Data Engineer

Duration: 12+ Months Location: MN-Rochester, 100% Remote Overview: Every Turnberry consultant belongs to a practice, an internal group of consultants and leaders with shared experience and expertise. Each of these practices aligns to one of the core services Turnberry offers to clients. As a Data Engineer, you will join Turnberry's Data Strategy and Intelligence practice and service. This service provides insights into company data, advanced analytics solutions, robust data governance, and tailored solutions for specific data challenges. Responsibilities • Platform Configuration and Deployment Completion • Complete final configuration and hardening of the Globus Connect Server (GCS v5) deployment on GCP Compute Engine VMs within the Data DMZ • Configure and validate Globus Storage Gateways and S3 Storage Connectors for ingress and egress GCP buckets • Configure Globus collections (Managed and Guest) aligned with data access policies and identity provider restrictions • Validate end-to-end data transfer workflows including ingress, egress, and staging collection transfers across the Service Connector (SC) boundary into the MCC VPC • Configure DNS, authentication flows (OAuth/OpenID Connect via Entra ID), and endpoint registration within Globus.org • User Onboarding and Research Customer Support • Onboard initial research user groups to the Globus platform, providing hands-on support for first transfers • Develop and document standardized user onboarding procedures, including Sailpoint provisioning workflows and Globus Web App access • Provide Tier 1/2 operational support for Globus users — troubleshooting transfer failures, stalled transfers, permission issues, connectivity problems, and performance optimization • Coordinate with Globus vendor support for escalated issues using the established Globus support process • Infrastructure Maintenance and Operations • Monitor and maintain Globus Connect Server VM health, GCS services, and GCP bucket lifecycle policies • Manage Globus endpoint configurations including storage gateways, identity provider settings, path restrictions, and access policies • Perform ongoing performance tuning — optimizing GridFTP concurrency, parallelism, data channel configurations, and transfer parameters for high-throughput workloads • Monitor transfer activity, usage patterns, and audit logs for operational and compliance reporting • Manage GCS software updates, patches, and version upgrades • Support disaster recovery planning and testing for the Globus platform • Security and Compliance • Implement and enforce security controls aligned with ISA, BAA, and NIST frameworks • Manage identity provider configurations and access controls (RBAC) within the Globus platform • Ensure data governance policies are enforced — including collection-level permissions, path restrictions, and transfer audit logging • Support TPRM and Risk/OIS requirements as they relate to Globus operations • Knowledge Transfer and Documentation • Produce comprehensive technical documentation: runbooks, SOPs, architecture diagrams, troubleshooting guides, and operational playbooks • Participate in the Globus Orientation Session from the Architecture team and help translate session content into operational procedures • Transfer knowledge to staff to enable long-term self-sufficiency • Document lessons learned from initial user onboarding and operational support activities • Collaboration and Governance • Navigate client governance, change management, and approval processes for platform changes • Collaborate with the Architecture team, Storage/Infrastructure team, and Research stakeholders • Coordinate with ADO repo owners for configuration and state management • Provide input into long-term MFT operations planning and AI-operations integration Qualifications • Education • Bachelor's degree in Computer Science or Engineering from an accredited University or College • Or • Associate’s degree in Computer Science or Engineering from an accredited University or College with two (2) years of experience • Technical Skills • Globus Platform Expertise (Critical) • 3+ years hands-on experience with the Globus platform, including Globus Connect Server v5 deployment, configuration, and administration • Deep understanding of the Globus ecosystem: endpoints, collections (managed and guest), storage gateways, storage connectors (S3, POSIX), and the Globus Web App • Experience with GridFTP protocol — concurrency, parallelism, data channel tuning, and performance optimization for large-scale transfers • Familiarity with Globus Auth — OAuth 2.0/OpenID Connect integration, federated identity management, and identity provider configuration • Experience with Globus Flows for workflow automation and scheduled/recurring transfer operations • Experience with Globus CLI and Globus Python SDK for scripting and automation • Familiarity with Globus vendor support engagement processes • Google Cloud Platform (GCP) • Hands-on experience with GCP Compute Engine (VM provisioning, management, and maintenance) • Experience with GCP Cloud Storage (S3-compatible buckets, lifecycle policies, IAM, service accounts) • Understanding of GCP networking — VPCs, firewall rules, DNS, ingress/egress controls, and DMZ architecture • Experience with GCP IAM, service accounts, and RBAC • Linux Systems Administration • Strong Linux administration skills (the Globus Connect Server runs on Linux VMs) • Proficiency with shell scripting (Bash), system monitoring, log analysis, and troubleshooting • Experience with package management, service configuration, and security hardening on Linux • Networking and Security • Understanding of network protocols: TCP/IP, HTTPS, GridFTP, DNS • Experience configuring firewall rules for high-port-range protocols (TCP 50000–51000) • Familiarity with Zero-Trust security principles and DMZ architecture patterns • Understanding of HIPAA compliance as it applies to data transfer and PHI handling in healthcare environments • Data Transfer and MFT Concepts • Broad understanding of Managed File Transfer principles — secure transfer protocols, audit logging, compliance, and data governance • Experience supporting large-scale data transfers (terabyte- to petabyte-scale) in research, academic, or healthcare environments • Familiarity with other MFT tools (Signiant, Cleo, or similar) is a plus • Other Requirements • Self-directed problem solver – Identify issues, research solutions, and propose fixes without waiting for detailed instructions. Globus troubleshooting often requires deep dives into different layers of the stack (application, performance, networking, user-support). • Strong communicator – Able to explain complex technical concepts to both technical staff and research customers; produce clear, concise documentation. • Enable others – Actively transfer knowledge to internal team members; create operational runbooks and training materials that enable the team to assume full ownership. • Customer-oriented – Comfortable working directly with research users to troubleshoot issues and guide them through data transfer workflows. • Governance-aware – Navigate change management, approval processes, and security review requirements effectively. • Proactive – Anticipate operational needs, identify process improvements, and propose solutions for long-term platform sustainability. Preferred Qualifications • Experience deploying Globus in a healthcare or regulated environment (HIPAA, NIST) • Familiarity with Azure DevOps (ADO) for config/state management and CI/CD pipelines • Experience with Terraform/Infrastructure as Code for GCP resource provisioning • Knowledge of Sailpoint or similar identity governance platforms for user provisioning • Experience with Entra ID (Azure AD) federation and SSO integration • Familiarity with High-Performance Computing (HPC) environments and research data workflows • Experience with monitoring/observability tools (Prometheus, Grafana, GCP Cloud Monitoring) • Understanding of Box.com integration patterns (Globus + Box complementary architecture) The salary range for this role is $85,000 to $120,000 or the hourly equivalent. Pay is based on several factors including but not limited to education, work experience, certifications, etc. In addition to your salary, Turnberry Solutions offers benefits such as a comprehensive healthcare package (medical, dental, vision), disability and group term life insurance, health and flexible spending accounts, a utilization bonus, 401(k) with match, flexible time off for salaried employees, parental leave for salaried employees, and flexible work arrangements (all benefits are subject to eligibility requirements). No matter where or when you begin a career with Turnberry, you'll find a far-reaching choice of benefits and incentives. At Turnberry, we are committed to creating a positive and connected work environment for all and are fully invested in and focused on hiring and growing a diverse team of high performers. We believe that uniqueness in ideas, experiences, and backgrounds make us a better Turnberry: Turnberry is an Equal Employment Opportunity employer, and recruits, employs, trains, compensates, and promotes regardless of age, ancestry, family medical or genetic information, gender identity and expression, marital, military, or veteran status; national and ethnic origin; physical or mental disability; political affiliation; pregnancy; race; religion; sex; sexual orientation; and any other protected characteristics. Americans With Disabilities Act (ADA) Turnberry will provide reasonable accommodation with our application process upon request as required to comply with applicable laws. If you have a disability and require accommodation assistance in this application process, please send an email to our Human Resources department at turnberryhr@turnberrysolutions.com.