monitoring, telemetry, and diagnostics. • Establish and own security architecture across device and cloud ecosystems. • Translate product strategy into technical roadmaps, reference architectures, and scalable solutions. • Direct and manage external development partners (ODMs, firmware vendors, cloud teams). • Conduct architecture and design reviews; act as the final technical decision-maker. • Partner cross-functionally with Product Management, Customer & Partner Success, Marketing and Customer Support teams. • Act as a technical evangelist supporting StarTech.com’s connected device vision internally & externally. • Define the host-side software architecture, including Windows applications, firmware update utilities, and device management tooling, while establishing clear boundaries and interfaces between firmware, host software, and cloud services. • Establish enterprise deployment patterns using SCCM and Intune, including silent execution, detection methods, and logging/diagnostics, while evaluating and selecting suitable technology stacks for host applications (e.g., native Windows frameworks vs. web-based UI).