Information Security Engineer

Posting Date

Application Deadline

Pay Range

Job Type

Department

About the Position

The Information Security Engineer provides technical execution of the Information Security Program led by the Chief Information Security Officer.  The InfoSec Program supports a Defense-in-Depth security model utilizing security tools, policies, procedures and practices to identify, manage, and reduce cybersecurity risks to the County.  The Security Engineers work under the direction of the Enterprise Security Architects to implement and manage security controls within the County’s data systems and infrastructure.

About Us

Are you looking for a career in a dynamic organization that embraces a can-do spirit? Look no further than Maricopa County’s Enterprise Technology & Innovation! 

We are a team that prides ourselves on leveraging technology to create digital transformations. We look for ways to bring about innovative solutions while providing top-notch customer service. Apply today and become part of the team that makes a lasting impact on the future of technology at Maricopa County. 

Proud to Offer

• Work with a greater purpose

• Tuition reimbursement

• Exceptional work-life balance, with hybrid and alternative work schedule options

• Opportunities for growth and development within Maricopa County

• Low-cost, high-value healthcare for you and your qualifying dependents

• Child care benefits, including access to our on-site center, Maricopa County Kids Club, dedicated to serving Maricopa County families

• Paid vacation, sick time, and parental leave

• Extensive wellness program, including an incentive

• Enrollment in the Arizona State Retirement System, a defined retirement benefit requiring a 11.98% monthly contribution rate that includes a 100% employer match on Day 1

• Want to learn more about the County’s Qualifying and Compensation Philosophy? Follow this link to learn more!  Work With Us | Maricopa County, AZ

We Require

• Five years of related information technology experience

• Three years of experience in a role as an Information Security professional

• One year of technical engineering experience in platforms covering the following Information Security domains:

  • Identity and Access Management (IAM)

  • Data Security and Data Loss Prevention (DLP)

  • Application Security Testing and Validation, including SAST and/or DAST

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Information Systems, or a closely related technical field

• A combination of post-secondary education and/or job-related experience may substitute for the education requirement on a year-for-year basis.

Other Requirements

• Successful candidates must currently possess, or have the ability to obtain, a valid Arizona Driver's license by the time of hire

• Currently hold and maintain at least one of the following certifications:

  • Certified Information Systems Security Professional (CISSP)

  • Certified Cloud Security Professional (CCSP)

  • CompTIA CySA+

  • Certified Ethical Hacker (CEH)

  • Offensive Security Certified Professional (OSCP)

  • Or similar Information Security Certification

• Information Security platform administration experience

We Also Value

• Five years of hands-on systems, security engineering, or technical platform administration experience, which includes one of the following:

  • Senior-level systems or security platform administration

  • Linux server administration, preferably Red Hat Enterprise Linux (RHEL)

• Two years of experience in any one or more of the following Information Security areas:

  • Security compliance and frameworks

  • Security assessment

  • Development and execution of gap analyses

  • Development, implementation, or analysis of security controls.

  • Experience in platform lifecycle management including selection, configuration, implementation, onboarding and offboarding

• Experience with Active Directory and/or Microsoft Entra ID

• Experience creating formal technical documentation

• Experience performing security tool integration and automation

• Experience performing vulnerability analysis

• Experience scripting or programming, preferably PowerShell and/or Python

• Proficiency with the following:

  • Security Control Testing and Technical Validation

  • AI Security Controls

  • Microsoft Office Suite products, including Excel

• Demonstrated capability to do complex problem solving, advanced troubleshooting, and critical thinking

Job Contributions

• Administers, maintains, configures, integrates, troubleshoots, and optimizes Information Security platforms and technologies, including but not limited to privileged access management, identity and access management, data security and data loss prevention, cloud access security broker technologies, email security, endpoint detection and response, Security Information and Event Management (SIEM), application security testing, and security validation technologies.

• Develops and maintains standard operating procedures, technical documentation, system security plans, systems recovery plans, and other operational documentation for Information Security managed platforms and services.

• Serves as a subject matter expert for Information Security and County Departments for technical security engineering projects, platform integrations, implementation activities, support, and advanced troubleshooting.

• Provides advanced technical support via Information Technology Service Management (ITSM) system and implementation assistance for Information Security platforms, including configuration, integration, troubleshooting, tuning, and technical issue resolution.

• Evaluates security technologies, configurations, integrations, data, and operational processes to identify opportunities for technical improvement, automation, control effectiveness, and platform optimization.

• Performs technical security analysis and assists with risk assessments, security evaluations, validation activities, and communication of identified risks and recommended corrective actions.

• Coordinates implementation and validation of security standards and controls for infrastructure, including servers, endpoints, mobile devices, network devices, and other computing platforms in collaboration with County IT teams.

• Coordinates implementation and validation of security standards and controls for hosted and on-premises applications, services, cloud technologies, and operating systems in collaboration with County IT teams.

• Other Job Duties as assigned.

Working Conditions

• Exerting 50-100 lbs. occasionally, 10-25 lbs. frequently, or up to 10-20 lbs. constantly.

• Position is typically office or administrative work and is not substantially exposed to adverse environmental conditions.

Selection Procedure

• Consideration will only be given to candidates who submit online applications

• Candidates will be contacted primarily through email and their Workday online application profile

• Must pass a pre-employment background and/or fingerprint investigation as required by statute or policy, including drug and alcohol testing requirements for positions designated as safety-sensitive

Maricopa County is an equal opportunity employer and is committed to providing equal employment opportunities to all applicants. If you require a reasonable accommodation during the application process or to perform the essential functions of the position under the Americans with Disabilities Act (ADA), please contact [email protected] to initiate the interactive process.

Apply Now!