Senior Security Engineer

Looking for a rewarding career in the fast-paced technology industry? Look no further! The Department of Technology & Information (DTI) is Delaware’s central IT organization committed to providing technology services and collaborative solutions for Delaware while working to improve the lives of Delawareans through advanced technologies that innovate government services. Employment with DTI is an opportunity to work in a collaborative environment that offers opportunities for professional development.

DTI employees have the chance to work with 'best in class IT companies' offering our employees experience operating with some of the most talented in their field. In addition to recruiting and retaining the best and brightest, DTI acknowledges and values the diversity of our employees. DTI recognizes that fostering a diverse workforce provides remarkable benefits in terms of innovative thinking, increased collection of skills and experiences, greater teamwork, and higher morale.

To learn more visit DTI’s Website at (Use the "Apply for this Job" box below). DTI offers a robust hybrid work policy for employees whose job duties are conducive to working remotely.

The principal responsibility is to provide highly effective security engineering support for DTI’s cloud environments, applications, and identity services. Services will be delivered efficiently, meet the needs of DTI and other state agencies, and comply with DTI policies and procedures. The position will work collaboratively with infrastructure, application development, security, and agency teams to design, implement, maintain, and troubleshoot security controls.

• Cloud security platforms, services, and configuration management.
• Cloud identity and access management, privileged access, and secrets management.
• IAM administration and support, including single sign-on (SSO), multifactor authentication (MFA), application integrations, access policies, and user lifecycle management.
• Application and application programming interface (API) security.
• Application security testing, secure code review, and vulnerability remediation.
• Secure architecture reviews and threat modeling.
• Security automation, infrastructure as code, and integration of security controls into development and deployment pipelines.
• Troubleshooting cloud, application, and identity security issues in collaboration with technical teams and vendors.

Applicants who do not possess the preferred qualification will still be eligible to compete for this position if job requirements are met.

• Possess a bachelor’s degree in information technology, computer science, cybersecurity, or a related field.
• Possess a certification in cloud cybersecurity, application security, or identity and access management relevant to the assigned services.
• Possess experience integrating applications with Okta using SAML, OpenID Connect (OIDC), OAuth 2.0, or SCIM.
• Possess experience securing cloud-native applications, containers, serverless services, or software supply chains.
• Possess experience applying NIST security frameworks, CIS Benchmarks, or OWASP application security guidance.

Job Requirements for Senior Security Engineer

• Possess a minimum of 5 years of hands-on experience in an enterprise IT environment, including cybersecurity, infrastructure engineering, or software development.
• Possess a minimum of 3 years of technical engineering experience in cloud security and/or application security, including hands-on experience in both areas.
• Possess experience implementing and supporting security controls in at least one major cloud platform, such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud.
• Possess experience identifying, validating, and remediating…